last executing test programs: 13.227256172s ago: executing program 2 (id=813): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000008f00)='./trace\x00', &(0x7f0000008f40), 0x100) io_setup(0x7, &(0x7f0000008fc0)) prlimit64(0x0, 0xe, &(0x7f0000009000)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000009040)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000009080)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000090c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000009100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000009140)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000091c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000009200), 0x10106, 0x2, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000009240)=ANY=[], 0x0, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000009280)="2ae0e7", 0x3, 0x0, &(0x7f00000092c0)={0xa, 0x0, 0xfffffffe, @mcast1}, 0x1c) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000700)=0x6) syz_open_procfs(0x0, &(0x7f0000000a40)='clear_refs\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) 13.160917014s ago: executing program 4 (id=814): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f00000001c0)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$dvb_demux(&(0x7f0000000300), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000340)={0x2, 0x0, 0x1, 0x7, 0x4}) 11.962806309s ago: executing program 2 (id=818): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) memfd_create(&(0x7f0000000340)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2200002, &(0x7f0000000540)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') pread64(r3, &(0x7f00000002c0)=""/9, 0xfdc5, 0x4ac) mkdir(&(0x7f0000000300)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys_mount\x00', &(0x7f0000000bc0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./sys_mount/block/loop0/queue/rotational\x00', 0x40402, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r4, &(0x7f0000000d40)='5', 0x1) mount$overlay(0x0, 0x0, &(0x7f0000000c40), 0x8, &(0x7f0000000c80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) chdir(0x0) socket$key(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, 0x0, 0x4000, 0x54) 11.92887501s ago: executing program 3 (id=819): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000000)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000200)={'wlan1\x00', @random="c20000000100"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000600)=@generic={0x0, 0x10000000002, 0x7fffffff}) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000006c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000700), 0x2, 0x141102) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="44000000f6b130099084e1a2245fe6ddced1545a5a2c3f2e2bc60b881e2ebe3b1b4c7d3b8d185c987b8c161ee7a81607094523abfe30c831e95cc35a04723fd0877d8860140699cec0d2fa6600000000000000651865fdb3713beb6286132b6932dc80a463ec6ef935f810287d9875ffb68b7bc95ac985bf744c6c37bb7048cf337b5c7757357cd7fcfd7565768ab48ef8f034751fc33cc9dd45a8454d4ed4a6c46b7ebfe6b4b3117efff570fb972298104ae2c5a1af6d56a624f4bfbd9b86511022031d84e556f929244bae68251ab32f7195941afc2ae86fc827a0cedec3622e76c9e4cca5f32067fdb648342ef4c9182cabb01faa56814daa60ff34", @ANYRES16=r4, @ANYBLOB="0100040000000100000009000000300003800800030001000000140002007663616e300000000000000000000000080001000100000006000400faff0000"], 0x44}}, 0x0) writev(r2, &(0x7f0000000940)=[{&(0x7f0000000980)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtaction={0x14, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0xb, &(0x7f0000000bc0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x0, 0xe, 0x0, &(0x7f0000000d00)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x187) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000d40)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000079b000/0x1000)=nil, &(0x7f0000c90000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000d07000/0x4000)=nil, 0x0}, 0xfffffffffffffefb) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="4c0000000206010800004fe40000000000080000050001000600000005000400000000000900020074797a3100000000050005000200000012000300686173683a6e65742c706f7274000000"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./sec\x00', &(0x7f00000010c0)='securityfs\x00', 0x0, 0x0) 8.780130159s ago: executing program 2 (id=820): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x368, 0x1d0, 0x368, 0x1d0, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'macvlan1\x00', {}, {}, 0x11, 0x0, 0x9}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}, 0x1d}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010101, @loopback, 0xffffff00, 0xff000000, 'veth1_to_team\x00', 'ip6erspan0\x00', {0xff}, {}, 0x32, 0x0, 0x9}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 8.779860279s ago: executing program 4 (id=821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x4, 0x4, 0x100, 0x0, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 8.693925001s ago: executing program 3 (id=824): r0 = syz_usb_connect(0x0, 0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401007018000010102030109026c0001010080fa090400000aff00000009050102000200000009050202000200000009050302000200000009050402000200000009050502000200000009058102000200000009058202000200000009058302000200000009058402000200000009"], 0x0) syz_usb_ep_read(r0, 0x5, 0x0, 0x0) 8.552037224s ago: executing program 4 (id=825): syz_mount_image$f2fs(&(0x7f0000000400), &(0x7f0000000680)='./file0\x00', 0x1000800, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0], 0x2, 0x5524, &(0x7f0000001100)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7946gNRHEAfjYYyD8FRelzlXRwjBwhZcqIA+QSHCAFuUK6VJyBdDlChCPsCQu7FKwY26vV90nGeGT/eIOgmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0u9qs/zx9cO3W3P29bV+RcTD1jy9AQAAAC7ZVZtl82beXr9K7W9S07t0XUREeXHkXtejmJxljlJOdXf/99P7q3s1/IxoEg6fMU3Hy4j4mI6/b7v+FgAAAOD52q7Wi3a03r7Mhy6IPrWTNuXrT5nyioio5n8ypZWHvPc5kibp9z2OLzni0sRWzDKFtVNu41xpV2n+7sdZu9nJqWhP5cXHjkVm6zsAANCj0dmp31EIAAAAffo8dAHkdt3yXBH/lzKPS4HTs+dfPCYNAAAAeIqKoQsAAAAAOteM/3va/6+2/x8AAAAMo93/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7tqs1yu1ovbs3Z17fJ0xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjH/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9pAXEEdEMQAokBFnq9lpZuiAEUMfAnIEXptYRe+dFmoFWFuIUNZe6CYEQICRS2/g+dWylL2DLcECRmkM92zvkhcUBkX5LPR3p+Xzsnv++zpShfP+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI3fncZJtunkcVwce7xzfyXrn+zrMw/XNxezlsVRnUkfDy9Xd6Juc4kAAABwoo2qO0lZ34cQttKNpayPO5P6Py0/k9X83z+bx2U9v7/uL/uy9s/ab79uv7g7UCcfJzvp9dXh4MLBvFpHPtNj4rl/+Hl+YaL82UsyuSHxB6MXxunkekbfPnr0XnsSnqkjWwDgvzhf9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfxKDxdxlEIYbE1jTNPdu6vHNY/XN9cLNuVBw/Ww9fTc2anSEMI11eHgwu1zma+3bl77+bycDi4XX/wSgihqdHfKaZ/86MZPhxCI9dHcERBXNzsecnneAQN/lICAOBESouW1fVb6cZSdixaCOGvH/bW/69X4jBj/b/98ZXH1bGq9X+/thnOv97arc97d+7ee3P11vKNwY3Bp29d7L/dv3T18uWrvcmzkp4nJgAAAPw/7aJV6/944eD6/7lKHGas/7/4rv9VdaxE/X+o6aJf05kAAACcbs+/+ucf0SHHo3Y7fLm8tna7n2939y/m2wZS/dfOFK1a/ycLTWcFAAAA1GE8ivas/1+rxGHG9f9nfnzp5+o5kxDC2WL9//zKZ8Nr9U1nrtXx78RNzxEAAIBmnS1adf0/nbz/H+++8hCHEN54LY+LrwGcqf5P3v/mp+pY1ff/L9U3xbkUd/PrMem7IbS6TWcEAADASfZU0bJi//d0Y+mTX8592Pb+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/g4AAP//MY062g==") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write(r0, &(0x7f0000001080)='dir .', 0x5) write(r0, &(0x7f00000010c0)='bi', 0x2) 8.372142178s ago: executing program 2 (id=826): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) write$P9_RLERRORu(r0, 0x0, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$P9_RSTATu(r0, 0x0, 0x6c5) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, 0x0) r1 = gettid() write$P9_RREMOVE(r0, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) 8.225445211s ago: executing program 1 (id=827): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/can/rcvlist_all\x00', 0x0, 0x10) read(r1, &(0x7f0000000880)=""/4096, 0x1000) 7.472096747s ago: executing program 1 (id=829): r0 = fsopen(&(0x7f0000000140)='fusectl\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000180)='macvtap\x00', &(0x7f0000000200), 0x0) 7.426382878s ago: executing program 1 (id=830): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001a40)=""/31, 0x1f}, {0x0}], 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000280)=""/73, 0x49, 0x40000063, &(0x7f0000000300)={0x2, 0x4e24, @private=0xa010101}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000740)={@mcast1, @remote, @remote, 0x1, 0x2, 0x5, 0x400, 0xb7, 0xd30048, r3}) syz_emit_ethernet(0x7a, &(0x7f00000007c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000840)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x30, 0x3c, 0x0, @private0, @local, {[@srh={0x2f, 0x4, 0x4, 0x2, 0xe5, 0x70, 0x5, [@private1, @private0]}], {0x4e24, 0x0, 0x8}}}}}}, 0x0) 7.064994756s ago: executing program 4 (id=831): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) memfd_create(&(0x7f0000000340)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2200002, &(0x7f0000000540)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000600)="$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") r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') pread64(r3, &(0x7f00000002c0)=""/9, 0xfdc5, 0x4ac) mkdir(&(0x7f0000000300)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys_mount\x00', &(0x7f0000000bc0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./sys_mount/block/loop0/queue/rotational\x00', 0x40402, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r4, &(0x7f0000000d40)='5', 0x1) mount$overlay(0x0, 0x0, &(0x7f0000000c40), 0x8, &(0x7f0000000c80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) chdir(0x0) socket$key(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, 0x0, 0x4000, 0x54) 6.855574711s ago: executing program 2 (id=832): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001200)={0x34, &(0x7f0000000f80)={0x0, 0x16, 0x10, "7925fdff870042c7e733a2c1cc6f1f35"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.926460224s ago: executing program 3 (id=833): creat(&(0x7f0000000480)='./file0\x00', 0xc9a9c042ad77c5e5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x1000000, &(0x7f0000000d00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) write$FUSE_INIT(r0, &(0x7f0000002dc0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002e40)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004f00)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004f40)='./file0\x00', 0x24c01, 0x8) io_setup(0x6, &(0x7f0000004f80)=0x0) io_submit(r2, 0x2, &(0x7f0000004fc0)=[&(0x7f0000005000)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r1, &(0x7f0000005040)='!', 0xffffff49, 0x3000000000000500}]) dup3(r1, r0, 0x0) 3.925751594s ago: executing program 1 (id=834): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, 0x0) 3.925544794s ago: executing program 0 (id=835): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000000)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000200)={'wlan1\x00', @random="c20000000100"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000600)=@generic={0x0, 0x10000000002, 0x7fffffff}) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000006c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000700), 0x2, 0x141102) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="44000000f6b130099084e1a2245fe6ddced1545a5a2c3f2e2bc60b881e2ebe3b1b4c7d3b8d185c987b8c161ee7a81607094523abfe30c831e95cc35a04723fd0877d8860140699cec0d2fa6600000000000000651865fdb3713beb6286132b6932dc80a463ec6ef935f810287d9875ffb68b7bc95ac985bf744c6c37bb7048cf337b5c7757357cd7fcfd7565768ab48ef8f034751fc33cc9dd45a8454d4ed4a6c46b7ebfe6b4b3117efff570fb972298104ae2c5a1af6d56a624f4bfbd9b86511022031d84e556f929244bae68251ab32f7195941afc2ae86fc827a0cedec3622e76c9e4cca5f32067fdb648342ef4c9182cabb01faa56814daa60ff34", @ANYRES16=r4, @ANYBLOB="0100040000000100000009000000300003800800030001000000140002007663616e300000000000000000000000080001000100000006000400faff0000"], 0x44}}, 0x0) writev(r2, &(0x7f0000000940)=[{&(0x7f0000000980)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtaction={0x14, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0xb, &(0x7f0000000bc0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x0, 0xe, 0x0, &(0x7f0000000d00)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x187) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000d40)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000079b000/0x1000)=nil, &(0x7f0000c90000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000d07000/0x4000)=nil, 0x0}, 0xfffffffffffffefb) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="4c0000000206010800004fe40000000000080000050001000600000005000400000000000900020074797a3100000000050005000200000012000300686173683a6e65742c706f7274000000"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./sec\x00', &(0x7f00000010c0)='securityfs\x00', 0x0, 0x0) 3.920493804s ago: executing program 4 (id=836): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x801, &(0x7f00000000c0)=ANY=[], 0x2, 0x187, &(0x7f0000000100)="$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") openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x416042) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x7, 0x100}, 0x0) r1 = getpid() close(0x3) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90412000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) listen(0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0xa880, 0x97) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000a80)='proc\x00', 0x0, 0x0) listen(r0, 0x5) 3.846130296s ago: executing program 1 (id=837): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x28000600) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e220005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000fffffffffffffffffcffffffffffffff00000000000000000900000000000000000a000000000000000000000080400000000000000000080000000000000000000100000000000044000500fc020000000000000000000000000000000004d36c00000002000000ff0100000000000000000000000000010735000001"], 0xfc}}, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 3.035108604s ago: executing program 3 (id=838): socket$netlink(0x10, 0x3, 0x14) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000"], 0x80}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ptrace$getregs(0xffffffffffffffff, r1, 0x7, &(0x7f0000000000)=""/100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(0x0, &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453d9f9759e0c09e456844131b87ca896fd8a", 0xd1, 0xffffffffffffffff) r5 = add_key$user(0x0, &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r5, r4, r5}, &(0x7f0000000500)=""/68, 0x44, &(0x7f0000000580)={&(0x7f00000005c0)={'sha3-512\x00'}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.993271404s ago: executing program 0 (id=839): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x4, 0x4, 0x100, 0x0, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 2.697073441s ago: executing program 0 (id=840): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x2, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4c00}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79, 0x0, 0x0, 0x258}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x35}, 0x94) 2.695850381s ago: executing program 1 (id=841): syz_mount_image$f2fs(&(0x7f0000000400), &(0x7f0000000680)='./file0\x00', 0x1000800, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0], 0x2, 0x5524, &(0x7f0000001100)="$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") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write(r0, &(0x7f0000001080)='dir .', 0x5) write(r0, &(0x7f00000010c0)='bi', 0x2) 1.911638808s ago: executing program 3 (id=842): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) write$P9_RLERRORu(r0, 0x0, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$P9_RSTATu(r0, 0x0, 0x6c5) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, 0x0) r1 = gettid() write$P9_RREMOVE(r0, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) 1.81607698s ago: executing program 0 (id=843): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10, &(0x7f0000000080)={[{@acl}]}, 0x45, 0x48d, &(0x7f0000000280)="$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") stat(0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000740)={0x3, &(0x7f0000000780)=[{0x4d, 0x0, 0x1, 0x7e000000}, {0x7c, 0x3, 0x0, 0x100000}, {0x6, 0x0, 0x0, 0x1ff}]}) socket$nl_generic(0x10, 0x3, 0x10) 1.79414207s ago: executing program 4 (id=844): r0 = syz_usb_connect(0x0, 0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401007018000010102030109026c0001010080fa090400000aff00000009050102000200000009050202000200000009050302000200000009050402000200000009050502000200000009058102000200000009058202000200000009058302000200000009058402000200000009"], 0x0) syz_usb_ep_read(r0, 0x5, 0x0, 0x0) 779.628493ms ago: executing program 0 (id=845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TDX_FINALIZE_VM(r1, 0xc008aeba, 0x0) 779.201253ms ago: executing program 2 (id=846): syz_usb_connect$uac2(0x5, 0xa5, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000081e04003040000102030109029300030108100a080b0102010720090904000000010120000924010600031b001a06240b01016e0c2403060204290177977c7e09040100000102200009040101010102200010240107ff030200000002ff010000dd09050109ff0304037f082501800cf70a00"], 0x0) 721.904284ms ago: executing program 3 (id=847): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) memfd_create(&(0x7f0000000340)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2200002, &(0x7f0000000540)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000600)="$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") r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') pread64(r3, &(0x7f00000002c0)=""/9, 0xfdc5, 0x4ac) mkdir(&(0x7f0000000300)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys_mount\x00', &(0x7f0000000bc0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./sys_mount/block/loop0/queue/rotational\x00', 0x40402, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r4, &(0x7f0000000d40)='5', 0x1) mount$overlay(0x0, 0x0, &(0x7f0000000c40), 0x8, &(0x7f0000000c80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) chdir(0x0) socket$key(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, 0x0, 0x4000, 0x54) 0s ago: executing program 0 (id=848): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2340, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000840)='fd/3\x00') preadv(r2, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/118, 0x76}], 0x1, 0x5c, 0x3) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/245, 0xf5}], 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x4, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x70bd2d, 0x3508, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x890) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x6b8f, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x10c}}, 0x8000) kernel console output (not intermixed with test programs): ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.339041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.347907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.362152][ T4284] device veth1_macvtap entered promiscuous mode [ 72.373925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.383113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.393015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.402317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.422648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.430555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.440633][ T4273] device veth1_macvtap entered promiscuous mode [ 72.463549][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.480913][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.489339][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.498234][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.507561][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.516255][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.525874][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.534411][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.542921][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.551599][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.565685][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.580875][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.592603][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.605082][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.615851][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.626975][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.638734][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.648767][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.659331][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.671251][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.680521][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.689494][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.699269][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.708218][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.718527][ T4276] device veth0_vlan entered promiscuous mode [ 72.727005][ T4272] device veth0_macvtap entered promiscuous mode [ 72.738038][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.751303][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.760288][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.777913][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.791300][ T4284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.802000][ T4284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.811775][ T4284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.821096][ T4284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.841470][ T4272] device veth1_macvtap entered promiscuous mode [ 72.882268][ T4276] device veth1_vlan entered promiscuous mode [ 72.892898][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.903469][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.949018][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.960074][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.969883][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.981399][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.990920][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.001581][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.012431][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.023621][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.035554][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.074279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.083473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.093983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.103739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.129704][ T4271] device veth0_vlan entered promiscuous mode [ 73.139786][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.151388][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.161517][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.172297][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.185210][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.192565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.205481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.241581][ T4271] device veth1_vlan entered promiscuous mode [ 73.260303][ T4276] device veth0_macvtap entered promiscuous mode [ 73.270774][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.281029][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.289935][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.299084][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.330456][ T4276] device veth1_macvtap entered promiscuous mode [ 73.410913][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.429792][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.440712][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.453059][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.463246][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.473759][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.486626][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.507529][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.516242][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.524263][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.536264][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.544289][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.552848][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.561087][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.570022][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.579966][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.588520][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.597433][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.608276][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.609744][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.624170][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.632812][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.644645][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.656224][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.666354][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.677045][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.691075][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.703151][ T4271] device veth0_macvtap entered promiscuous mode [ 73.717202][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.730490][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.739471][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.748635][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.759585][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.768681][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.777757][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.788268][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.802385][ T4271] device veth1_macvtap entered promiscuous mode [ 73.850367][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.861814][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.874819][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.880093][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.893531][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.904630][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.914715][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.925430][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.938447][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.949167][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.962928][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.973579][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.994910][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.009123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.022050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.032170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.041516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.050430][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.061954][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.072208][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.082765][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.092742][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.103476][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.114208][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.125062][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.135929][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 74.137749][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.141948][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 74.155810][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 74.155829][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 74.161886][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 74.193011][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.219455][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.236726][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.248820][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.258035][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.267116][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.293017][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.304490][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.355541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.400682][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.419362][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.453172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.551894][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.569766][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.613368][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.613613][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.630227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.632962][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.658706][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.686127][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.699160][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.745102][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.753014][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.787173][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.922624][ T4406] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4406] [ 75.018929][ T4410] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.731115][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.739915][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.136497][ T4426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.203654][ T4423] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.293851][ T4432] capability: warning: `syz.2.14' uses 32-bit capabilities (legacy support in use) [ 76.644955][ T4437] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 76.757050][ T4438] loop3: detected capacity change from 0 to 128 [ 76.771112][ T4438] ======================================================= [ 76.771112][ T4438] WARNING: The mand mount option has been deprecated and [ 76.771112][ T4438] and is ignored by this kernel. Remove the mand [ 76.771112][ T4438] option from the mount to silence this warning. [ 76.771112][ T4438] ======================================================= [ 76.805988][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.962459][ T4438] FAT-fs (loop3): bogus number of FAT structure [ 76.969011][ T4438] FAT-fs (loop3): Can't find a valid FAT filesystem [ 78.388245][ T4461] xt_hashlimit: size too large, truncated to 1048576 [ 78.774957][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.783997][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.817607][ T4481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.681209][ T4493] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 79.740049][ T4493] loop3: detected capacity change from 0 to 128 [ 79.802809][ T4493] FAT-fs (loop3): bogus number of FAT structure [ 79.809311][ T4493] FAT-fs (loop3): Can't find a valid FAT filesystem [ 80.248278][ T4386] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 81.099686][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.289059][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.297200][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.365251][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 81.424805][ T4538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.570410][ T22] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 81.750013][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.810647][ T22] usb 3-1: Product: syz [ 81.837299][ T22] usb 3-1: Manufacturer: syz [ 81.879719][ T22] usb 3-1: SerialNumber: syz [ 81.933953][ T22] usb 3-1: config 0 descriptor?? [ 82.265206][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.360986][ T22] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 82.376866][ T22] airspy 3-1:0.0: Could not detect board [ 82.389330][ T22] airspy: probe of 3-1:0.0 failed with error -71 [ 82.421285][ T22] usb 3-1: USB disconnect, device number 2 [ 82.616563][ T4546] loop1: detected capacity change from 0 to 32768 [ 82.759225][ T4546] XFS (loop1): Mounting V5 Filesystem [ 83.102843][ T4546] XFS (loop1): Ending clean mount [ 83.409208][ T4583] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 83.506410][ T4584] loop2: detected capacity change from 0 to 128 [ 83.622756][ T4584] FAT-fs (loop2): bogus number of FAT structure [ 83.629918][ T4584] FAT-fs (loop2): Can't find a valid FAT filesystem [ 84.147881][ T4273] XFS (loop1): Unmounting Filesystem [ 84.440575][ T4603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 84.590838][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.599046][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.619079][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.806981][ T4607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.182864][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 85.196138][ T22] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 85.204283][ T22] usb 4-1: config 0 has no interface number 0 [ 85.254500][ T22] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 85.285199][ T22] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 85.308892][ T22] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 85.323298][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.331799][ T22] usb 4-1: Product: syz [ 85.337164][ T22] usb 4-1: Manufacturer: syz [ 85.341922][ T22] usb 4-1: SerialNumber: syz [ 85.348621][ T22] usb 4-1: config 0 descriptor?? [ 85.366160][ T22] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 85.378366][ T22] nokiaca42v2: probe of ttyUSB0 failed with error -22 [ 85.474539][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.600136][ T4352] usb 4-1: USB disconnect, device number 2 [ 85.617130][ T4352] cypress_m8 4-1:0.35: device disconnected [ 85.664645][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 85.685354][ T7] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 85.710762][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.729424][ T7] usb 5-1: Product: syz [ 85.733642][ T7] usb 5-1: Manufacturer: syz [ 85.741995][ T7] usb 5-1: SerialNumber: syz [ 85.761864][ T7] usb 5-1: config 0 descriptor?? [ 85.864112][ T4629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 86.256563][ T7] airspy 5-1:0.0: usb_control_msg() failed -71 request 0a [ 86.265791][ T7] airspy 5-1:0.0: Could not detect board [ 86.271538][ T7] airspy: probe of 5-1:0.0 failed with error -71 [ 86.281353][ T7] usb 5-1: USB disconnect, device number 2 [ 86.398657][ T4637] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 86.450063][ T4637] loop1: detected capacity change from 0 to 128 [ 86.575778][ T4637] FAT-fs (loop1): bogus number of FAT structure [ 86.582129][ T4637] FAT-fs (loop1): Can't find a valid FAT filesystem [ 86.789071][ T14] cfg80211: failed to load regulatory.db [ 86.953570][ T4588] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.965080][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 87.264500][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.471938][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.480196][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.565281][ T4655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.034637][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 88.064754][ T7] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 88.073160][ T7] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 88.114700][ T4658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 88.149535][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 88.175036][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 88.209688][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 88.230021][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 88.247947][ T7] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 88.257544][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.285127][ T7] usb 4-1: config 0 descriptor?? [ 88.523953][ T7] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 88.607634][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 88.824573][ T4352] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.046780][ T4684] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 89.104969][ T4684] loop1: detected capacity change from 0 to 128 [ 89.200213][ T4684] FAT-fs (loop1): bogus number of FAT structure [ 89.206723][ T4684] FAT-fs (loop1): Can't find a valid FAT filesystem [ 89.393192][ T7] usb 4-1: USB disconnect, device number 3 [ 89.494101][ T7] usblp0: removed [ 89.534487][ T4352] usb 3-1: Using ep0 maxpacket: 32 [ 89.544853][ T4352] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 89.570024][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.578632][ T4352] usb 3-1: Product: syz [ 89.582919][ T4352] usb 3-1: Manufacturer: syz [ 89.588257][ T4352] usb 3-1: SerialNumber: syz [ 89.597089][ T4352] usb 3-1: config 0 descriptor?? [ 90.056128][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.084694][ T4352] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 90.091952][ T4352] airspy 3-1:0.0: Could not detect board [ 90.153236][ T4697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.223849][ T4352] airspy: probe of 3-1:0.0 failed with error -71 [ 90.480737][ T4352] usb 3-1: USB disconnect, device number 3 [ 90.720815][ T4701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 91.308294][ T4724] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 91.404998][ T4725] loop3: detected capacity change from 0 to 128 [ 92.009106][ T4726] netlink: 'syz.1.99': attribute type 3 has an invalid length. [ 92.264360][ C0] sched: RT throttling activated [ 92.304687][ T4725] FAT-fs (loop3): bogus number of FAT structure [ 92.311104][ T4725] FAT-fs (loop3): Can't find a valid FAT filesystem [ 94.082956][ T4588] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.097682][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.125871][ T4738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.502962][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 94.584737][ T2171] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.477294][ T2171] usb 4-1: Using ep0 maxpacket: 32 [ 95.509961][ T2171] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 95.539714][ T2171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.575110][ T2171] usb 4-1: Product: syz [ 95.579325][ T2171] usb 4-1: Manufacturer: syz [ 95.625352][ T2171] usb 4-1: SerialNumber: syz [ 95.648505][ T2171] usb 4-1: config 0 descriptor?? [ 96.041187][ T4777] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.114' sets config #0 [ 97.249144][ T4780] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 97.275907][ T2171] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 97.283116][ T2171] airspy 4-1:0.0: Could not detect board [ 97.294486][ T2171] airspy: probe of 4-1:0.0 failed with error -71 [ 97.315203][ T4778] loop4: detected capacity change from 0 to 128 [ 97.334642][ T4778] FAT-fs (loop4): bogus number of FAT structure [ 97.341045][ T4778] FAT-fs (loop4): Can't find a valid FAT filesystem [ 97.496716][ T2171] usb 4-1: USB disconnect, device number 4 [ 97.507325][ T4386] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.614836][ T4786] netlink: 'syz.1.117': attribute type 3 has an invalid length. [ 97.959418][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 98.155906][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.173933][ T4809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.508074][ T4831] netlink: 'syz.4.134': attribute type 3 has an invalid length. [ 100.822726][ T4835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 100.927844][ T4838] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 101.030035][ T4839] loop0: detected capacity change from 0 to 128 [ 101.552553][ T4839] FAT-fs (loop0): bogus number of FAT structure [ 101.558925][ T4839] FAT-fs (loop0): Can't find a valid FAT filesystem [ 101.804776][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 101.895581][ T33] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.095980][ T4588] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.184586][ T33] usb 2-1: Using ep0 maxpacket: 32 [ 102.232856][ T33] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 102.233071][ T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.233273][ T33] usb 2-1: Product: syz [ 102.233472][ T33] usb 2-1: Manufacturer: syz [ 102.233649][ T33] usb 2-1: SerialNumber: syz [ 102.290124][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.342031][ T4853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.515788][ T33] usb 2-1: config 0 descriptor?? [ 103.053802][ T33] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 103.063773][ T33] airspy 2-1:0.0: Could not detect board [ 103.071089][ T33] airspy: probe of 2-1:0.0 failed with error -71 [ 103.087381][ T33] usb 2-1: USB disconnect, device number 2 [ 104.177718][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 104.199907][ T4882] netlink: 'syz.0.150': attribute type 3 has an invalid length. [ 104.747060][ T4899] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 104.845491][ T4901] loop2: detected capacity change from 0 to 128 [ 106.302951][ T4901] FAT-fs (loop2): bogus number of FAT structure [ 106.311569][ T4901] FAT-fs (loop2): Can't find a valid FAT filesystem [ 107.319368][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.614504][ T4871] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.670451][ T4906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.099019][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 108.661798][ T4945] netlink: 'syz.0.167': attribute type 3 has an invalid length. [ 109.784444][ T4387] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.934651][ T4387] usb 4-1: device descriptor read/64, error -71 [ 110.254627][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.489429][ T4387] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.530601][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.427953][ T4955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.548694][ T4387] usb 4-1: device descriptor read/64, error -71 [ 111.801183][ T4387] usb usb4-port1: attempt power cycle [ 111.931347][ T4963] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 112.028973][ T4964] loop1: detected capacity change from 0 to 128 [ 112.294826][ T4964] FAT-fs (loop1): bogus number of FAT structure [ 112.301140][ T4964] FAT-fs (loop1): Can't find a valid FAT filesystem [ 112.516104][ T14] usb 5-1: device not accepting address 3, error -71 [ 112.857620][ T4973] md: could not open device unknown-block(1,8). [ 112.876373][ T4871] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.490827][ T5001] loop0: detected capacity change from 0 to 512 [ 113.647552][ T5001] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.191786][ T5001] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 114.207221][ T5001] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #11: comm syz.0.185: corrupted inode contents [ 114.247444][ T5001] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #11: comm syz.0.185: mark_inode_dirty error [ 114.266798][ T5001] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.185: invalid indirect mapped block 1 (level 1) [ 114.281884][ T5001] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #11: comm syz.0.185: corrupted inode contents [ 114.305077][ T5001] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 114.314268][ T5001] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #11: comm syz.0.185: corrupted inode contents [ 114.328155][ T5001] EXT4-fs error (device loop0): ext4_truncate:4325: inode #11: comm syz.0.185: mark_inode_dirty error [ 114.349413][ T5001] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 114.359809][ T5001] EXT4-fs (loop0): 1 truncate cleaned up [ 114.365674][ T5001] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.448345][ T4994] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz.0.185: path /33/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 114.484178][ T5011] md: could not open device unknown-block(1,8). [ 114.539162][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 114.814616][ T4387] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.944181][ T5020] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 115.042857][ T5021] loop2: detected capacity change from 0 to 128 [ 115.528035][ T5022] loop4: detected capacity change from 0 to 512 [ 115.559404][ T5021] FAT-fs (loop2): bogus number of FAT structure [ 115.565779][ T5021] FAT-fs (loop2): Can't find a valid FAT filesystem [ 115.762804][ T5022] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 115.771875][ T5022] FAT-fs (loop4): Filesystem has been set read-only [ 115.781645][ T5022] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 115.790432][ T5022] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 116.050678][ T5022] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 116.921687][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 117.290611][ T4387] usb 4-1: device descriptor read/8, error -71 [ 117.505167][ T5053] loop3: detected capacity change from 0 to 512 [ 117.725759][ T5053] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 117.742173][ T5053] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #11: comm syz.3.204: corrupted inode contents [ 117.763126][ T5053] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #11: comm syz.3.204: mark_inode_dirty error [ 117.777735][ T5053] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.204: invalid indirect mapped block 1 (level 1) [ 117.795840][ T5053] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #11: comm syz.3.204: corrupted inode contents [ 117.809478][ T5053] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 117.821270][ T5053] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #11: comm syz.3.204: corrupted inode contents [ 117.837896][ T5053] EXT4-fs error (device loop3): ext4_truncate:4325: inode #11: comm syz.3.204: mark_inode_dirty error [ 117.852343][ T5053] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 117.865310][ T5053] EXT4-fs (loop3): 1 truncate cleaned up [ 117.871136][ T5053] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 117.947606][ T5053] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.204: path /34/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 118.444324][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 118.903074][ T5070] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 119.317076][ T5072] loop0: detected capacity change from 0 to 128 [ 119.639260][ T5072] FAT-fs (loop0): bogus number of FAT structure [ 119.645661][ T5072] FAT-fs (loop0): Can't find a valid FAT filesystem [ 119.795447][ T5077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 119.904525][ T4588] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.364586][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.509374][ T5104] netlink: 'syz.0.220': attribute type 3 has an invalid length. [ 120.534713][ T22] usb 3-1: device descriptor read/64, error -71 [ 120.855302][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.092517][ T22] usb 3-1: device descriptor read/64, error -71 [ 121.314934][ T22] usb usb3-port1: attempt power cycle [ 122.554422][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.593246][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 122.608486][ T22] usb 3-1: device descriptor read/8, error -71 [ 123.044807][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.115050][ T5131] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 123.210545][ T5132] loop3: detected capacity change from 0 to 128 [ 123.239072][ T5132] FAT-fs (loop3): bogus number of FAT structure [ 123.245515][ T5132] FAT-fs (loop3): Can't find a valid FAT filesystem [ 123.514754][ T22] usb 3-1: device not accepting address 7, error -71 [ 123.542661][ T22] usb usb3-port1: unable to enumerate USB device [ 125.006639][ T5163] loop2: detected capacity change from 0 to 4096 [ 125.088813][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 127.495433][ T5173] netlink: 'syz.0.244': attribute type 3 has an invalid length. [ 128.257014][ T2171] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 129.753374][ T2171] usb 4-1: device descriptor read/64, error -71 [ 130.242492][ T5195] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 130.335647][ T5196] loop3: detected capacity change from 0 to 128 [ 130.353421][ T5196] FAT-fs (loop3): bogus number of FAT structure [ 130.359848][ T5196] FAT-fs (loop3): Can't find a valid FAT filesystem [ 131.092948][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 131.634489][ T2171] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 131.824428][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.859174][ T2171] usb 4-1: Using ep0 maxpacket: 8 [ 131.868426][ T2171] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.904583][ T2171] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.937751][ T2171] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 131.960959][ T2171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.983164][ T2171] usb 4-1: Product: syz [ 131.987516][ T14] usb 2-1: device descriptor read/64, error -71 [ 132.009777][ T2171] usb 4-1: Manufacturer: syz [ 132.030809][ T2171] usb 4-1: SerialNumber: syz [ 132.264698][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.445458][ T14] usb 2-1: device descriptor read/64, error -71 [ 132.469292][ T2171] usb 4-1: 0:1 : does not exist [ 132.518435][ T2171] usb 4-1: unit 1 not found! [ 132.555802][ T2171] usb 4-1: unit 9 not found! [ 132.578703][ T14] usb usb2-port1: attempt power cycle [ 132.637987][ T2171] usb 4-1: unit 0 not found! [ 132.856867][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.863621][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.956074][ T5205] loop0: detected capacity change from 0 to 40427 [ 132.994428][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.046386][ T2171] usb 4-1: USB disconnect, device number 11 [ 133.095114][ T14] usb 2-1: device descriptor read/8, error -71 [ 133.127428][ T5205] F2FS-fs (loop0): invalid crc value [ 133.232499][ T5227] netlink: 'syz.4.260': attribute type 3 has an invalid length. [ 135.255519][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.296733][ T5205] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.847871][ T14] usb 2-1: device descriptor read/8, error -71 [ 135.994116][ T14] usb usb2-port1: unable to enumerate USB device [ 136.352635][ T5245] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 136.404642][ T5245] loop1: detected capacity change from 0 to 128 [ 136.468476][ T5245] FAT-fs (loop1): bogus number of FAT structure [ 136.474930][ T5245] FAT-fs (loop1): Can't find a valid FAT filesystem [ 137.132170][ T5254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 139.960843][ T5276] loop0: detected capacity change from 0 to 512 [ 140.261254][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 142.029149][ T5288] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 142.125921][ T5289] loop4: detected capacity change from 0 to 128 [ 142.636797][ T5289] FAT-fs (loop4): bogus number of FAT structure [ 142.643112][ T5289] FAT-fs (loop4): Can't find a valid FAT filesystem [ 142.787496][ T5294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 143.904156][ T5282] loop1: detected capacity change from 0 to 40427 [ 144.015126][ T5282] F2FS-fs (loop1): invalid crc value [ 144.077479][ T5282] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.254916][ T4293] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 146.558365][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 147.098897][ T5348] loop3: detected capacity change from 0 to 512 [ 147.107389][ T4293] usb 5-1: Using ep0 maxpacket: 16 [ 147.218179][ T5349] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 147.317343][ T5350] loop1: detected capacity change from 0 to 128 [ 147.824796][ T5346] loop0: detected capacity change from 0 to 512 [ 147.872467][ T5350] FAT-fs (loop1): bogus number of FAT structure [ 147.878817][ T5350] FAT-fs (loop1): Can't find a valid FAT filesystem [ 148.055228][ T5346] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 148.064034][ T5346] FAT-fs (loop0): Filesystem has been set read-only [ 148.073141][ T5346] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 148.081711][ T5346] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 148.207384][ T5346] syz.0.292 (5346) used greatest stack depth: 20736 bytes left [ 148.287409][ T4293] usb 5-1: device descriptor read/all, error -71 [ 150.203668][ T5378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 150.244438][ T14] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 150.404460][ T14] usb 4-1: device descriptor read/64, error -71 [ 150.637891][ T5383] loop1: detected capacity change from 0 to 512 [ 151.609634][ T5379] loop4: detected capacity change from 0 to 40427 [ 151.671448][ T5379] F2FS-fs (loop4): invalid crc value [ 151.823134][ T5379] F2FS-fs (loop4): Found nat_bits in checkpoint [ 151.974569][ T4293] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 151.992975][ T5379] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 152.174880][ T4293] usb 3-1: Using ep0 maxpacket: 16 [ 152.188900][ T4293] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.239008][ T4293] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.290413][ T4293] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 152.331524][ T4293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.366174][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 152.368191][ T4293] usb 3-1: Product: syz [ 152.404870][ T4293] usb 3-1: Manufacturer: syz [ 152.420096][ T4293] usb 3-1: SerialNumber: syz [ 152.451104][ T4293] usb 3-1: config 0 descriptor?? [ 152.549750][ T14] usb 4-1: device descriptor read/64, error -71 [ 152.692317][ T4293] usb 3-1: USB disconnect, device number 8 [ 152.698322][ T14] usb usb4-port1: attempt power cycle [ 153.115861][ T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 153.416390][ T14] usb 4-1: device descriptor read/8, error -71 [ 153.867075][ T5412] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 153.964087][ T5413] loop4: detected capacity change from 0 to 128 [ 155.263150][ T22] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.302972][ T5413] FAT-fs (loop4): bogus number of FAT structure [ 155.309893][ T5413] FAT-fs (loop4): Can't find a valid FAT filesystem [ 155.444506][ T22] usb 2-1: device descriptor read/64, error -71 [ 155.600055][ T5361] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.754450][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.974448][ T22] usb 2-1: device descriptor read/64, error -71 [ 156.096801][ T22] usb usb2-port1: attempt power cycle [ 156.102902][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 156.196733][ T5427] md: could not open device unknown-block(1,8). [ 156.406338][ T5436] netlink: 620 bytes leftover after parsing attributes in process `syz.4.324'. [ 156.507747][ T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.029189][ T22] usb 2-1: device descriptor read/8, error -71 [ 157.111818][ T5441] EXT4-fs warning (device sda1): ext4_group_extend:1878: need to use ext2online to resize further [ 157.214462][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 157.417621][ T5452] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 157.514103][ T5455] loop1: detected capacity change from 0 to 128 [ 157.547832][ T5455] FAT-fs (loop1): bogus number of FAT structure [ 157.554205][ T5455] FAT-fs (loop1): Can't find a valid FAT filesystem [ 157.994543][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 158.002564][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.013183][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.033982][ T14] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 158.045922][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.152814][ T14] usb 1-1: Product: syz [ 158.157135][ T14] usb 1-1: Manufacturer: syz [ 158.163041][ T14] usb 1-1: SerialNumber: syz [ 158.172939][ T14] usb 1-1: config 0 descriptor?? [ 158.243964][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 158.388029][ T14] usb 1-1: USB disconnect, device number 2 [ 158.624443][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 158.715611][ T4342] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.814659][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 158.827700][ T7] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 158.868714][ T7] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 158.877837][ T4342] usb 3-1: device descriptor read/64, error -71 [ 159.024666][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 159.154723][ T4342] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 159.171069][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.214549][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.225522][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.239893][ T7] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 159.252618][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.270899][ T7] usb 5-1: config 0 descriptor?? [ 159.415343][ T4342] usb 3-1: device descriptor read/64, error -71 [ 159.488767][ T7] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 159.590623][ T5486] loop0: detected capacity change from 0 to 512 [ 159.847761][ T5486] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 159.856744][ T5486] FAT-fs (loop0): Filesystem has been set read-only [ 159.864786][ T5486] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 159.873199][ T5486] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 160.666756][ T5492] loop1: detected capacity change from 0 to 4096 [ 161.253737][ T4342] usb usb3-port1: attempt power cycle [ 161.263088][ T7] usb 5-1: USB disconnect, device number 7 [ 161.273087][ T7] usblp0: removed [ 162.112683][ T5509] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 162.209357][ T5510] loop2: detected capacity change from 0 to 128 [ 162.284565][ T5510] FAT-fs (loop2): bogus number of FAT structure [ 162.290916][ T5510] FAT-fs (loop2): Can't find a valid FAT filesystem [ 163.644508][ T4342] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 163.824546][ T4342] usb 3-1: Using ep0 maxpacket: 8 [ 164.191558][ T4342] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.214147][ T4342] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 164.233978][ T4342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.242118][ T4342] usb 3-1: Product: syz [ 164.246439][ T4342] usb 3-1: Manufacturer: syz [ 164.251063][ T4342] usb 3-1: SerialNumber: syz [ 164.472128][ T4342] usb 3-1: 1:1 : bogus bTerminalLink 7 [ 164.490928][ T4342] usb 3-1: unit 119 not found! [ 164.532276][ T4342] snd-usb-audio: probe of 3-1:1.2 failed with error -16 [ 164.574454][ T22] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 164.594594][ T4342] usb 3-1: USB disconnect, device number 12 [ 164.849635][ T5538] loop3: detected capacity change from 0 to 1024 [ 165.077759][ T5538] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 166.266292][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 166.276206][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 166.287179][ T22] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 166.296312][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.504742][ T4342] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 166.512481][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 166.679589][ T4342] usb 3-1: device descriptor read/64, error -71 [ 166.718655][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 166.727200][ T7] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 166.739992][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.754188][ T7] usb 1-1: config 0 has no interface number 0 [ 166.770468][ T7] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 166.803987][ T7] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 166.819274][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.828095][ T7] usb 1-1: Product: syz [ 166.832572][ T7] usb 1-1: Manufacturer: syz [ 166.843260][ T7] usb 1-1: SerialNumber: syz [ 166.868756][ T7] usb 1-1: config 0 descriptor?? [ 166.889205][ T7] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 166.901157][ T22] usb 5-1: config 0 descriptor?? [ 166.918483][ T7] nokiaca42v2 ttyUSB0: required endpoint is missing [ 166.948619][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 166.977672][ T4342] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 167.100087][ T7] usb 1-1: USB disconnect, device number 3 [ 167.115249][ T7] cypress_m8 1-1:0.35: device disconnected [ 167.311510][ T4342] usb 3-1: device descriptor read/64, error -71 [ 168.068212][ T4342] usb usb3-port1: attempt power cycle [ 168.103405][ T5560] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 168.303238][ T22] ath6kl: Failed to submit usb control message: -71 [ 168.313595][ T22] ath6kl: unable to send the bmi data to the device: -71 [ 168.321433][ T22] ath6kl: Unable to send get target info: -71 [ 168.330331][ T5560] loop3: detected capacity change from 0 to 128 [ 168.340417][ T22] ath6kl: Failed to init ath6kl core: -71 [ 168.355321][ T5560] FAT-fs (loop3): bogus number of FAT structure [ 168.361635][ T5560] FAT-fs (loop3): Can't find a valid FAT filesystem [ 168.402167][ T22] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 168.432730][ T22] usb 5-1: USB disconnect, device number 8 [ 168.452043][ T5361] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.554465][ T4342] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 168.595622][ T4342] usb 3-1: device descriptor read/8, error -71 [ 168.728051][ T2171] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 168.822963][ C1] Unknown status report in ack skb [ 168.884431][ T2171] usb 2-1: device descriptor read/64, error -71 [ 168.891031][ T4342] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 168.936356][ T4342] usb 3-1: device descriptor read/8, error -71 [ 169.036280][ T5594] loop3: detected capacity change from 0 to 4096 [ 169.066184][ T4342] usb usb3-port1: unable to enumerate USB device [ 169.170306][ T2171] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 169.334746][ T2171] usb 2-1: device descriptor read/64, error -71 [ 169.555169][ T2171] usb usb2-port1: attempt power cycle [ 170.103825][ T2171] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 170.147310][ T2171] usb 2-1: device descriptor read/8, error -71 [ 170.165788][ T5611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 170.529087][ T5617] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 170.626747][ T5618] loop2: detected capacity change from 0 to 128 [ 171.150222][ T5618] FAT-fs (loop2): bogus number of FAT structure [ 171.156594][ T5618] FAT-fs (loop2): Can't find a valid FAT filesystem [ 171.589960][ T2171] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 171.659424][ T2171] usb 2-1: device descriptor read/8, error -71 [ 171.787310][ T2171] usb usb2-port1: unable to enumerate USB device [ 172.024610][ T7] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 172.164583][ T4342] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 172.264951][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 172.300310][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.331066][ T2171] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 172.363082][ T7] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.381409][ T7] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.392443][ T7] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 172.409909][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 172.417188][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 172.426542][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.436523][ T7] usb 4-1: config 0 descriptor?? [ 172.504617][ T4342] usb 3-1: device descriptor read/64, error -71 [ 172.535968][ T2171] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.549914][ T2171] usb 2-1: config 1 interface 2 altsetting 0 has an invalid endpoint with address 0x3A, skipping [ 172.560667][ T2171] usb 2-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.578902][ T2171] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 172.588168][ T2171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.637030][ T2171] snd-ua101: probe of 2-1:1.0 failed with error -2 [ 172.698076][ T5643] loop4: detected capacity change from 0 to 128 [ 172.774688][ T4342] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 172.857599][ T4352] usb 2-1: USB disconnect, device number 16 [ 172.873879][ T5643] EXT4-fs: inline encryption not supported [ 172.881977][ T5643] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 172.903225][ T7] logitech-djreceiver 0003:046D:C53A.0001: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 172.945691][ T4342] usb 3-1: device descriptor read/64, error -71 [ 173.065174][ T4342] usb usb3-port1: attempt power cycle [ 173.125628][ T4352] usb 4-1: USB disconnect, device number 16 [ 173.181186][ T5648] fido_id[5648]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 173.316913][ T5643] loop4: detected capacity change from 0 to 40427 [ 173.347579][ T5643] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 173.364445][ T5643] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 173.398718][ T5643] F2FS-fs (loop4): invalid crc value [ 173.464025][ T5643] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.095803][ T4342] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 174.135088][ T4342] usb 3-1: device descriptor read/8, error -71 [ 174.235808][ T5643] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 174.264498][ T5643] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.623821][ T5672] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 174.726393][ T5673] loop0: detected capacity change from 0 to 128 [ 175.222354][ T5674] netlink: 'syz.3.392': attribute type 3 has an invalid length. [ 175.287588][ T5673] FAT-fs (loop0): bogus number of FAT structure [ 175.293899][ T5673] FAT-fs (loop0): Can't find a valid FAT filesystem [ 176.264439][ T4342] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 176.428659][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 176.497550][ T4342] usb 3-1: device not accepting address 20, error -71 [ 176.507412][ T4342] usb usb3-port1: unable to enumerate USB device [ 176.638017][ T7] usb 2-1: device descriptor read/64, error -71 [ 176.967462][ T5683] loop2: detected capacity change from 0 to 128 [ 177.029780][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 177.054501][ T5683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 177.080155][ T5683] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.266609][ T7] usb 2-1: device descriptor read/64, error -71 [ 177.481805][ T5694] netlink: 'syz.3.398': attribute type 3 has an invalid length. [ 178.286278][ T7] usb usb2-port1: attempt power cycle [ 178.782924][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 179.397468][ T4342] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 181.181764][ T5729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.412'. [ 181.323087][ T5736] md: could not open device unknown-block(1,4). [ 181.564372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 181.584375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 181.594372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 181.634358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 182.224434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 182.234384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 182.244370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 182.254384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 182.264373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 182.274387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 182.560605][ T5746] loop3: detected capacity change from 0 to 512 [ 182.651182][ T5752] netlink: 'syz.4.418': attribute type 3 has an invalid length. [ 185.420896][ T5746] EXT4-fs (loop3): Test dummy encryption mode enabled [ 185.429494][ T5746] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.444595][ T5746] EXT4-fs: failed to create workqueue [ 185.459363][ T5746] EXT4-fs (loop3): mount failed [ 185.840142][ T5765] loop1: detected capacity change from 0 to 512 [ 186.540830][ T5765] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 186.549783][ T5765] FAT-fs (loop1): Filesystem has been set read-only [ 186.557068][ T5765] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 186.565534][ T5765] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 188.857452][ T5785] netlink: 620 bytes leftover after parsing attributes in process `syz.1.429'. [ 189.526203][ T5784] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.428' sets config #0 [ 189.540331][ T5784] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.428' sets config #1 [ 189.657620][ T5795] netlink: 'syz.0.431': attribute type 3 has an invalid length. [ 192.359567][ T5803] loop1: detected capacity change from 0 to 1764 [ 192.736132][ T5813] md: could not open device unknown-block(1,4). [ 193.974536][ T4342] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 194.061308][ T5841] netlink: 'syz.1.448': attribute type 3 has an invalid length. [ 194.313183][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.332254][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.566262][ T5848] md: could not open device unknown-block(1,8). [ 196.148927][ T5854] netlink: 'syz.4.456': attribute type 3 has an invalid length. [ 196.297745][ T5838] loop3: detected capacity change from 0 to 32768 [ 197.188010][ T5838] (syz.3.449,5838,1):ocfs2_initialize_super:2284 ERROR: status = -12 [ 197.259284][ T5838] (syz.3.449,5838,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 197.284476][ T4342] usb 1-1: Using ep0 maxpacket: 16 [ 198.186601][ T4342] usb 1-1: device descriptor read/all, error -71 [ 198.321722][ T5876] md: could not open device unknown-block(1,8). [ 198.377298][ T5866] loop1: detected capacity change from 0 to 32768 [ 198.425888][ T5877] loop2: detected capacity change from 0 to 4096 [ 198.440745][ T5866] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.460 (5866) [ 198.548149][ T5866] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 198.604549][ T5866] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 198.627616][ T5866] BTRFS info (device loop1): using free space tree [ 200.344508][ T5886] netlink: 'syz.4.468': attribute type 3 has an invalid length. [ 202.192657][ T5179] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by udevd (5179) [ 202.206060][ T5866] BTRFS error (device loop1): open_ctree failed: -12 [ 202.514592][ T5907] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 202.705066][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 202.722234][ T5907] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 202.911572][ T5924] netlink: 'syz.1.477': attribute type 3 has an invalid length. [ 204.264585][ T5907] usb 3-1: config 0 has no interface number 0 [ 204.270771][ T5907] usb 3-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.294701][ T5907] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 204.742008][ T5942] loop3: detected capacity change from 0 to 512 [ 205.265830][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.274700][ T5907] usb 3-1: Product: syz [ 205.279829][ T5907] usb 3-1: Manufacturer: syz [ 205.284628][ T5907] usb 3-1: SerialNumber: syz [ 205.951852][ T5950] loop2: detected capacity change from 0 to 4096 [ 206.285318][ T5907] usb 3-1: config 0 descriptor?? [ 206.401137][ T5945] loop1: detected capacity change from 0 to 32768 [ 206.409301][ T5907] usb 3-1: can't set config #0, error -71 [ 206.422467][ T5907] usb 3-1: USB disconnect, device number 21 [ 206.546178][ T5945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.483 (5945) [ 206.630932][ T5945] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.655055][ T5945] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 206.668119][ T5945] BTRFS info (device loop1): disabling tree log [ 206.678838][ T5945] BTRFS info (device loop1): using free space tree [ 206.846869][ T5950] rxe_eth0 speed is unknown, defaulting to 1000 [ 206.990781][ T5945] BTRFS info (device loop1): enabling ssd optimizations [ 207.214528][ T5907] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 207.248181][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 207.322090][ T5711] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 207.416131][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.434458][ T5907] usb 4-1: config 1 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 207.474394][ T5907] usb 4-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.498862][ T5907] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 207.518241][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.567785][ T5907] snd-ua101: probe of 4-1:1.0 failed with error -2 [ 207.668503][ T4273] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.767377][ T4342] usb 4-1: USB disconnect, device number 17 [ 208.028394][ T5993] netlink: 'syz.4.494': attribute type 3 has an invalid length. [ 208.332068][ T4352] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 208.680766][ T4352] usb 3-1: Using ep0 maxpacket: 16 [ 208.707453][ T4352] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 208.849002][ T4352] usb 3-1: config 0 has no interface number 0 [ 208.975710][ T4352] usb 3-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.221122][ T4352] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 209.276790][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.289063][ T4352] usb 3-1: Product: syz [ 209.293408][ T4352] usb 3-1: Manufacturer: syz [ 209.300565][ T4352] usb 3-1: SerialNumber: syz [ 209.468032][ T4352] usb 3-1: config 0 descriptor?? [ 209.533448][ T4352] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 209.651983][ T4352] nokiaca42v2 ttyUSB0: required endpoint is missing [ 209.913068][ T4352] usb 3-1: USB disconnect, device number 22 [ 210.260560][ T4352] cypress_m8 3-1:0.35: device disconnected [ 210.358927][ T5997] loop3: detected capacity change from 0 to 256 [ 210.826308][ T6014] tc_dump_action: action bad kind [ 212.532373][ T6024] syz.1.493 (6024) used greatest stack depth: 20688 bytes left [ 212.749916][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'. [ 213.499590][ T6021] loop2: detected capacity change from 0 to 32768 [ 213.514168][ T6021] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.501 (6021) [ 213.549667][ T6021] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.581314][ T6021] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 213.590164][ T6021] BTRFS info (device loop2): using free space tree [ 213.849617][ T6021] BTRFS info (device loop2): enabling ssd optimizations [ 213.977745][ T6058] syz.4.506 uses obsolete (PF_INET,SOCK_PACKET) [ 214.073836][ T6058] TC_ACT_REPEAT abuse ? [ 214.104781][ T5907] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 214.294486][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 214.309581][ T5907] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.364577][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.375989][ T5943] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 214.404088][ T5907] usb 2-1: config 1 has no interface number 0 [ 214.429464][ T5907] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 214.475709][ T5907] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 214.504130][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.525688][ T5907] usb 2-1: Product: syz [ 214.533037][ T5907] usb 2-1: Manufacturer: syz [ 214.553333][ T5907] usb 2-1: SerialNumber: syz [ 214.711085][ T4271] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.836409][ T6072] loop4: detected capacity change from 0 to 512 [ 214.972006][ T5179] udevd[5179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.389309][ T4352] usb 2-1: USB disconnect, device number 20 [ 216.528097][ T6082] loop1: detected capacity change from 0 to 512 [ 216.852238][ T6082] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 216.862002][ T6082] FAT-fs (loop1): Filesystem has been set read-only [ 216.870219][ T6082] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 216.878681][ T6082] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 218.066288][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 218.274503][ T4342] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 218.333853][ T6101] loop1: detected capacity change from 0 to 2048 [ 218.438742][ T6103] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.474635][ T4342] usb 3-1: Using ep0 maxpacket: 16 [ 218.485775][ T4342] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 218.534414][ T4342] usb 3-1: config 0 has no interface number 0 [ 218.558207][ T4342] usb 3-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.619951][ T4342] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 218.646081][ T4342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.668733][ T4342] usb 3-1: Product: syz [ 218.682402][ T4342] usb 3-1: Manufacturer: syz [ 218.699716][ T4342] usb 3-1: SerialNumber: syz [ 218.742845][ T4342] usb 3-1: config 0 descriptor?? [ 218.773317][ T4342] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 218.802332][ T4342] nokiaca42v2 ttyUSB0: required endpoint is missing [ 218.983936][ T4342] usb 3-1: USB disconnect, device number 23 [ 219.013595][ T4342] cypress_m8 3-1:0.35: device disconnected [ 219.356369][ T6115] netlink: 'syz.0.522': attribute type 3 has an invalid length. [ 220.664169][ T6121] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 220.760627][ T6122] loop1: detected capacity change from 0 to 128 [ 221.244052][ T6122] FAT-fs (loop1): bogus number of FAT structure [ 221.250448][ T6122] FAT-fs (loop1): Can't find a valid FAT filesystem [ 221.280165][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 222.358144][ T6128] netlink: 'syz.4.526': attribute type 3 has an invalid length. [ 226.564969][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 226.627470][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 226.984548][ T5906] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 227.019137][ T6178] loop3: detected capacity change from 0 to 4096 [ 227.184583][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 227.191886][ T5906] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 227.360025][ T5906] usb 3-1: config 0 has no interface number 0 [ 227.369177][ T5906] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.894531][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.926501][ T5906] usb 3-1: Product: syz [ 227.930737][ T5906] usb 3-1: Manufacturer: syz [ 227.935525][ T5906] usb 3-1: SerialNumber: syz [ 227.965228][ T5906] usb 3-1: config 0 descriptor?? [ 227.997981][ T5906] smsc95xx v2.0.0 [ 228.554500][ T5906] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 228.604866][ T5906] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 228.895324][ T5906] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 228.975055][ T5906] smsc95xx: probe of 3-1:0.67 failed with error -32 [ 229.153776][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 230.092653][ T4350] usb 3-1: USB disconnect, device number 24 [ 230.275619][ T6224] md: could not open device unknown-block(1,8). [ 230.346929][ T5906] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 230.608680][ T6225] loop3: detected capacity change from 0 to 512 [ 230.633247][ T6225] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 230.636097][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 230.642091][ T6225] FAT-fs (loop3): Filesystem has been set read-only [ 230.658889][ T6225] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 230.663095][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 230.667121][ T6225] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 230.683409][ T6234] loop2: detected capacity change from 0 to 512 [ 230.723009][ T6225] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 230.791053][ T5906] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 230.839162][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.887242][ T5906] usb 2-1: Product: syz [ 230.902069][ T5906] usb 2-1: Manufacturer: syz [ 230.921872][ T5906] usb 2-1: SerialNumber: syz [ 230.951833][ T5906] usb 2-1: config 0 descriptor?? [ 230.971035][ T6219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 230.991492][ T6219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 231.024866][ T5906] usb 2-1: ucan: probing device on interface #0 [ 231.036123][ T5906] usb 2-1: ucan: invalid EP count (1) [ 231.059163][ T5906] usb 2-1: ucan: probe failed; try to update the device firmware [ 231.204433][ T5753] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 231.364424][ T5753] usb 1-1: device descriptor read/64, error -71 [ 231.634437][ T5753] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 231.644494][ T4350] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 231.687457][ T6242] loop3: detected capacity change from 0 to 32768 [ 231.767135][ T6242] JBD2: Ignoring recovery information on journal [ 231.804523][ T5753] usb 1-1: device descriptor read/64, error -71 [ 231.834498][ T4350] usb 3-1: Using ep0 maxpacket: 32 [ 231.841682][ T4350] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.853956][ T4350] usb 3-1: config 0 has no interfaces? [ 231.866809][ T4350] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 231.876215][ T4350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.885598][ T4350] usb 3-1: Product: syz [ 231.893537][ T4350] usb 3-1: Manufacturer: syz [ 231.898411][ T4350] usb 3-1: SerialNumber: syz [ 231.911114][ T6242] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 231.923908][ T4350] usb 3-1: config 0 descriptor?? [ 231.935629][ T5753] usb usb1-port1: attempt power cycle [ 232.002924][ T6242] FAULT_INJECTION: forcing a failure. [ 232.002924][ T6242] name failslab, interval 1, probability 0, space 0, times 1 [ 232.018224][ T6242] CPU: 0 PID: 6242 Comm: syz.3.562 Not tainted syzkaller #0 [ 232.025568][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 232.035629][ T6242] Call Trace: [ 232.038906][ T6242] [ 232.041830][ T6242] dump_stack_lvl+0x188/0x24e [ 232.046525][ T6242] ? show_regs_print_info+0x12/0x12 [ 232.051774][ T6242] ? load_image+0x410/0x410 [ 232.056273][ T6242] ? __might_sleep+0xd0/0xd0 [ 232.060859][ T6242] ? __lock_acquire+0x7ea0/0x7ea0 [ 232.065875][ T6242] ? do_raw_spin_lock+0x128/0x2f0 [ 232.070891][ T6242] should_fail_ex+0x390/0x4c0 [ 232.075586][ T6242] should_failslab+0x5/0x20 [ 232.080208][ T6242] slab_pre_alloc_hook+0x59/0x300 [ 232.085252][ T6242] ? ocfs2_write_begin_nolock+0x3b0/0x4590 [ 232.091073][ T6242] __kmem_cache_alloc_node+0x4f/0x270 [ 232.096454][ T6242] ? is_bpf_text_address+0x22/0x2a0 [ 232.101665][ T6242] ? ocfs2_write_begin_nolock+0x3b0/0x4590 [ 232.107480][ T6242] kmalloc_trace+0x26/0xe0 [ 232.111905][ T6242] ocfs2_write_begin_nolock+0x3b0/0x4590 [ 232.117585][ T6242] ? arch_stack_walk+0xf2/0x140 [ 232.122485][ T6242] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 232.128307][ T6242] ? __lock_acquire+0x36d9/0x7ea0 [ 232.133362][ T6242] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 232.139400][ T6242] ? rwsem_write_trylock+0x135/0x1c0 [ 232.144718][ T6242] ? clear_nonspinnable+0x60/0x60 [ 232.149766][ T6242] ocfs2_write_begin+0x1b7/0x310 [ 232.154717][ T6242] ? ocfs2_readahead+0x190/0x190 [ 232.159690][ T6242] ? __lock_acquire+0x7ea0/0x7ea0 [ 232.164721][ T6242] ? lock_chain_count+0x20/0x20 [ 232.169586][ T6242] ? fault_in_readable+0x18a/0x1f0 [ 232.174712][ T6242] ? fault_in_iov_iter_readable+0x2b9/0x2f0 [ 232.180623][ T6242] generic_perform_write+0x2fa/0x5c0 [ 232.185943][ T6242] ? generic_file_direct_write+0x330/0x330 [ 232.191794][ T6242] ? __file_remove_privs+0x5f0/0x5f0 [ 232.197095][ T6242] ? __up_read+0x2b4/0x6b0 [ 232.201522][ T6242] ? do_raw_spin_unlock+0x11d/0x230 [ 232.206735][ T6242] __generic_file_write_iter+0x148/0x2a0 [ 232.212385][ T6242] ocfs2_file_write_iter+0x1731/0x1fc0 [ 232.217904][ T6242] ? ocfs2_file_read_iter+0xbb0/0xbb0 [ 232.223285][ T6242] ? aa_file_perm+0x3ea/0xf00 [ 232.227970][ T6242] ? aa_file_perm+0x112/0xf00 [ 232.232655][ T6242] ? verify_lock_unused+0x140/0x140 [ 232.237864][ T6242] ? aa_path_link+0x8a0/0x8a0 [ 232.242551][ T6242] ? __might_fault+0xa6/0x120 [ 232.247242][ T6242] ? end_current_label_crit_section+0x14b/0x170 [ 232.253517][ T6242] ? common_file_perm+0x171/0x1c0 [ 232.258572][ T6242] do_iter_write+0x638/0xb10 [ 232.263183][ T6242] ? vfs_iter_write+0xa0/0xa0 [ 232.267864][ T6242] ? rcu_read_lock_any_held+0xb0/0x130 [ 232.273346][ T6242] do_pwritev+0x23e/0x3a0 [ 232.277683][ T6242] ? do_preadv+0x390/0x390 [ 232.282118][ T6242] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 232.288113][ T6242] ? lock_chain_count+0x20/0x20 [ 232.292979][ T6242] ? lockdep_hardirqs_on+0x94/0x140 [ 232.298195][ T6242] ? __x64_sys_pwritev2+0xba/0x100 [ 232.303314][ T6242] do_syscall_64+0x4c/0xa0 [ 232.307739][ T6242] ? clear_bhb_loop+0x60/0xb0 [ 232.312421][ T6242] ? clear_bhb_loop+0x60/0xb0 [ 232.317101][ T6242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.323044][ T6242] RIP: 0033:0x7fe017b9f559 [ 232.327473][ T6242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.347085][ T6242] RSP: 002b:00007fe018a8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 232.355562][ T6242] RAX: ffffffffffffffda RBX: 00007fe017e25fa0 RCX: 00007fe017b9f559 [ 232.363553][ T6242] RDX: 0000000000000001 RSI: 0000200000001900 RDI: 0000000000000004 [ 232.371537][ T6242] RBP: 00007fe017c36b20 R08: 0000000000000007 R09: 0000000000000002 [ 232.379520][ T6242] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 232.387493][ T6242] R13: 00007fe017e26038 R14: 00007fe017e25fa0 R15: 00007fff9aa20348 [ 232.395489][ T6242] [ 232.401042][ T6242] (syz.3.562,6242,1):ocfs2_write_begin_nolock:1667 ERROR: status = -12 [ 232.410075][ T6242] (syz.3.562,6242,1):ocfs2_write_begin:1909 ERROR: status = -12 [ 232.541119][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'. [ 232.573048][ T4284] ocfs2: Unmounting device (7,3) on (node local) [ 232.684744][ T5753] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 232.766289][ T5753] usb 1-1: device descriptor read/8, error -71 [ 233.065566][ T5753] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 233.094559][ T6004] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 233.148189][ T5753] usb 1-1: device descriptor read/8, error -71 [ 233.314520][ T6004] usb 5-1: Using ep0 maxpacket: 32 [ 233.325078][ T6004] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 233.335177][ T5753] usb usb1-port1: unable to enumerate USB device [ 233.403545][ T6004] usb 5-1: config 0 has no interface number 0 [ 233.515760][ T5753] usb 2-1: USB disconnect, device number 21 [ 233.526803][ T6004] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 233.561534][ T6259] device syzkaller0 entered promiscuous mode [ 233.568127][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.588570][ T6004] usb 5-1: Product: syz [ 233.592795][ T6004] usb 5-1: Manufacturer: syz [ 233.603441][ T6004] usb 5-1: SerialNumber: syz [ 233.623309][ T6004] usb 5-1: config 0 descriptor?? [ 233.633607][ T6004] smsc95xx v2.0.0 [ 234.074694][ T6004] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 234.096445][ T6004] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 234.194805][ T6276] loop3: detected capacity change from 0 to 512 [ 235.628718][ T6275] tc_dump_action: action bad kind [ 237.969916][ T5753] usb 3-1: USB disconnect, device number 25 [ 238.018639][ T6004] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 238.031314][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 238.055449][ T6004] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 238.094549][ T6004] usb 5-1: USB disconnect, device number 9 [ 238.200369][ T6294] netlink: 5512 bytes leftover after parsing attributes in process `syz.4.578'. [ 239.960724][ T6305] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4271] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6305] [ 240.320407][ T6321] loop2: detected capacity change from 0 to 512 [ 240.361898][ T6321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.435176][ T4350] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 240.464574][ T4342] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 240.472391][ T6321] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 240.512264][ T6321] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.688875][ T4350] usb 4-1: device descriptor read/64, error -71 [ 240.731875][ T4342] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 241.024901][ T4350] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 241.276829][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.309307][ T4342] usb 1-1: Product: syz [ 241.313536][ T4342] usb 1-1: Manufacturer: syz [ 241.344470][ T4342] usb 1-1: SerialNumber: syz [ 241.365602][ T4342] usb 1-1: config 0 descriptor?? [ 241.372286][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 241.424431][ T4350] usb 4-1: device descriptor read/64, error -71 [ 241.554609][ T4350] usb usb4-port1: attempt power cycle [ 241.622976][ T4342] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 011 [ 241.731829][ T6331] tc_dump_action: action bad kind [ 241.904474][ T14] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 242.004482][ T4350] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 242.518334][ T4350] usb 4-1: device descriptor read/8, error -71 [ 242.664460][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 242.671362][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.691923][ T14] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 242.714471][ T14] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 242.724209][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.734506][ T14] usb 3-1: Product: syz [ 242.738714][ T14] usb 3-1: Manufacturer: syz [ 242.743332][ T14] usb 3-1: SerialNumber: syz [ 242.751773][ T14] usb 3-1: config 0 descriptor?? [ 242.814435][ T4350] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 242.832154][ T6334] loop4: detected capacity change from 0 to 32768 [ 242.853693][ T6334] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.589 (6334) [ 242.855613][ T14] usb 1-1: USB disconnect, device number 11 [ 242.874089][ T4350] usb 4-1: device descriptor read/8, error -71 [ 242.920481][ T6334] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.934510][ T6334] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 242.943318][ T6334] BTRFS info (device loop4): disabling tree log [ 242.960378][ T6334] BTRFS info (device loop4): using free space tree [ 243.014650][ T4350] usb usb4-port1: unable to enumerate USB device [ 243.032963][ T6334] BTRFS info (device loop4): enabling ssd optimizations [ 243.040346][ T6336] loop1: detected capacity change from 0 to 32768 [ 243.157842][ T6336] XFS (loop1): Mounting V5 Filesystem [ 243.223070][ T6336] XFS (loop1): Ending clean mount [ 243.246259][ T6336] XFS (loop1): Quotacheck needed: Please wait. [ 243.253145][ T4276] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.041601][ T6336] XFS (loop1): Quotacheck: Done. [ 244.144121][ T6336] jffs2: notice: (6336) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 244.518399][ T6377] loop4: detected capacity change from 0 to 1024 [ 244.721244][ T6377] EXT4-fs: Ignoring removed bh option [ 244.993458][ T6377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 245.012068][ T4350] usb 3-1: USB disconnect, device number 26 [ 245.122751][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.596'. [ 245.135325][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.596'. [ 245.227642][ T6377] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 245.447895][ T6395] netlink: 'syz.0.595': attribute type 3 has an invalid length. [ 246.048899][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 247.536706][ T4273] XFS (loop1): Unmounting Filesystem [ 247.641181][ T6392] loop3: detected capacity change from 0 to 512 [ 247.684560][ T6004] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 247.874622][ T6004] usb 1-1: device descriptor read/64, error -71 [ 248.164460][ T6004] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 248.334580][ T6004] usb 1-1: device descriptor read/64, error -71 [ 248.461382][ T6004] usb usb1-port1: attempt power cycle [ 248.563275][ T6413] loop2: detected capacity change from 0 to 40427 [ 248.608196][ T6413] F2FS-fs (loop2): invalid crc value [ 248.756369][ T6413] F2FS-fs (loop2): Found nat_bits in checkpoint [ 248.888057][ T6422] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 248.940200][ T6422] loop4: detected capacity change from 0 to 128 [ 248.966501][ T6422] FAT-fs (loop4): bogus number of FAT structure [ 248.972923][ T6422] FAT-fs (loop4): Can't find a valid FAT filesystem [ 249.099718][ T6413] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 249.467743][ T6413] CacheFiles: Empty directory specified [ 249.491574][ T6413] CacheFiles: No cache directory specified [ 249.514414][ T6004] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 249.524590][ T6425] loop3: detected capacity change from 0 to 4096 [ 249.595349][ T6004] usb 1-1: device descriptor read/8, error -71 [ 249.904737][ T6004] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 249.955991][ T6004] usb 1-1: device descriptor read/8, error -71 [ 250.125068][ T6004] usb usb1-port1: unable to enumerate USB device [ 251.174702][ T14] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 251.375173][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 251.382769][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.416418][ T14] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.448116][ T14] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 251.478940][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.504927][ T14] usb 3-1: Product: syz [ 251.514732][ T14] usb 3-1: Manufacturer: syz [ 251.523180][ T14] usb 3-1: SerialNumber: syz [ 251.551368][ T14] usb 3-1: config 0 descriptor?? [ 251.743473][ T6454] loop1: detected capacity change from 0 to 1024 [ 252.075973][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 252.464473][ T6008] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 253.489861][ T6008] usb 4-1: device descriptor read/64, error -71 [ 253.663199][ T6456] CacheFiles: Empty directory specified [ 253.673859][ T6456] CacheFiles: No cache directory specified [ 253.784414][ T6008] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 253.943228][ T14] usb 3-1: USB disconnect, device number 27 [ 253.954545][ T6008] usb 4-1: device descriptor read/64, error -71 [ 254.054497][ T6007] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 254.074596][ T6008] usb usb4-port1: attempt power cycle [ 254.254424][ T6007] usb 1-1: Using ep0 maxpacket: 16 [ 254.262474][ T6007] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.306752][ T6007] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.324217][ T6007] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.339380][ T6007] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.366310][ T6007] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 254.378992][ T6007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.392051][ T6007] usb 1-1: Product: syz [ 254.402212][ T6007] usb 1-1: Manufacturer: syz [ 254.407167][ T6007] usb 1-1: SerialNumber: syz [ 254.504514][ T6008] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 254.555137][ T6008] usb 4-1: device descriptor read/8, error -71 [ 254.641734][ T6007] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 254.664762][ T6007] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 254.718744][ T6007] usb 1-1: USB disconnect, device number 16 [ 254.768087][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 254.828735][ T6491] loop1: detected capacity change from 0 to 4096 [ 254.835223][ T6008] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 254.875161][ T6008] usb 4-1: device descriptor read/8, error -71 [ 254.955552][ T5361] udevd[5361]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.091652][ T6008] usb usb4-port1: unable to enumerate USB device [ 255.781941][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.788330][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.140351][ T6513] netlink: 'syz.2.636': attribute type 3 has an invalid length. [ 260.096102][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 260.364469][ T14] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 260.380486][ T6531] loop1: detected capacity change from 0 to 4096 [ 260.576860][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.604497][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.647493][ T14] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 260.663180][ T14] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 260.675820][ T14] usb 3-1: Manufacturer: syz [ 260.683970][ T14] usb 3-1: config 0 descriptor?? [ 260.794480][ T6007] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 260.974751][ T6007] usb 5-1: device descriptor read/64, error -71 [ 261.514557][ T6007] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 261.609248][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.625856][ T6547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.734533][ T6007] usb 5-1: device descriptor read/64, error -71 [ 261.855055][ T6007] usb usb5-port1: attempt power cycle [ 262.264662][ T6007] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 262.282774][ T6552] jffs2: notice: (6552) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 262.355815][ T6007] usb 5-1: device descriptor read/8, error -71 [ 262.644574][ T6007] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 262.687525][ T6007] usb 5-1: device descriptor read/8, error -71 [ 262.710997][ T6552] overlayfs: upper fs does not support tmpfile. [ 262.805215][ T6007] usb usb5-port1: unable to enumerate USB device [ 262.811603][ T6552] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 263.260389][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 263.268081][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 263.285823][ T14] usb 3-1: USB disconnect, device number 28 [ 263.315052][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 263.661729][ T6576] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 263.759158][ T6578] loop3: detected capacity change from 0 to 128 [ 263.799851][ T6578] FAT-fs (loop3): bogus number of FAT structure [ 263.806364][ T6578] FAT-fs (loop3): Can't find a valid FAT filesystem [ 264.927233][ T6596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 265.144412][ T14] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 265.172065][ T6596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.708430][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 265.738161][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.769445][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.814510][ T14] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.823705][ T6562] CacheFiles: Empty directory specified [ 265.838254][ T6562] CacheFiles: No cache directory specified [ 265.853731][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 265.884421][ T14] usb 4-1: SerialNumber: syz [ 266.006720][ T6610] tc_dump_action: action bad kind [ 266.120872][ T6608] device-mapper: dirty region log: invalid region size 7 [ 266.162605][ T14] usb 4-1: skipping empty audio interface (v1) [ 266.235347][ T4388] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 266.257318][ T6608] device-mapper: table: 248:2: mirror: Error creating mirror dirty log (-EINVAL) [ 266.347791][ T6608] device-mapper: ioctl: error adding target to table [ 266.428472][ T14] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 266.466045][ T4388] usb 2-1: Using ep0 maxpacket: 8 [ 266.479645][ T4388] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.535341][ T14] usb 4-1: USB disconnect, device number 26 [ 266.587371][ T4388] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.745082][ T4388] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 266.840622][ T4388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.874438][ T4388] usb 2-1: Product: syz [ 266.890892][ T4388] usb 2-1: Manufacturer: syz [ 266.905135][ T6570] udevd[6570]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.931410][ T4388] usb 2-1: SerialNumber: syz [ 267.200219][ T4388] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 267.280821][ T4388] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 267.381784][ T6625] loop3: detected capacity change from 0 to 512 [ 267.471699][ T6625] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 267.480617][ T6625] FAT-fs (loop3): Filesystem has been set read-only [ 267.488702][ T6625] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 267.497400][ T6625] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 267.688775][ T6625] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 267.970065][ T6570] udevd[6570]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.951241][ T4388] usb 2-1: USB disconnect, device number 22 [ 269.111346][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 269.236622][ T6635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.537131][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 269.730044][ T6643] loop4: detected capacity change from 0 to 256 [ 269.818179][ T6643] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 269.839866][ T6643] FAT-fs (loop4): Filesystem has been set read-only [ 269.895514][ T6650] tc_dump_action: action bad kind [ 269.944448][ T4388] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 270.054601][ T4293] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 270.695526][ T6643] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.877123][ T4388] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.926340][ T4293] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.943918][ T4388] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 270.947121][ T4293] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 270.988342][ T4293] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 270.989449][ T4388] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 271.020510][ T4293] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 271.037641][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.044683][ T4388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.089091][ T4388] dln2 2-1:1.0: USB write failed: -90 [ 271.105365][ T4388] dln2 2-1:1.0: failed to initialize hardware [ 271.143774][ T4388] dln2: probe of 2-1:1.0 failed with error -90 [ 271.187742][ T6657] loop3: detected capacity change from 0 to 8 [ 271.307898][ T4388] usb 2-1: USB disconnect, device number 23 [ 271.324981][ T6657] SQUASHFS error: Unable to read inode 0x11f [ 271.336177][ T6003] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 271.534402][ T6003] usb 5-1: Using ep0 maxpacket: 8 [ 271.549637][ T6003] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.689378][ T6003] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.836286][ T6003] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 271.969041][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.214472][ T6003] usb 5-1: Product: syz [ 272.231381][ T6003] usb 5-1: Manufacturer: syz [ 272.266152][ T4293] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 272.282646][ T4293] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 272.290670][ T6003] usb 5-1: SerialNumber: syz [ 272.314739][ T4293] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 272.333282][ T4293] cxacru: probe of 1-1:1.0 failed with error -71 [ 272.382911][ T4293] usb 1-1: USB disconnect, device number 17 [ 272.535421][ T6003] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 272.570468][ T6003] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 272.740458][ T6003] usb 5-1: USB disconnect, device number 14 [ 272.877625][ T6672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 272.893826][ T6672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.995403][ T6570] udevd[6570]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.522411][ T6664] loop1: detected capacity change from 0 to 32768 [ 273.553608][ T6664] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.690 (6664) [ 273.574707][ T4388] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 273.667377][ T6664] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 273.718428][ T6664] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 273.738785][ T6664] BTRFS info (device loop1): using free space tree [ 273.868393][ T4388] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 274.170729][ T6664] BTRFS info (device loop1): enabling ssd optimizations [ 274.592917][ T4388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.615599][ T4388] usb 4-1: config 0 descriptor?? [ 275.074763][ T4388] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 275.095667][ T4388] [drm] Initialized udl on minor 2 [ 275.239722][ T4388] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 275.259290][ T4388] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 275.455547][ T4388] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.464665][ T4342] usb 4-1: USB disconnect, device number 27 [ 275.505899][ T4388] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 275.546537][ T4388] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 275.922235][ T6726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 275.938910][ T6003] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 276.026241][ T6726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.184690][ T6003] usb 1-1: Using ep0 maxpacket: 8 [ 276.221459][ T6003] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.370064][ T6003] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.492519][ T6003] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 276.556685][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.611236][ T6003] usb 1-1: Product: syz [ 276.627064][ T6003] usb 1-1: Manufacturer: syz [ 276.631720][ T6003] usb 1-1: SerialNumber: syz [ 276.887623][ T6003] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 276.925326][ T4273] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 276.933477][ T6003] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 276.935668][ T4350] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 277.012962][ T6003] usb 1-1: USB disconnect, device number 18 [ 277.022656][ T6570] udevd[6570]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.084698][ T4350] usb 5-1: device descriptor read/64, error -71 [ 277.364700][ T4350] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 277.511877][ T6743] loop1: detected capacity change from 0 to 16 [ 277.524535][ T4350] usb 5-1: device descriptor read/64, error -71 [ 277.574123][ T6743] erofs: (device loop1): erofs_init_device: empty device tag @ pos 0 [ 277.649065][ T4350] usb usb5-port1: attempt power cycle [ 277.814474][ T6736] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 278.004412][ T6736] usb 3-1: Using ep0 maxpacket: 16 [ 278.013550][ T6736] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 278.033267][ T6736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.054408][ T6736] usb 3-1: Product: syz [ 278.074526][ T4350] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 278.083208][ T6736] usb 3-1: Manufacturer: syz [ 278.100869][ T6736] usb 3-1: SerialNumber: syz [ 278.128911][ T4350] usb 5-1: device descriptor read/8, error -71 [ 278.204199][ T6736] usb 3-1: config 0 descriptor?? [ 278.366005][ T6736] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 278.474691][ T4350] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 278.577285][ T4350] usb 5-1: device descriptor read/8, error -71 [ 278.775271][ T4350] usb usb5-port1: unable to enumerate USB device [ 278.792924][ T6736] usb 3-1: clie_3_5_startup: get interface number bad return length: 0 [ 278.810340][ T6736] visor: probe of 3-1:0.0 failed with error -5 [ 279.023637][ T4387] usb 3-1: USB disconnect, device number 29 [ 279.161651][ T6771] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.293566][ T6771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.079717][ T6778] loop4: detected capacity change from 0 to 512 [ 280.103347][ T6778] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 280.112399][ T6778] FAT-fs (loop4): Filesystem has been set read-only [ 280.119442][ T6778] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 280.127695][ T6778] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 280.170306][ T6778] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 280.255333][ T4350] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 280.435616][ T4350] usb 2-1: device descriptor read/64, error -71 [ 280.515154][ T6736] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 280.734553][ T6736] usb 1-1: Using ep0 maxpacket: 8 [ 280.739783][ T4350] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 280.769568][ T6736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.839932][ T6736] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 280.893043][ T6736] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.944466][ T4350] usb 2-1: device descriptor read/64, error -71 [ 281.010993][ T6736] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 281.086122][ T4350] usb usb2-port1: attempt power cycle [ 281.150035][ T6736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.253386][ T6736] usb 1-1: Product: syz [ 281.302651][ T6736] usb 1-1: Manufacturer: syz [ 281.345287][ T6736] usb 1-1: SerialNumber: syz [ 281.514470][ T4350] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 281.582948][ T4350] usb 2-1: device descriptor read/8, error -71 [ 281.660181][ T6736] usb 1-1: 0:2 : does not exist [ 281.675989][ T6736] usb 1-1: unit 119 not found! [ 281.769299][ T6795] loop4: detected capacity change from 0 to 4096 [ 281.788831][ T6736] usb 1-1: USB disconnect, device number 19 [ 281.874418][ T4350] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 281.905552][ T4350] usb 2-1: device descriptor read/8, error -71 [ 282.112547][ T4350] usb usb2-port1: unable to enumerate USB device [ 283.932562][ T4350] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 284.254042][ T6736] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 284.654588][ T4350] usb 5-1: device descriptor read/64, error -71 [ 284.681538][ T6797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.690995][ T6736] usb 1-1: Using ep0 maxpacket: 16 [ 284.700048][ T6736] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 284.727559][ T6736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.736087][ T6736] usb 1-1: Product: syz [ 284.741326][ T6736] usb 1-1: Manufacturer: syz [ 284.746451][ T6736] usb 1-1: SerialNumber: syz [ 284.763105][ T6736] usb 1-1: config 0 descriptor?? [ 284.790003][ T6736] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 284.934660][ T4350] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 285.249722][ T6829] loop1: detected capacity change from 0 to 1024 [ 286.934391][ T4350] usb 5-1: device descriptor read/64, error -71 [ 286.943900][ T6736] usb 1-1: clie_3_5_startup: get interface number bad return length: 0 [ 286.952483][ T6736] visor: probe of 1-1:0.0 failed with error -5 [ 286.972833][ T6829] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 287.308552][ T22] usb 1-1: USB disconnect, device number 20 [ 287.963718][ T4350] usb usb5-port1: attempt power cycle [ 288.645607][ T6736] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 288.701627][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 288.714761][ T14] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 288.856142][ T6736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.883769][ T6736] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 288.894524][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 288.901325][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.929076][ T14] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 288.943954][ T14] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.963936][ T6736] usb 1-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 288.973655][ T6736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.739452][ T6736] usb 1-1: Product: syz [ 289.744379][ T6736] usb 1-1: Manufacturer: syz [ 289.749179][ T14] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 289.759094][ T6736] usb 1-1: SerialNumber: syz [ 289.765446][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.773487][ T14] usb 3-1: Product: syz [ 289.786532][ T14] usb 3-1: Manufacturer: syz [ 289.813053][ T14] usb 3-1: SerialNumber: syz [ 290.094145][ T6858] loop4: detected capacity change from 0 to 512 [ 290.226254][ T6859] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 290.324766][ T6860] loop3: detected capacity change from 0 to 128 [ 290.839730][ T6858] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 290.848594][ T6858] FAT-fs (loop4): Filesystem has been set read-only [ 290.856719][ T6858] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 290.865169][ T6858] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 290.934402][ T6736] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 290.954519][ T6858] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 291.177541][ T22] usb 1-1: USB disconnect, device number 21 [ 291.939032][ T4281] Bluetooth: hci5: command 0x1001 tx timeout [ 291.949289][ T4287] Bluetooth: hci5: CSR: Local version failed (-19) [ 291.970373][ T14] usb 3-1: 0:2 : does not exist [ 291.975581][ T6860] FAT-fs (loop3): bogus number of FAT structure [ 291.981855][ T6860] FAT-fs (loop3): Can't find a valid FAT filesystem [ 291.989196][ T14] usb 3-1: unit 119 not found! [ 292.103571][ T14] usb 3-1: USB disconnect, device number 30 [ 292.175375][ T6871] device syzkaller0 entered promiscuous mode [ 292.376816][ T6527] udevd[6527]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.694714][ T22] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 292.755499][ T6880] loop3: detected capacity change from 0 to 4096 [ 292.954610][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 293.701546][ T22] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 293.710762][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.719406][ T22] usb 1-1: Product: syz [ 293.723605][ T22] usb 1-1: Manufacturer: syz [ 293.731538][ T22] usb 1-1: SerialNumber: syz [ 293.749906][ T22] usb 1-1: config 0 descriptor?? [ 293.779212][ T22] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 294.895976][ T6873] loop1: detected capacity change from 0 to 32768 [ 294.964481][ T22] usb 1-1: clie_3_5_startup: get interface number bad return length: 0 [ 294.966700][ T6873] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.748 (6873) [ 294.972889][ T22] visor: probe of 1-1:0.0 failed with error -5 [ 295.020918][ T6736] usb 1-1: USB disconnect, device number 22 [ 295.079870][ T6873] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 295.096666][ T6906] device syzkaller0 entered promiscuous mode [ 295.103858][ T6873] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 295.144899][ T6873] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 295.254483][ T6873] BTRFS info (device loop1): use zstd compression, level 3 [ 295.262922][ T6873] BTRFS info (device loop1): using free space tree [ 295.462386][ T6927] loop3: detected capacity change from 0 to 512 [ 295.475516][ T22] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 295.679537][ T22] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 295.743044][ T6927] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 295.751944][ T6927] FAT-fs (loop3): Filesystem has been set read-only [ 295.759946][ T6927] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 295.768486][ T6927] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 295.956978][ T6927] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 296.081907][ T22] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.101213][ T22] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 296.172997][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.233578][ T22] usb 5-1: config 0 descriptor?? [ 296.472923][ T22] usb 5-1: string descriptor 0 read error: -71 [ 296.506844][ T22] usb 5-1: USB disconnect, device number 22 [ 297.094027][ T6938] device-mapper: table: 248:6: thin-pool: Error opening metadata block device (-EBUSY) [ 297.105973][ T6873] BTRFS error (device loop1): open_ctree failed: -12 [ 297.121858][ T6938] device-mapper: ioctl: error adding target to table [ 297.161786][ T6938] device-mapper: ioctl: The device has no table. [ 298.093430][ T6947] tc_dump_action: action bad kind [ 298.886924][ T6963] loop2: detected capacity change from 0 to 4096 [ 299.062360][ T6966] loop4: detected capacity change from 0 to 512 [ 299.082228][ T6966] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 299.091081][ T6966] FAT-fs (loop4): Filesystem has been set read-only [ 299.097994][ T6966] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 299.106242][ T6966] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 299.133531][ T6966] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 300.282710][ T6979] netlink: 'syz.0.775': attribute type 3 has an invalid length. [ 301.110555][ T6983] fuse: Bad value for 'fd' [ 301.934409][ T6939] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 302.092211][ T6991] loop2: detected capacity change from 0 to 512 [ 302.436129][ T6977] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 302.446912][ T6977] FAT-fs (loop2): Filesystem has been set read-only [ 302.453877][ T6977] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 302.514859][ T6977] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 302.619624][ T6991] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 302.632375][ T6939] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 302.647535][ T6939] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.676075][ T6939] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 302.694499][ T6939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.724692][ T6939] usb 5-1: config 0 descriptor?? [ 302.935385][ T6939] usb 5-1: string descriptor 0 read error: -71 [ 302.955942][ T6939] usb 5-1: USB disconnect, device number 23 [ 302.984462][ T4350] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 303.176159][ T4350] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.203318][ T4350] usb 4-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 10 [ 303.241814][ T4350] usb 4-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 303.271485][ T4350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.296619][ T4350] usb 4-1: Product: syz [ 303.300840][ T4350] usb 4-1: Manufacturer: syz [ 303.316445][ T4350] usb 4-1: SerialNumber: syz [ 303.335014][ T4350] whiteheat 4-1:1.0: required endpoints missing [ 303.686322][ T7013] loop4: detected capacity change from 0 to 1024 [ 304.004588][ T7013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 305.781155][ T4351] usb 4-1: USB disconnect, device number 28 [ 305.816854][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 307.461680][ T7055] loop2: detected capacity change from 0 to 512 [ 307.486697][ T7055] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 307.495558][ T7055] FAT-fs (loop2): Filesystem has been set read-only [ 307.502451][ T7055] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 307.510754][ T7055] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 307.551527][ T7055] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 308.254537][ T6939] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 308.546761][ T6939] usb 5-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 10 [ 308.589768][ T6939] usb 5-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 308.623207][ T7071] loop1: detected capacity change from 0 to 8 [ 308.640653][ T6939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.859679][ T7071] SQUASHFS error: Unable to read inode 0x11f [ 308.868186][ T6939] usb 5-1: Product: syz [ 308.878861][ T6939] usb 5-1: Manufacturer: syz [ 308.889721][ T6939] usb 5-1: SerialNumber: syz [ 309.812340][ T6939] whiteheat 5-1:1.0: required endpoints missing [ 310.668215][ T7085] loop3: detected capacity change from 0 to 512 [ 311.929821][ T26] audit: type=1800 audit(1792657798.894:2): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.807" name="file1" dev="loop3" ino=1048646 res=0 errno=0 [ 312.004545][ T7089] Zero length message leads to an empty skb [ 312.564948][ T6004] usb 5-1: USB disconnect, device number 24 [ 313.911689][ T7120] loop2: detected capacity change from 0 to 1024 [ 314.954466][ T7121] tc_dump_action: action bad kind [ 315.010556][ T6004] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 316.846273][ T7120] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2. [ 317.056652][ T7127] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 317.119043][ T7127] xt_SECMARK: invalid mode: 9 [ 317.185081][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.196185][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.184976][ T4350] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 318.386590][ T4350] usb 4-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 10 [ 318.413626][ T4350] usb 4-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 318.431014][ T4350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.447018][ T4350] usb 4-1: Product: syz [ 318.456038][ T4350] usb 4-1: Manufacturer: syz [ 318.462029][ T7139] loop4: detected capacity change from 0 to 40427 [ 318.468640][ T4350] usb 4-1: SerialNumber: syz [ 318.497404][ T4350] whiteheat 4-1:1.0: required endpoints missing [ 318.505338][ T7139] F2FS-fs (loop4): invalid crc value [ 318.514459][ T2171] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 318.550963][ T7139] F2FS-fs (loop4): Found nat_bits in checkpoint [ 318.601457][ T7139] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 318.714592][ T2171] usb 1-1: Using ep0 maxpacket: 8 [ 318.721474][ T2171] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.760366][ T2171] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 318.783362][ T2171] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 318.809798][ T2171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.828215][ T2171] usb 1-1: Product: syz [ 318.837796][ T2171] usb 1-1: Manufacturer: syz [ 318.847928][ T2171] usb 1-1: SerialNumber: syz [ 318.946120][ T7161] loop4: detected capacity change from 0 to 1024 [ 320.944471][ T2171] usb 1-1: 1:1 : bogus bTerminalLink 7 [ 320.964575][ T2171] usb 1-1: 0:2 : does not exist [ 320.974442][ T2171] usb 1-1: unit 119 not found! [ 320.991300][ T7161] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 321.110241][ T6008] usb 4-1: USB disconnect, device number 29 [ 321.814744][ T4387] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 321.846015][ T2171] usb 1-1: USB disconnect, device number 23 [ 321.909458][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 321.951390][ T7175] tc_dump_action: action bad kind [ 322.023342][ T4387] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 322.062994][ T4387] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 322.111893][ T6835] udevd[6835]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.185462][ T4387] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 322.278606][ T4387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.477571][ T4387] usb 3-1: probing VID:PID(0424:012C) [ 322.662990][ T4387] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 322.684496][ T4387] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 322.711011][ T4387] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 322.742247][ T4387] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 322.749786][ T4387] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 322.869696][ T7183] loop4: detected capacity change from 0 to 8 [ 322.905536][ T7183] SQUASHFS error: Unable to read inode 0x11f [ 322.996899][ T4387] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 323.209671][ T4387] usb 3-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 324.181382][ T4387] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 324.464659][ T26] audit: type=1326 audit(1792657812.064:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.0.843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfc239f559 code=0x0 [ 324.987399][ T4387] usb 3-1: USB disconnect, device number 31 [ 325.027559][ T4387] USB vub300 remote SDIO host controller[0] now disconnected [ 325.101249][ T7192] loop1: detected capacity change from 0 to 40427 [ 325.133231][ T7192] F2FS-fs (loop1): invalid crc value [ 325.230908][ T7214] loop3: detected capacity change from 0 to 1024 [ 325.243770][ T6004] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 325.454503][ T4387] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 325.481738][ T7192] F2FS-fs (loop1): Found nat_bits in checkpoint [ 325.504255][ T7214] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 325.604726][ T6004] usb 5-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 10 [ 325.764599][ T4387] usb 3-1: Using ep0 maxpacket: 8 [ 325.782490][ T4387] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.874625][ T6004] usb 5-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 325.974555][ C1] [ 325.976942][ C1] ================================ [ 325.982062][ C1] WARNING: inconsistent lock state [ 325.987198][ C1] syzkaller #0 Not tainted [ 325.991626][ C1] -------------------------------- [ 325.996742][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 326.003604][ C1] syz.1.841/7192 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 326.009869][ C1] ffff888019a88648 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0x109/0xac0 [ 326.021131][ C1] {SOFTIRQ-ON-W} state was registered at: [ 326.026868][ C1] lock_acquire+0x1bc/0x4a0 [ 326.031518][ C1] __flush_work+0x122/0xac0 [ 326.036130][ C1] __cancel_work_timer+0x3f4/0x560 [ 326.041353][ C1] mmc_stop_host+0xd5/0x460 [ 326.045965][ C1] mmc_remove_host+0x11/0x60 [ 326.050667][ C1] vub300_disconnect+0x14b/0x2e0 [ 326.055715][ C1] usb_unbind_interface+0x200/0x870 [ 326.061023][ C1] device_release_driver_internal+0x4cf/0x7c0 [ 326.067195][ C1] bus_remove_device+0x2dd/0x400 [ 326.072234][ C1] device_del+0x63f/0xa80 [ 326.076684][ C1] usb_disable_device+0x3e7/0x8a0 [ 326.081818][ C1] usb_disconnect+0x33c/0x8a0 [ 326.086606][ C1] hub_event+0x1d27/0x5200 [ 326.091132][ C1] process_one_work+0x8ab/0x1160 [ 326.096187][ C1] worker_thread+0xd6e/0x12a0 [ 326.100978][ C1] kthread+0x29d/0x330 [ 326.105195][ C1] ret_from_fork+0x1f/0x30 [ 326.109721][ C1] irq event stamp: 149638 [ 326.114043][ C1] hardirqs last enabled at (149638): [] __cancel_work_timer+0x36a/0x560 [ 326.124026][ C1] hardirqs last disabled at (149637): [] try_to_grab_pending+0xfa/0x890 [ 326.133949][ C1] softirqs last enabled at (148984): [] __irq_exit_rcu+0x13b/0x230 [ 326.143503][ C1] softirqs last disabled at (149573): [] __irq_exit_rcu+0x13b/0x230 [ 326.153099][ C1] [ 326.153099][ C1] other info that might help us debug this: [ 326.161192][ C1] Possible unsafe locking scenario: [ 326.161192][ C1] [ 326.168664][ C1] CPU0 [ 326.171970][ C1] ---- [ 326.175288][ C1] lock((work_completion)(&(&host->detect)->work)); [ 326.182698][ C1] [ 326.186159][ C1] lock((work_completion)(&(&host->detect)->work)); [ 326.193018][ C1] [ 326.193018][ C1] *** DEADLOCK *** [ 326.193018][ C1] [ 326.201160][ C1] 3 locks held by syz.1.841/7192: [ 326.206183][ C1] #0: ffff88807842e0e0 (&type->s_umount_key#59/1){+.+.}-{3:3}, at: alloc_super+0x1fb/0x930 [ 326.216298][ C1] #1: ffff888077c1a238 (&nm_i->nid_list_lock){+.+.}-{2:2}, at: f2fs_build_node_manager+0x1b33/0x2c10 [ 326.227270][ C1] #2: ffffc900001e0bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xcf/0x670 [ 326.237714][ C1] [ 326.237714][ C1] stack backtrace: [ 326.243614][ C1] CPU: 1 PID: 7192 Comm: syz.1.841 Not tainted syzkaller #0 [ 326.250907][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 326.260973][ C1] Call Trace: [ 326.264261][ C1] [ 326.267107][ C1] dump_stack_lvl+0x188/0x24e [ 326.271791][ C1] ? show_regs_print_info+0x12/0x12 [ 326.276994][ C1] ? unwind_get_return_address+0x49/0x80 [ 326.282635][ C1] valid_state+0x13b/0x1d0 [ 326.287070][ C1] mark_lock_irq+0xa9/0x900 [ 326.291585][ C1] ? stack_trace_save+0xa6/0xf0 [ 326.296440][ C1] ? save_trace+0xbb0/0xbb0 [ 326.300951][ C1] ? save_trace+0x5a/0xbb0 [ 326.305376][ C1] mark_lock+0x208/0x320 [ 326.309628][ C1] __lock_acquire+0xdf3/0x7ea0 [ 326.314412][ C1] ? verify_lock_unused+0x140/0x140 [ 326.319620][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 326.324716][ C1] ? debug_object_assert_init+0x1ed/0x300 [ 326.330444][ C1] lock_acquire+0x1bc/0x4a0 [ 326.334952][ C1] ? __flush_work+0x109/0xac0 [ 326.339634][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 326.344846][ C1] ? read_lock_is_recursive+0x10/0x10 [ 326.350232][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 326.356133][ C1] ? _raw_spin_unlock+0x40/0x40 [ 326.361079][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 326.366729][ C1] ? kobject_put+0x25c/0x450 [ 326.371338][ C1] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 326.377681][ C1] ? call_timer_fn+0x1ac/0x670 [ 326.382455][ C1] ? __flush_work+0x109/0xac0 [ 326.387135][ C1] __flush_work+0x122/0xac0 [ 326.391661][ C1] ? __flush_work+0x109/0xac0 [ 326.396355][ C1] ? flush_work+0x20/0x20 [ 326.400694][ C1] ? __timer_delete+0x6c/0x220 [ 326.405464][ C1] ? mark_lock+0x94/0x320 [ 326.409817][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 326.415835][ C1] ? mod_delayed_work_on+0x1b0/0x1b0 [ 326.421124][ C1] ? lock_chain_count+0x20/0x20 [ 326.425982][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 326.431281][ C1] ? __cancel_work_timer+0x36a/0x560 [ 326.436670][ C1] __cancel_work_timer+0x3f4/0x560 [ 326.441795][ C1] ? cancel_work_sync+0x20/0x20 [ 326.446660][ C1] ? kobject_put+0x25c/0x450 [ 326.451262][ C1] ? __kmem_cache_free+0xb6/0x200 [ 326.456296][ C1] ? kobject_put+0x41d/0x450 [ 326.460899][ C1] mmc_free_host+0x15/0x40 [ 326.465331][ C1] call_timer_fn+0x1ac/0x670 [ 326.469938][ C1] ? kref_get+0x70/0x70 [ 326.474101][ C1] ? call_timer_fn+0xcf/0x670 [ 326.478779][ C1] ? __run_timers+0x810/0x810 [ 326.483461][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 326.488667][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 326.493881][ C1] ? kref_get+0x70/0x70 [ 326.498144][ C1] __run_timers+0x56c/0x810 [ 326.502661][ C1] ? detach_timer+0x350/0x350 [ 326.507343][ C1] ? lock_chain_count+0x20/0x20 [ 326.512204][ C1] run_timer_softirq+0x63/0xf0 [ 326.516969][ C1] handle_softirqs+0x291/0x910 [ 326.521737][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 326.526590][ C1] ? do_softirq+0x210/0x210 [ 326.531092][ C1] ? hrtimer_interrupt+0x775/0x980 [ 326.536207][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 326.541408][ C1] __irq_exit_rcu+0x13b/0x230 [ 326.546095][ C1] ? irq_exit_rcu+0x20/0x20 [ 326.550610][ C1] irq_exit_rcu+0x5/0x20 [ 326.554861][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 326.560507][ C1] [ 326.563435][ C1] [ 326.566364][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 326.572356][ C1] RIP: 0010:f2fs_build_node_manager+0x1bdb/0x2c10 [ 326.578780][ C1] Code: 20 44 89 e9 29 c1 d1 e9 01 c1 c1 e9 08 48 8b 1b 41 89 cc c1 e9 06 48 8d 3c cb be 08 00 00 00 e8 3b a5 1f fe 31 f6 4c 0f a3 23 <0f> 92 c3 40 0f 92 c6 bf 02 00 00 00 e8 04 4a ce fd 84 db 0f 84 c5 [ 326.598481][ C1] RSP: 0018:ffffc9000d2d79b8 EFLAGS: 00000247 [ 326.604554][ C1] RAX: 0000000000002b01 RBX: ffff88814cec0500 RCX: ffffffff83b3fec5 [ 326.612560][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88814cec0518 [ 326.620541][ C1] RBP: 0000000000015790 R08: ffff88814cec051f R09: 1ffff110299d80a3 [ 326.628517][ C1] R10: dffffc0000000000 R11: ffffed10299d80a4 R12: 00000000000000c1 [ 326.636493][ C1] R13: 0000000000015790 R14: ffff8880303f0158 R15: 00000000000158ce [ 326.644472][ C1] ? f2fs_build_node_manager+0x1bd5/0x2c10 [ 326.650307][ C1] ? f2fs_build_node_manager+0x1bd5/0x2c10 [ 326.656122][ C1] f2fs_fill_super+0x4172/0x6ba0 [ 326.661088][ C1] ? kill_f2fs_super+0x3d0/0x3d0 [ 326.666030][ C1] ? up_write+0x1b6/0x410 [ 326.670367][ C1] ? set_blocksize+0x1d0/0x470 [ 326.675137][ C1] ? sb_set_blocksize+0xa5/0xe0 [ 326.679996][ C1] mount_bdev+0x28a/0x3c0 [ 326.684330][ C1] ? kill_f2fs_super+0x3d0/0x3d0 [ 326.689287][ C1] legacy_get_tree+0xe6/0x180 [ 326.693972][ C1] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 326.700132][ C1] vfs_get_tree+0x88/0x270 [ 326.704575][ C1] do_new_mount+0x247/0xa40 [ 326.709101][ C1] __se_sys_mount+0x2e3/0x3d0 [ 326.713798][ C1] ? __x64_sys_mount+0xc0/0xc0 [ 326.718589][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 326.723809][ C1] ? __x64_sys_mount+0x1c/0xc0 [ 326.728609][ C1] do_syscall_64+0x4c/0xa0 [ 326.733043][ C1] ? clear_bhb_loop+0x60/0xb0 [ 326.737721][ C1] ? clear_bhb_loop+0x60/0xb0 [ 326.742400][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.748310][ C1] RIP: 0033:0x7fc9a13a07ca [ 326.752728][ C1] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.772341][ C1] RSP: 002b:00007fc9a21b7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.780760][ C1] RAX: ffffffffffffffda RBX: 00007fc9a21b7ee0 RCX: 00007fc9a13a07ca [ 326.788734][ C1] RDX: 0000200000000400 RSI: 0000200000000680 RDI: 00007fc9a21b7ea0 [ 326.796714][ C1] RBP: 0000200000000400 R08: 00007fc9a21b7ee0 R09: 0000000001000800 [ 326.804693][ C1] R10: 0000000001000800 R11: 0000000000000246 R12: 0000200000000680 [ 326.812675][ C1] R13: 00007fc9a21b7ea0 R14: 0000000000005524 R15: 00002000000006c0 [ 326.820657][ C1] [ 326.823781][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.829830][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3013 [ 326.839091][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7192, name: syz.1.841 [ 326.848080][ C1] preempt_count: 101, expected: 0 [ 326.853140][ C1] RCU nest depth: 0, expected: 0 [ 326.858123][ C1] INFO: lockdep is turned off. [ 326.862890][ C1] Preemption disabled at: [ 326.862899][ C1] [<0000000000000000>] 0x0 [ 326.871744][ C1] CPU: 1 PID: 7192 Comm: syz.1.841 Not tainted syzkaller #0 [ 326.879050][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 326.889120][ C1] Call Trace: [ 326.892414][ C1] [ 326.895273][ C1] dump_stack_lvl+0x188/0x24e [ 326.899988][ C1] ? show_regs_print_info+0x12/0x12 [ 326.905205][ C1] ? load_image+0x410/0x410 [ 326.909731][ C1] __might_resched+0x489/0x5f0 [ 326.914516][ C1] ? __might_sleep+0xd0/0xd0 [ 326.919124][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 326.924169][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 326.930087][ C1] ? _raw_spin_unlock+0x40/0x40 [ 326.934976][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 326.940647][ C1] ? kobject_put+0x25c/0x450 [ 326.945267][ C1] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 326.951625][ C1] ? call_timer_fn+0x1ac/0x670 [ 326.956418][ C1] ? __flush_work+0x109/0xac0 [ 326.961113][ C1] __flush_work+0x142/0xac0 [ 326.965703][ C1] ? flush_work+0x20/0x20 [ 326.970113][ C1] ? __timer_delete+0x6c/0x220 [ 326.974908][ C1] ? mark_lock+0x94/0x320 [ 326.979263][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 326.985262][ C1] ? mod_delayed_work_on+0x1b0/0x1b0 [ 326.990560][ C1] ? lock_chain_count+0x20/0x20 [ 326.995435][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 327.000735][ C1] ? __cancel_work_timer+0x36a/0x560 [ 327.006044][ C1] __cancel_work_timer+0x3f4/0x560 [ 327.011258][ C1] ? cancel_work_sync+0x20/0x20 [ 327.016129][ C1] ? kobject_put+0x25c/0x450 [ 327.020740][ C1] ? __kmem_cache_free+0xb6/0x200 [ 327.025797][ C1] ? kobject_put+0x41d/0x450 [ 327.030430][ C1] mmc_free_host+0x15/0x40 [ 327.034873][ C1] call_timer_fn+0x1ac/0x670 [ 327.039479][ C1] ? kref_get+0x70/0x70 [ 327.043663][ C1] ? call_timer_fn+0xcf/0x670 [ 327.048355][ C1] ? __run_timers+0x810/0x810 [ 327.053050][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 327.058264][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 327.063488][ C1] ? kref_get+0x70/0x70 [ 327.067664][ C1] __run_timers+0x56c/0x810 [ 327.072195][ C1] ? detach_timer+0x350/0x350 [ 327.076895][ C1] ? lock_chain_count+0x20/0x20 [ 327.081775][ C1] run_timer_softirq+0x63/0xf0 [ 327.086554][ C1] handle_softirqs+0x291/0x910 [ 327.091341][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 327.096213][ C1] ? do_softirq+0x210/0x210 [ 327.100731][ C1] ? hrtimer_interrupt+0x775/0x980 [ 327.105862][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 327.111086][ C1] __irq_exit_rcu+0x13b/0x230 [ 327.115782][ C1] ? irq_exit_rcu+0x20/0x20 [ 327.120302][ C1] irq_exit_rcu+0x5/0x20 [ 327.124559][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 327.130227][ C1] [ 327.133167][ C1] [ 327.136114][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 327.142123][ C1] RIP: 0010:f2fs_build_node_manager+0x1bdb/0x2c10 [ 327.148569][ C1] Code: 20 44 89 e9 29 c1 d1 e9 01 c1 c1 e9 08 48 8b 1b 41 89 cc c1 e9 06 48 8d 3c cb be 08 00 00 00 e8 3b a5 1f fe 31 f6 4c 0f a3 23 <0f> 92 c3 40 0f 92 c6 bf 02 00 00 00 e8 04 4a ce fd 84 db 0f 84 c5 [ 327.168304][ C1] RSP: 0018:ffffc9000d2d79b8 EFLAGS: 00000247 [ 327.174395][ C1] RAX: 0000000000002b01 RBX: ffff88814cec0500 RCX: ffffffff83b3fec5 [ 327.184407][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88814cec0518 [ 327.192394][ C1] RBP: 0000000000015790 R08: ffff88814cec051f R09: 1ffff110299d80a3 [ 327.200444][ C1] R10: dffffc0000000000 R11: ffffed10299d80a4 R12: 00000000000000c1 [ 327.208430][ C1] R13: 0000000000015790 R14: ffff8880303f0158 R15: 00000000000158ce [ 327.216420][ C1] ? f2fs_build_node_manager+0x1bd5/0x2c10 [ 327.222247][ C1] ? f2fs_build_node_manager+0x1bd5/0x2c10 [ 327.228078][ C1] f2fs_fill_super+0x4172/0x6ba0 [ 327.233054][ C1] ? kill_f2fs_super+0x3d0/0x3d0 [ 327.238036][ C1] ? up_write+0x1b6/0x410 [ 327.242399][ C1] ? set_blocksize+0x1d0/0x470 [ 327.247207][ C1] ? sb_set_blocksize+0xa5/0xe0 [ 327.252095][ C1] mount_bdev+0x28a/0x3c0 [ 327.256461][ C1] ? kill_f2fs_super+0x3d0/0x3d0 [ 327.261441][ C1] legacy_get_tree+0xe6/0x180 [ 327.266150][ C1] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 327.272346][ C1] vfs_get_tree+0x88/0x270 [ 327.276903][ C1] do_new_mount+0x247/0xa40 [ 327.281467][ C1] __se_sys_mount+0x2e3/0x3d0 [ 327.286160][ C1] ? __x64_sys_mount+0xc0/0xc0 [ 327.291025][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 327.296254][ C1] ? __x64_sys_mount+0x1c/0xc0 [ 327.301039][ C1] do_syscall_64+0x4c/0xa0 [ 327.305479][ C1] ? clear_bhb_loop+0x60/0xb0 [ 327.310193][ C1] ? clear_bhb_loop+0x60/0xb0 [ 327.314960][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.320908][ C1] RIP: 0033:0x7fc9a13a07ca [ 327.325328][ C1] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.344947][ C1] RSP: 002b:00007fc9a21b7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 327.353378][ C1] RAX: ffffffffffffffda RBX: 00007fc9a21b7ee0 RCX: 00007fc9a13a07ca [ 327.361375][ C1] RDX: 0000200000000400 RSI: 0000200000000680 RDI: 00007fc9a21b7ea0 [ 327.369368][ C1] RBP: 0000200000000400 R08: 00007fc9a21b7ee0 R09: 0000000001000800 [ 327.377435][ C1] R10: 0000000001000800 R11: 0000000000000246 R12: 0000200000000680 [ 327.385418][ C1] R13: 00007fc9a21b7ea0 R14: 0000000000005524 R15: 00002000000006c0 [ 327.393929][ C1] [ 327.397006][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.403063][ C1] ODEBUG: object ffffc900001e09a0 is NOT on stack ffffc9000d2d0000, but annotated. [ 327.412806][ C1] ------------[ cut here ]------------ [ 327.418380][ C1] WARNING: CPU: 1 PID: 7192 at lib/debugobjects.c:558 __debug_object_init+0x18e/0x440 [ 327.427966][ C1] Modules linked in: [ 327.431883][ C1] CPU: 1 PID: 7192 Comm: syz.1.841 Tainted: G W syzkaller #0 [ 327.440668][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 327.450752][ C1] RIP: 0010:__debug_object_init+0x18e/0x440 [ 327.456676][ C1] Code: 24 04 74 2f 41 ff c6 44 89 35 3e 36 bf 13 48 c7 c1 00 7a df 8a 48 c7 c7 60 7a df 8a 84 c0 48 0f 45 f9 48 89 de e8 f2 9a 0d 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 327.476302][ C1] RSP: 0018:ffffc900001e0908 EFLAGS: 00010046 [ 327.482404][ C1] RAX: 0000000000000050 RBX: ffffc900001e09a0 RCX: 381cd1ff0a0c7700 [ 327.490411][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 327.498404][ C1] RBP: dffffc0000000000 R08: ffffc900001e0587 R09: 1ffff9200003c0b0 [ 327.506399][ C1] R10: dffffc0000000000 R11: fffff5200003c0b1 R12: ffff888027630020 [ 327.514388][ C1] R13: ffff8880562e8e70 R14: 0000000000000001 R15: ffffffff8a8d32c0 [ 327.522383][ C1] FS: 00007fc9a21b86c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 327.531341][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.537951][ C1] CR2: 0000001b2fd06ff8 CR3: 000000007ddfa000 CR4: 00000000003506e0 [ 327.545960][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 327.553953][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 327.561956][ C1] Call Trace: [ 327.565255][ C1] [ 327.568111][ C1] __synchronize_srcu+0x227/0x350 [ 327.573184][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 327.578948][ C1] ? _raw_spin_unlock+0x40/0x40 [ 327.583813][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 327.589379][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 327.594428][ C1] wakeup_source_unregister+0x112/0x190 [ 327.599993][ C1] mmc_host_classdev_release+0x43/0xf0 [ 327.605478][ C1] ? mmc_free_host+0x40/0x40 [ 327.610084][ C1] device_release+0x92/0x1c0 [ 327.614687][ C1] kobject_put+0x217/0x450 [ 327.619131][ C1] call_timer_fn+0x1ac/0x670 [ 327.623736][ C1] ? kref_get+0x70/0x70 [ 327.627911][ C1] ? call_timer_fn+0xcf/0x670 [ 327.632608][ C1] ? __run_timers+0x810/0x810 [ 327.637306][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 327.642517][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 327.647766][ C1] ? kref_get+0x70/0x70 [ 327.651945][ C1] __run_timers+0x56c/0x810 [ 327.656465][ C1] ? detach_timer+0x350/0x350 [ 327.661162][ C1] ? lock_chain_count+0x20/0x20 [ 327.666047][ C1] run_timer_softirq+0x63/0xf0 [ 327.670825][ C1] handle_softirqs+0x291/0x910 [ 327.675603][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 327.680466][ C1] ? do_softirq+0x210/0x210 [ 327.684974][ C1] ? hrtimer_interrupt+0x775/0x980 [ 327.690101][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 327.695319][ C1] __irq_exit_rcu+0x13b/0x230 [ 327.700007][ C1] ? irq_exit_rcu+0x20/0x20 [ 327.704532][ C1] irq_exit_rcu+0x5/0x20 [ 327.708785][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 327.714435][ C1] [ 327.717374][ C1] [ 327.720315][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 327.726313][ C1] RIP: 0010:f2fs_build_node_manager+0x1bdb/0x2c10 [ 327.732739][ C1] Code: 20 44 89 e9 29 c1 d1 e9 01 c1 c1 e9 08 48 8b 1b 41 89 cc c1 e9 06 48 8d 3c cb be 08 00 00 00 e8 3b a5 1f fe 31 f6 4c 0f a3 23 <0f> 92 c3 40 0f 92 c6 bf 02 00 00 00 e8 04 4a ce fd 84 db 0f 84 c5 [ 327.752366][ C1] RSP: 0018:ffffc9000d2d79b8 EFLAGS: 00000247 [ 327.758456][ C1] RAX: 0000000000002b01 RBX: ffff88814cec0500 RCX: ffffffff83b3fec5 [ 327.766440][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88814cec0518 [ 327.774433][ C1] RBP: 0000000000015790 R08: ffff88814cec051f R09: 1ffff110299d80a3 [ 327.782423][ C1] R10: dffffc0000000000 R11: ffffed10299d80a4 R12: 00000000000000c1 [ 327.790415][ C1] R13: 0000000000015790 R14: ffff8880303f0158 R15: 00000000000158ce [ 327.798396][ C1] ? f2fs_build_node_manager+0x1bd5/0x2c10 [ 327.804210][ C1] ? f2fs_build_node_manager+0x1bd5/0x2c10 [ 327.810021][ C1] f2fs_fill_super+0x4172/0x6ba0 [ 327.814973][ C1] ? kill_f2fs_super+0x3d0/0x3d0 [ 327.819917][ C1] ? up_write+0x1b6/0x410 [ 327.824247][ C1] ? set_blocksize+0x1d0/0x470 [ 327.829009][ C1] ? sb_set_blocksize+0xa5/0xe0 [ 327.833874][ C1] mount_bdev+0x28a/0x3c0 [ 327.838200][ C1] ? kill_f2fs_super+0x3d0/0x3d0 [ 327.843138][ C1] legacy_get_tree+0xe6/0x180 [ 327.847811][ C1] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 327.853969][ C1] vfs_get_tree+0x88/0x270 [ 327.858390][ C1] do_new_mount+0x247/0xa40 [ 327.862892][ C1] __se_sys_mount+0x2e3/0x3d0 [ 327.867568][ C1] ? __x64_sys_mount+0xc0/0xc0 [ 327.872330][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 327.877535][ C1] ? __x64_sys_mount+0x1c/0xc0 [ 327.882300][ C1] do_syscall_64+0x4c/0xa0 [ 327.886714][ C1] ? clear_bhb_loop+0x60/0xb0 [ 327.891390][ C1] ? clear_bhb_loop+0x60/0xb0 [ 327.896068][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.901960][ C1] RIP: 0033:0x7fc9a13a07ca [ 327.906370][ C1] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.925976][ C1] RSP: 002b:00007fc9a21b7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 327.934387][ C1] RAX: ffffffffffffffda RBX: 00007fc9a21b7ee0 RCX: 00007fc9a13a07ca [ 327.942354][ C1] RDX: 0000200000000400 RSI: 0000200000000680 RDI: 00007fc9a21b7ea0 [ 327.950324][ C1] RBP: 0000200000000400 R08: 00007fc9a21b7ee0 R09: 0000000001000800 [ 327.958292][ C1] R10: 0000000001000800 R11: 0000000000000246 R12: 0000200000000680 [ 327.966261][ C1] R13: 00007fc9a21b7ea0 R14: 0000000000005524 R15: 00002000000006c0 [ 327.974257][ C1] [ 327.977289][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 327.984574][ C1] CPU: 1 PID: 7192 Comm: syz.1.841 Tainted: G W syzkaller #0 [ 327.993328][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 328.003379][ C1] Call Trace: [ 328.006655][ C1] [ 328.009492][ C1] dump_stack_lvl+0x188/0x24e [ 328.014172][ C1] ? memcpy+0x3c/0x60 [ 328.018150][ C1] ? show_regs_print_info+0x12/0x12 [ 328.023359][ C1] ? load_image+0x410/0x410 [ 328.027872][ C1] panic+0x2d3/0x710 [ 328.031886][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 328.036398][ C1] __warn+0x2f8/0x4f0 [ 328.040382][ C1] ? __debug_object_init+0x18e/0x440 [ 328.045665][ C1] ? __debug_object_init+0x18e/0x440 [ 328.050946][ C1] report_bug+0x2ba/0x4f0 [ 328.055277][ C1] ? __debug_object_init+0x18e/0x440 [ 328.060567][ C1] handle_bug+0x3a/0x70 [ 328.064725][ C1] exc_invalid_op+0x16/0x40 [ 328.069227][ C1] asm_exc_invalid_op+0x16/0x20 [ 328.074074][ C1] RIP: 0010:__debug_object_init+0x18e/0x440 [ 328.079969][ C1] Code: 24 04 74 2f 41 ff c6 44 89 35 3e 36 bf 13 48 c7 c1 00 7a df 8a 48 c7 c7 60 7a df 8a 84 c0 48 0f 45 f9 48 89 de e8 f2 9a 0d 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 328.099585][ C1] RSP: 0018:ffffc900001e0908 EFLAGS: 00010046 [ 328.105652][ C1] RAX: 0000000000000050 RBX: ffffc900001e09a0 RCX: 381cd1ff0a0c7700 [ 328.113625][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 328.121592][ C1] RBP: dffffc0000000000 R08: ffffc900001e0587 R09: 1ffff9200003c0b0 [ 328.129558][ C1] R10: dffffc0000000000 R11: fffff5200003c0b1 R12: ffff888027630020 [ 328.137521][ C1] R13: ffff8880562e8e70 R14: 0000000000000001 R15: ffffffff8a8d32c0 [ 328.145497][ C1] ? __debug_object_init+0x18e/0x440 [ 328.150784][ C1] __synchronize_srcu+0x227/0x350 [ 328.155811][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 328.161533][ C1] ? _raw_spin_unlock+0x40/0x40 [ 328.166376][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 328.171934][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 328.176958][ C1] wakeup_source_unregister+0x112/0x190 [ 328.182506][ C1] mmc_host_classdev_release+0x43/0xf0 [ 328.187965][ C1] ? mmc_free_host+0x40/0x40 [ 328.192553][ C1] device_release+0x92/0x1c0 [ 328.197137][ C1] kobject_put+0x217/0x450 [ 328.201553][ C1] call_timer_fn+0x1ac/0x670 [ 328.206139][ C1] ? kref_get+0x70/0x70 [ 328.210296][ C1] ? call_timer_fn+0xcf/0x670 [ 328.214971][ C1] ? __run_timers+0x810/0x810 [ 328.219644][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 328.224837][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 328.230032][ C1] ? kref_get+0x70/0x70 [ 328.234184][ C1] __run_timers+0x56c/0x810 [ 328.238686][ C1] ? detach_timer+0x350/0x350 [ 328.243362][ C1] ? lock_chain_count+0x20/0x20 [ 328.248215][ C1] run_timer_softirq+0x63/0xf0 [ 328.252971][ C1] handle_softirqs+0x291/0x910 [ 328.257737][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 328.262583][ C1] ? do_softirq+0x210/0x210 [ 328.267076][ C1] ? hrtimer_interrupt+0x775/0x980 [ 328.272187][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 328.277379][ C1] __irq_exit_rcu+0x13b/0x230 [ 328.282056][ C1] ? irq_exit_rcu+0x20/0x20 [ 328.286557][ C1] irq_exit_rcu+0x5/0x20 [ 328.290790][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 328.296438][ C1] [ 328.299367][ C1] [ 328.302291][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 328.308276][ C1] RIP: 0010:f2fs_build_node_manager+0x1bdb/0x2c10 [ 328.314686][ C1] Code: 20 44 89 e9 29 c1 d1 e9 01 c1 c1 e9 08 48 8b 1b 41 89 cc c1 e9 06 48 8d 3c cb be 08 00 00 00 e8 3b a5 1f fe 31 f6 4c 0f a3 23 <0f> 92 c3 40 0f 92 c6 bf 02 00 00 00 e8 04 4a ce fd 84 db 0f 84 c5 [ 328.334295][ C1] RSP: 0018:ffffc9000d2d79b8 EFLAGS: 00000247 [ 328.340361][ C1] RAX: 0000000000002b01 RBX: ffff88814cec0500 RCX: ffffffff83b3fec5 [ 328.348329][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88814cec0518 [ 328.356301][ C1] RBP: 0000000000015790 R08: ffff88814cec051f R09: 1ffff110299d80a3 [ 328.364266][ C1] R10: dffffc0000000000 R11: ffffed10299d80a4 R12: 00000000000000c1 [ 328.372232][ C1] R13: 0000000000015790 R14: ffff8880303f0158 R15: 00000000000158ce [ 328.380204][ C1] ? f2fs_build_node_manager+0x1bd5/0x2c10 [ 328.386010][ C1] ? f2fs_build_node_manager+0x1bd5/0x2c10 [ 328.391823][ C1] f2fs_fill_super+0x4172/0x6ba0 [ 328.396775][ C1] ? kill_f2fs_super+0x3d0/0x3d0 [ 328.401713][ C1] ? up_write+0x1b6/0x410 [ 328.406046][ C1] ? set_blocksize+0x1d0/0x470 [ 328.410808][ C1] ? sb_set_blocksize+0xa5/0xe0 [ 328.415653][ C1] mount_bdev+0x28a/0x3c0 [ 328.419995][ C1] ? kill_f2fs_super+0x3d0/0x3d0 [ 328.424945][ C1] legacy_get_tree+0xe6/0x180 [ 328.429621][ C1] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 328.435780][ C1] vfs_get_tree+0x88/0x270 [ 328.440202][ C1] do_new_mount+0x247/0xa40 [ 328.444714][ C1] __se_sys_mount+0x2e3/0x3d0 [ 328.449389][ C1] ? __x64_sys_mount+0xc0/0xc0 [ 328.454160][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 328.459358][ C1] ? __x64_sys_mount+0x1c/0xc0 [ 328.464120][ C1] do_syscall_64+0x4c/0xa0 [ 328.468533][ C1] ? clear_bhb_loop+0x60/0xb0 [ 328.473208][ C1] ? clear_bhb_loop+0x60/0xb0 [ 328.477880][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.483771][ C1] RIP: 0033:0x7fc9a13a07ca [ 328.488177][ C1] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.507794][ C1] RSP: 002b:00007fc9a21b7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 328.516212][ C1] RAX: ffffffffffffffda RBX: 00007fc9a21b7ee0 RCX: 00007fc9a13a07ca [ 328.524182][ C1] RDX: 0000200000000400 RSI: 0000200000000680 RDI: 00007fc9a21b7ea0 [ 328.532166][ C1] RBP: 0000200000000400 R08: 00007fc9a21b7ee0 R09: 0000000001000800 [ 328.540140][ C1] R10: 0000000001000800 R11: 0000000000000246 R12: 0000200000000680 [ 328.548110][ C1] R13: 00007fc9a21b7ea0 R14: 0000000000005524 R15: 00002000000006c0 [ 328.556083][ C1] [ 328.559349][ C1] Kernel Offset: disabled [ 328.563665][ C1] Rebooting in 86400 seconds..