last executing test programs: 12.946988041s ago: executing program 3 (id=2837): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000900)=[@free_buffer={0x40086303, r4}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001880)={0xd8, 0x0, &(0x7f0000000780)=[@clear_death={0x400c630f, 0x2}, @free_buffer={0x40086303, r4}, @request_death={0x400c630e, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/70, 0x46, 0x0, 0x30}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}, @exit_looper, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0x6, 0x2, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/224, 0xe0, 0x2, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000740)={0x0, 0x20, 0x48}}}], 0x1000, 0x0, &(0x7f0000000880)="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"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd09, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040) 12.903095314s ago: executing program 3 (id=2839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10000004}]}, 0x38}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) 10.000867589s ago: executing program 0 (id=2845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000008e, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xecf5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48801) writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000540)="0a081abfb443298b48e0b88996c20459f8a089780ddecfb30457d2ec430ddbe8ac99b0b85d0acbc6033fae8326e27bbc4adafd156b8b9535ba9a77923855e0f5fd95f57999f867ada860bd1fe1a84c3591f0812f0c1a9baa5194e7", 0x5b}, {&(0x7f00000005c0)="6ff816ac3ac3f42e69398788c6bd4a7bb9296183312bb3735f3e4c3182a206923c29138f4bc18d14a80285d5f5858c24956b33a4a4aa9e0190ff15d0dc254fd3f3c0aadb565ef9d11f5a74b714a967fb43d66d", 0x53}, {&(0x7f0000000640)="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", 0xfe}, {&(0x7f0000000740)="1cf637c757310ddf5f6ad1aeedf4543fb01bb8e294261b5a1d45a732a2f78e129a3b3eb0d2b917ced10a75d1e56e5f4538437a6e3bc6717f5889151153fe17e8c445d748f35070284759f1320184e4af151c439c3b519f1af73a009447108a38c5e2696c920198c270e0d3caf96e6614be0d754fe410df2261038348a33e644c4b8a2ec9f42b7b01e3af53d918e7ceeaf7", 0x91}, {0x0}], 0x5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x2, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x43, 0x9, 0x1, {0x8001, 0x4, 0x5, 0x3, 0x3, 0x2, 0xd, 0x9, 0x800da71e}}, 0x43) r5 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x3, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 9.363659846s ago: executing program 3 (id=2847): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = open(0x0, 0x0, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r11 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000900)=[@free_buffer={0x40086303, r11}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001880)={0xd8, 0x0, &(0x7f0000000780)=[@clear_death={0x400c630f, 0x2}, @free_buffer={0x40086303, r11}, @request_death={0x400c630e, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/70, 0x46, 0x0, 0x30}, @fd={0x66642a85, 0x0, r0}}, 0x0}}, @exit_looper, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0x6, 0x2, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/224, 0xe0, 0x2, 0x1}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000740)={0x0, 0x20, 0x48}}}], 0x1000, 0x0, &(0x7f0000000880)="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"}) sendmsg$nl_route(r7, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd09, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 9.03722819s ago: executing program 0 (id=2849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000008e, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xecf5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48801) writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000540)="0a081abfb443298b48e0b88996c20459f8a089780ddecfb30457d2ec430ddbe8ac99b0b85d0acbc6033fae8326e27bbc4adafd156b8b9535ba9a77923855e0f5fd95f57999f867ada860bd1fe1a84c3591f0812f0c1a9baa51", 0x59}, {&(0x7f00000005c0)}, {0x0}, {&(0x7f0000000740)="1cf637c757310ddf5f6ad1aeedf4543fb01bb8e294261b5a1d45a732a2f78e129a3b3eb0d2b917ced10a75d1e56e5f4538437a6e3bc6717f5889151153fe17e8c445d748f35070284759f1320184e4af151c439c3b519f1af73a009447108a38c5e2696c920198c270e0d3caf96e6614be0d754fe410df2261038348a33e644c4b8a2ec9f42b7b01e3af53d918e7ceeaf7", 0x91}, {0x0}], 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x2, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x43, 0x9, 0x1, {0x8001, 0x4, 0x5, 0x3, 0x3, 0x2, 0xd, 0x9, 0x800da71e}}, 0x43) r6 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x3, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 8.468808133s ago: executing program 3 (id=2851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000008e, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xecf5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48801) writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000540)="0a081abfb443298b48e0b88996c20459f8a089780ddecfb30457d2ec430ddbe8ac99b0b85d0acbc6033fae8326e27bbc4adafd156b8b9535ba9a77923855e0f5fd95f57999f867ada860bd1fe1a84c35", 0x50}, {&(0x7f00000005c0)="6ff816ac3ac3f42e69398788c6bd4a7bb9296183312bb3735f3e4c3182a206923c29138f4bc18d14a80285d5f5858c24956b33a4a4aa9e0190ff15d0dc254fd3f3c0aadb565ef9d11f5a74b714a967fb43d66d", 0x53}, {&(0x7f0000000640)="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", 0xfe}, {&(0x7f0000000740)="1cf637c757310ddf5f6ad1aeedf4543fb01bb8e294261b5a1d45a732a2f78e129a3b3eb0d2b917ced10a75d1e56e5f4538437a6e3bc6717f5889151153fe17e8c445d748f35070284759f1320184e4af151c439c3b519f1af73a009447108a38c5e2696c920198c270e0d3caf96e6614be0d754fe410df2261038348a33e644c4b8a2ec9f42b7b01e3af53d918e7ceeaf7", 0x91}, {0x0}], 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x2, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSTATFS(r7, &(0x7f00000004c0)={0x43, 0x9, 0x1, {0x8001, 0x4, 0x5, 0x3, 0x3, 0x2, 0xd, 0x9, 0x800da71e}}, 0x43) r8 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x3, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 6.922590628s ago: executing program 0 (id=2852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040), 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f9, &(0x7f000000ab40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYogbSQBqiB3FJCBBEeB4WIRJE8thX0fZIZxoIfMwgO80YaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVenFz9fu6bc5u306e2QAAAADnbKv1on4yS/2vzf3vza2fTb+IiDIizq3dR/HpJHPU5FSvvL56MYbbiDrh8BmT5voSEX+a6+FH198CAAAAXK7NcjVPq/X0MBt6QPQpFW3Kb38z5RURUc3uM6WVh7xfmcLq3/c4/mdKqwtY00xhqeQ2zpX2LvXf/Vi1mz5ritSUb78/29wBAIAejU6aflchAAAA9Onf0ANgGEU8bWUetwInqWm29z6f9AAAAIAPqBh6AAAAAEDn6vW/8/8AAADgsqXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlovNsvVvG3Obt9OntkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXIxZvknIvoUURQ4i3/Q84J5BJvOewhgmdlZmeSyQ9w/dGZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo3YM4yQ6dcRwX5zb3Hi9k/daRPrO+sj2btSyO6kz6dHi5+iHqNpcIAAAA50dS1vchhJ10bS7r405e/6flNVnN/92z47is54/W/WVf1v5Z+/WX3Rf3B+qMx8luentxOLhyPJXWk5vldHvub69o5U8+f/eS5F9I/MHyC6M0f57RNxsb77Xz8EId2QIA/8blsi+C8vehrO83mRgA50arUniX9X/SaTYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqMlsPTZRyFEGZbB3Fma+/xwkn9+sr2bNlurK6uVO+Z3SINIdxeHA6u1DiXaffg4aO788Ph4H79wSshhKZGf6eY/t2PJrg4hEaej+B/CuLiy56WfE5H0OAPJQAAzqS0aFldv5OuzWXnopkQ/vz+cP3/eiUOE9b/ux/f2KyOVa3/+7XNcPr1lu593nvw8NGbi/fm7wzuDD5962r/7f61m9ev3+zl70p63pgAAADw37SLVq3/45nj6/+XKnGYsP7/4tv+V9WxEvX/iQ4W/ZrOBAAA4Hx7/tU/fo9OOB+12+HL+aWl+/3xcf/z1fGxgVT/sQtFq9b/yUzTWQEAAAB1GC1Hh9b/b1XiMOH6/zM/vPRT9Z5JCOFisf5/eeGz4a36pjPV6vhz4qbnCAAAQLMuFq26/p/m+//j/S0PcQjhjdfGcfFvACeq/5P3v/6xOlZ1//+1+qY4leLu+HnkfTeEVrfpjAAAADjLnipaVuz/lq7NffLzpQ/b9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2vAAAA//+END5e") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) syz_usb_connect$cdc_ecm(0x0, 0x81, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x1, 0x10, 0xa2, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x2, 0x6, 0x0, 0x8, {{0xa, 0x24, 0x6, 0x0, 0x0, "226c8a331f"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3, 0xfc1}, [@obex={0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x6, 0x81, 0x7e}, @mdlm_detail={0x1c, 0x24, 0x13, 0x5, "55370587af8cb013452b285d8dbb2267e709cada4338ebf4"}, @dmm={0x7, 0x24, 0x14, 0x119, 0x800}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x0, 0xca}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x4}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x100, 0x5, 0x7, 0x1, 0x20, 0xdd}, 0x79, &(0x7f0000000380)={0x5, 0xf, 0x79, 0x2, [@generic={0x71, 0x10, 0x3, "f785854fb11d7afbaa4c2debbced8b9bb7434047d0600882c4ad0f8f648a7ea5064f5c1d56da50cee506cb7b675a0cd94e75772b34aec1cfb766f38df05938d58a85b35310ee33346b3e552b18de718ab23d42a352cf2063c4283e23b5c0f37b129bcca81d3e2c8a34a4090c5c5e"}, @ptm_cap={0x3}]}, 0xa, [{0xff, &(0x7f00000006c0)=@string={0xff, 0x3, "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"}}, {0x1b, &(0x7f0000000400)=@string={0x1b, 0x3, "b20cbdc8de7bb2332a62c3f594054faac09034239566b82865"}}, {0x6, &(0x7f00000004c0)=@string={0x6, 0x3, "a1489262"}}, {0x36, &(0x7f0000000500)=@string={0x36, 0x3, "4fcdbc5545340ffac5a6268e009a0188f3421f463bee24a13b29a583539dab67ae142af63b74cacdfe04af49756a5ae85a28010b"}}, {0x73, &(0x7f00000007c0)=@string={0x73, 0x3, "9fc546340a1f065f6a93109e3ca1eb1166b138082dc8775eaba583934e87d5194443a8f68bd432f33c958fb84d793f9e42b4eacd0f5c581d5905d15e17b1cdf444fdf8e268603f11fe653767497bb9cfd973d6ba6ac91dc3744f5099e946e6ee7d9f304909b285b16ce8b05c5990da9728"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x80a}}, {0x8d, &(0x7f0000000880)=@string={0x8d, 0x3, "702aecf95a82365a7b750a40f0c02424f92613247e4199dffff1a25d32d9bccbada26be775f2d167c87a758aef1a185dba78aed455b8d7382f39878c829fdaee2a43c61e612784c114ee9e8eb2ea968bd53c4ed5b3d0b8d815ba0550010bfff898042f5e8ace64b1b65bf40305deecee592c502b70cdae8faffbea633f107fe8b338f3d1db3e6980b9a2fe"}}, {0xd1, &(0x7f0000000940)=@string={0xd1, 0x3, "ee8e2146caf26b234b8fc9a0d7c68735a3e3761029d91e5469c7e81cec6d8bc6e645d7bf8f6872a7853bf4cb10ce823f5bb1f4e28cefa9c07d2e436ca41d331f87f255f4e02f369c9290c64a7310f1c50d2eb90d79267e364bbfaae903cfb3e3feb070591105d2236b273af66bb594315db0344f6e069466892f8a5e982760a73f297c01237dcb0f1905f9cc93d8ace45f51b7704b4ff7396571f1eeff7870e68ce28e78d8bb087b0a88edb8a78e35c3dabe39e7efcaf17c209f75c5e24492ffae90b85d3cd6d20ff1cfe7d92d8732"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x827}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000440), 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73747f0000ec328f4af7e5410fb4a7de856ac6a3fdfca6"]) 6.857330482s ago: executing program 4 (id=2853): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x14000, 0x0, [{0x0, 0x3ff}, {0x3, 0x6}, {0x1000, 0x9, 0x7fff}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0xffffffffffffffff, 0xc00000000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) stat(0x0, &(0x7f0000000440)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x850, &(0x7f00000003c0)=ANY=[], 0x1e, 0x1517, &(0x7f0000003040)="$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") 6.856836542s ago: executing program 3 (id=2854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = timerfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10000004}]}, 0x2c}}, 0x0) read(r2, 0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) 5.95159626s ago: executing program 2 (id=2856): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80000001, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x88, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xd}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0xb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r6, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 5.950621999s ago: executing program 4 (id=2857): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1a, 0x0, 0x20004d}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000900)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0006, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@bsdgroups}, {@data_err_ignore}, {@usrjquota}]}, 0xf6, 0x43e, &(0x7f00000004c0)="$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") write$eventfd(0xffffffffffffffff, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000004c0)='./file2\x00', 0x40c2, &(0x7f0000000000)={[{@noauto_da_alloc}, {@grpid}]}, 0x1, 0x751, &(0x7f0000002880)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 5.609372635s ago: executing program 1 (id=2858): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0xffffffffffffffff, 0xc00000000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 5.13466217s ago: executing program 4 (id=2859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = timerfd_create(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10000004}]}, 0x38}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) 3.968869936s ago: executing program 1 (id=2860): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3.968531836s ago: executing program 2 (id=2861): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = open(0x0, 0x0, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r11 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000900)=[@free_buffer={0x40086303, r11}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001880)={0xd8, 0x0, &(0x7f0000000780)=[@clear_death={0x400c630f, 0x2}, @free_buffer={0x40086303, r11}, @request_death={0x400c630e, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/70, 0x46, 0x0, 0x30}, @fd={0x66642a85, 0x0, r0}}, 0x0}}, @exit_looper, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0x6, 0x2, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/224, 0xe0, 0x2, 0x1}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000740)={0x0, 0x20, 0x48}}}], 0x1000, 0x0, &(0x7f0000000880)="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"}) sendmsg$nl_route(r7, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd09, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 3.91411357s ago: executing program 1 (id=2862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000008e, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xecf5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48801) writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000540)="0a081abfb443298b48e0b88996c20459f8a089780ddecfb30457d2ec430ddbe8ac99b0b85d0acbc6033fae8326e27bbc4adafd156b8b9535ba9a77923855e0f5fd95f57999f867ada860bd1fe1a84c3591f0812f0c1a9baa51", 0x59}, {&(0x7f00000005c0)}, {0x0}, {&(0x7f0000000740)="1cf637c757310ddf5f6ad1aeedf4543fb01bb8e294261b5a1d45a732a2f78e129a3b3eb0d2b917ced10a75d1e56e5f4538437a6e3bc6717f5889151153fe17e8c445d748f35070284759f1320184e4af151c439c3b519f1af73a009447108a38c5e2696c920198c270e0d3caf96e6614be0d754fe410df2261038348a33e644c4b8a2ec9f42b7b01e3af53d918e7ceeaf7", 0x91}, {0x0}], 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x2, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x43, 0x9, 0x1, {0x8001, 0x4, 0x5, 0x3, 0x3, 0x2, 0xd, 0x9, 0x800da71e}}, 0x43) r6 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x3, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 3.159271966s ago: executing program 3 (id=2863): socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8, 0x8f, &(0x7f00000002c0)=""/143}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) read(r2, &(0x7f00000002c0)=""/196, 0xc4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), 0x0}, 0x20) syz_usb_connect$cdc_ncm(0x2, 0x7d, &(0x7f0000000b80)=ANY=[@ANYBLOB="12011003020000082505a1a440000102030109026b00020168807f09040000"], &(0x7f0000000ac0)={0x0, 0x0, 0x1bb, &(0x7f0000000780)={0x5, 0xf, 0x1bb, 0x5, [@generic={0xab, 0x10, 0xa, "e5c68bf20be95a7fc9be828d33a79b103618180ab15e6593bd2c0bd313467a375a29bc320e533cb5e30fdfc66f0f95296aef448b40ee0ff08cc0f453a7440be5e5e0225ed1a255021489a5802099b5caeae36bd284cbcf67c77f43b663b540889ad5819ae212209ade3c5109034d97983ac44793b079b0846a36e551ebab5476eb34205c9e09c8e5bd1024c08c922bab9274741269651822e8bebf505391e491859605ab0eda91f5"}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "09b1942538862d055813bfbd24a1dfe4"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "a2b26fc51a601bf9feb4e58fd2704ac1"}, @generic={0xcf, 0x10, 0x1, "4c2ae1c222721ee7aab7af293e83a7cc6a1c3368347b460a0b25a858ae27f48a60405a0c23fddad088ec6255f38e62304ca2854e57acd26d7d893f27e1b69001ba736ffd30297bf495c2128e47251ac5082b67d80d20950f979f37507743b5607d35842c2aae6c4b32e77dbf29d498357616cb7f172230310dd978802f5e0796dbfec303ae4bccebf68fcea9b3032c3cc9ff0f637019401af8e5dca66f074307666a176e112e5618a4e13019b097136b2f629b21a375839f07c939474626b1405b1334857dfe98c5bfcf11cf"}, @ssp_cap={0x14, 0x10, 0xa, 0xb, 0x2, 0x0, 0xf, 0x9, [0xff3f30, 0x30]}]}, 0x5, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1407}}, {0xd2, &(0x7f0000000c80)=@string={0xd2, 0x3, "6cb839b48eab50e5c38a156ac7de791e78771dc49482f96986ea7bd78f757908a69dafa83fc28a7a325c788e271eaa11a129b86e5fb391a3ebc3a9fa1d5f97b42a22b4c3f7cdd0d049cef34af4c3063aaec634771264ee13a1820d6d653871c52a0989d2cb14fa0fde8182d06c602def268f80c39f1fe430aad5549b0f3bfa7c77649b60f27d166d238199a49520cf79ca4c5394ba1f23c9683b813f590d72f65b62a773fc93d5cd69a1206a266aa908ea353f28dc72ec9ce9ca463bd4daa9631dc65d799bff1701f59e8812dc14aa86"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x809}}, {0xd6, &(0x7f00000009c0)=@string={0xd6, 0x3, "27da7c07eefdfc88b7f2e28deca9745b6c628bd2de60c4b338627c535f6096b0a1486ff0f016022545beed2bb9e9a740f381a0e6aaddbe5d0d0929f809316138ebf29dc997bac173a483b220153f15aa6fda48b7d7026ccaa4a69462ec828b60ffd018ad09b234bdf2b540d44d0d4bc9cc4244f2918ae0bc6d29982aced7c192472351b98bdcc15768f2ac0fee2adf28d64463852132aff653f8f22b0cc1b97262fd89c153778139696d43eb41a2c30f386af2aca51acbf281a72293773ce0b3d94e59a593697af3cf1c6ae0196d15db602c797c"}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1d, 0x3, 0x7f}, {0x1001, 0x5, 0x8c, 0x7}}}]}]}]}}]}, 0x60}}, 0x0) 2.948882682s ago: executing program 1 (id=2864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80000001, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x88, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xd}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0xb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r8, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) close(r2) 2.861720649s ago: executing program 0 (id=2865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000008e, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xecf5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48801) writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000540)="0a081abfb443298b48e0b88996c20459f8a089780ddecfb30457d2ec430ddbe8ac99b0b85d0acbc6033fae8326e27bbc4adafd156b8b9535ba9a77923855e0f5fd95f57999f867ada860bd1fe1a84c35", 0x50}, {&(0x7f00000005c0)="6ff816ac3ac3f42e69398788c6bd4a7bb9296183312bb3735f3e4c3182a206923c29138f4bc18d14a80285d5f5858c24956b33a4a4aa9e0190ff15d0dc254fd3f3c0aadb565ef9d11f5a74b714a967fb43d66d", 0x53}, {&(0x7f0000000640)="de5b1c106ffdd71c0f8fa3667bbaa96748bd2fc51bf2782b996b40d4e692310bcd31ecaf80c20e36ccd0655b6530736fc8170bf6b4019eded63ca7025047e1e08aaa49679a54bfd8bb560a12bd08fff46ee9b376f437e2fe8200c14f8e2fdd498ae22d9f85bb2570fbb34176f8105c7f874a59c66221e4956e498c4b77c1cef80b6a2ec92e8be09902c051384c2575762dcbea1caf82ad5eac202dcfc09f6a479dae556546861735e73d061f8d964fa5a09e630af07a14dfec6279dac6ab963aa616c39ea25c976bd7f962af867eabd0783276d6de82d3ae0fcdb659f3d31d611c58dda868827832de4866d21fdc4e76d31ac0ef547a08a4c98b1ce2a2b0", 0xfe}, {&(0x7f0000000740)="1cf637c757310ddf5f6ad1aeedf4543fb01bb8e294261b5a1d45a732a2f78e129a3b3eb0d2b917ced10a75d1e56e5f4538437a6e3bc6717f5889151153fe17e8c445d748f35070284759f1320184e4af151c439c3b519f1af73a009447108a38c5e2696c920198c270e0d3caf96e6614be0d754fe410df2261038348a33e644c4b8a2ec9f42b7b01e3af53d918e7ceeaf7", 0x91}, {0x0}], 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x2, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSTATFS(r7, &(0x7f00000004c0)={0x43, 0x9, 0x1, {0x8001, 0x4, 0x5, 0x3, 0x3, 0x2, 0xd, 0x9, 0x800da71e}}, 0x43) r8 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x3, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 2.795586813s ago: executing program 2 (id=2866): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0x0, 0x0, 0x0) 2.049785878s ago: executing program 4 (id=2867): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x14000, 0x0, [{0x0, 0x3ff}, {0x3, 0x6}, {0x1000, 0x9, 0x7fff}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0xffffffffffffffff, 0xc00000000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) stat(0x0, &(0x7f0000000440)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x850, &(0x7f00000003c0)=ANY=[], 0x1e, 0x1517, &(0x7f0000003040)="$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") 2.015779481s ago: executing program 1 (id=2868): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) open(0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) 1.908878959s ago: executing program 2 (id=2869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xecf5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48801) writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000540)="0a081abfb443298b48e0b88996c20459f8a089780ddecfb30457d2ec430ddbe8ac99b0b85d0acbc6033fae8326e27bbc4adafd156b8b9535ba9a77923855e0f5fd95f57999f867ada860bd1fe1a84c3591f0812f0c1a9baa5194e7", 0x5b}, {&(0x7f00000005c0)="6ff816ac3ac3f42e69398788c6bd4a7bb9296183312bb3735f3e4c3182a206923c29138f4bc18d14a80285d5f5858c24956b33a4a4aa9e0190ff15d0dc254fd3f3c0aadb565ef9d11f5a74b714a967fb43d66d", 0x53}, {&(0x7f0000000640)="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", 0xfe}, {&(0x7f0000000740)="1cf637c757310ddf5f6ad1aeedf4543fb01bb8e294261b5a1d45a732a2f78e129a3b3eb0d2b917ced10a75d1e56e5f4538437a6e3bc6717f5889151153fe17e8c445d748f35070284759f1320184e4af151c439c3b519f1af73a009447108a38c5e2696c920198c270e0d3caf96e6614be0d754fe410df2261038348a33e644c4b8a2ec9f42b7b01e3af53d918e7ceeaf7", 0x91}, {0x0}], 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x2, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSTATFS(r6, &(0x7f00000004c0)={0x43, 0x9, 0x1, {0x8001, 0x4, 0x5, 0x3, 0x3, 0x2, 0xd, 0x9, 0x800da71e}}, 0x43) r7 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x3, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.643908029s ago: executing program 0 (id=2870): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0xffffffffffffffff, 0xc00000000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 1.200035182s ago: executing program 4 (id=2871): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x58) mkdirat(r0, &(0x7f0000000300)='./file1\x00', 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0042, &(0x7f0000000040)={[{}, {@resgid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7e}}, {@noload}, {@inode_readahead_blks}, {@nombcache}]}, 0x1, 0x480, &(0x7f00000004c0)="$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") r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r9, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="53a1b228144d4835415007b390c577cc8a52baa9acba00f1dd7513f66663907dd44196b10d83678ae900d813987c30ec", 0x30}, {&(0x7f0000000540)="0b8b61a9d3983220d21a6c51b2595f671ffd4f674d81bec0e74d44fc1f87c6699a37d7dc912a573f5160648d2dc6dcb9b7fadbfa5f6d0b77afb8e72fc808ca522704d3a40c10a4ec42cef49e0f14cfed658cd906fbfbd5662ad2d46f866d5822", 0x60}, {&(0x7f0000000700)="ecb0cf337e24fac56e2538eeef46cfc55416975a2b339dc2fd50692d3a8701efab83f5d5522b4d66e05b95861dbd39ec103f21789acad70354be14337dee47726ee004957151164ff869fd080c8aba3cbbb98dc6833516bd27cea00e2bcf832865128a661ee2d8bb45952d584728fc7b3d9031f3fca7780d3345a6386a1380b311cbf7dcfcc6f0cc62cef4971d77e32d4df628932e98b716b22833c4f753ae66f24ad52ad704929d72860c28223013a4e9e1f1d0457b2ced6397ba", 0xbb}, {&(0x7f0000000340)="88b1b408f4505cceda1a52bd9275c1cee323958beab018ed3fcfbda5a40856fff0e5775f3964edba0dffc9d6d5781f0cd36e643553f83c877d4abcf0197bdc9e0420107e5ce648500ee9d4e1d6f9b70f882178e1d16aedb5ac18916125c173da0679e5256e3494915f76f31d", 0x6c}, {&(0x7f0000000880)="f3800fa39c041d1b847639be7e710c9d84b36d726fd1c0c270e96d7301800d1474a8eb421e917e4356d41fe994c2f77cbe4d1c995b1457fe265375b93d0921e88a50b1ecd43d26e80ac566f640c663150d78beb087b3b94a4abfe1f4595f787d80ddb07bd31da39d135514a9bb1489bef35ef7a524ce59fcada09cab615172ab3d844b24bb76d2b1443a7942708f845d143499446d609aba4d95531eb7396d6606b9d0e6f559fb04ec9352e6dc104d1f6d89e4157200fea77e", 0xb9}, {&(0x7f00000009c0)="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", 0x145}, {&(0x7f00000007c0)="3efce8a8cebdc7241cb440f11fea781548d34d5e722a5dba696e4537ea944559f4e059a3fe4330959c11510fa33e1c42452283b13d4c83a23330b6408a9be851c6236b43a9ea7afb34e1a990513670a5c28bc7e3214ef988fed2004e84214e139f098cdd67c5f34c9080698ef5b3624d7da6c42114782f19b032ea52", 0x7c}, {&(0x7f0000000940)="c8", 0x1}, {&(0x7f0000000640)='i', 0x1}], 0x9}}], 0x1, 0x7c9ce320e12db95) sendfile(r9, r8, 0x0, 0x4000000000010046) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read(r8, &(0x7f0000000000)=""/21, 0x15) dup(r1) 1.136643006s ago: executing program 1 (id=2872): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1a, 0x0, 0x20004d}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000900)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0006, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@bsdgroups}, {@data_err_ignore}, {@usrjquota}]}, 0xf6, 0x43e, &(0x7f00000004c0)="$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") write$eventfd(0xffffffffffffffff, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000004c0)='./file2\x00', 0x40c2, &(0x7f0000000000)={[{@noauto_da_alloc}, {@grpid}]}, 0x1, 0x751, &(0x7f0000002880)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 1.034231504s ago: executing program 2 (id=2873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000008e, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xecf5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48801) writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000540)="0a081abfb443298b48e0b88996c20459f8a089780ddecfb30457d2ec430ddbe8ac99b0b85d0acbc6033fae8326e27bbc4adafd156b8b9535ba9a77923855e0f5fd95f57999f867ada860bd1fe1a84c3591f0812f0c1a9baa5194e7", 0x5b}, {&(0x7f00000005c0)="6ff816ac3ac3f42e69398788c6bd4a7bb9296183312bb3735f3e4c3182a206923c29138f4bc18d14a80285d5f5858c24956b33a4a4aa9e0190ff15d0dc254fd3f3c0aadb565ef9d11f5a74b714a967fb43d66d", 0x53}, {&(0x7f0000000640)="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", 0xfe}, {&(0x7f0000000740)="1cf637c757310ddf5f6ad1aeedf4543fb01bb8e294261b5a1d45a732a2f78e129a3b3eb0d2b917ced10a75d1e56e5f4538437a6e3bc6717f5889151153fe17e8c445d748f35070284759f1320184e4af151c439c3b519f1af73a009447108a38c5e2696c920198c270e0d3caf96e6614be0d754fe410df2261038348a33e644c4b8a2ec9f42b7b01e3af53d918e7ceeaf7", 0x91}, {0x0}], 0x5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x2, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x43, 0x9, 0x1, {0x8001, 0x4, 0x5, 0x3, 0x3, 0x2, 0xd, 0x9, 0x800da71e}}, 0x43) r5 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x3, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 635.054163ms ago: executing program 0 (id=2874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000008e, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xecf5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48801) writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000540)="0a081abfb443298b48e0b88996c20459f8a089780ddecfb30457d2ec430ddbe8ac99b0b85d0acbc6033fae8326e27bbc4adafd156b8b9535ba9a77923855e0f5fd95f57999f867ada860bd1fe1a84c3591f0812f0c1a9baa51", 0x59}, {&(0x7f00000005c0)}, {0x0}, {&(0x7f0000000740)="1cf637c757310ddf5f6ad1aeedf4543fb01bb8e294261b5a1d45a732a2f78e129a3b3eb0d2b917ced10a75d1e56e5f4538437a6e3bc6717f5889151153fe17e8c445d748f35070284759f1320184e4af151c439c3b519f1af73a009447108a38c5e2696c920198c270e0d3caf96e6614be0d754fe410df2261038348a33e644c4b8a2ec9f42b7b01e3af53d918e7ceeaf7", 0x91}, {0x0}], 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x2, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000004c0)={0x43, 0x9, 0x1, {0x8001, 0x4, 0x5, 0x3, 0x3, 0x2, 0xd, 0x9, 0x800da71e}}, 0x43) r6 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x3, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 395.26µs ago: executing program 2 (id=2875): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, 0x0, 0x101) 0s ago: executing program 4 (id=2876): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = open(0x0, 0x0, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r11 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000900)=[@free_buffer={0x40086303, r11}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001880)={0xd8, 0x0, &(0x7f0000000780)=[@clear_death={0x400c630f, 0x2}, @free_buffer={0x40086303, r11}, @request_death={0x400c630e, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/70, 0x46, 0x0, 0x30}, @fd={0x66642a85, 0x0, r0}}, 0x0}}, @exit_looper, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0x6, 0x2, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/224, 0xe0, 0x2, 0x1}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000740)={0x0, 0x20, 0x48}}}], 0x1000, 0x0, &(0x7f0000000880)="463b324004340ff8ee14b9e538df8d00369ca75a06bb5a1376450ef17e7b7c0693b2b5a162d6bec1100e0f98382bc59086a7a567b0fc2e8851baec7d0cbf6deea87d746df6c0f04dc8de2a6e230c4d00b1735d8dc0a8722b0e47f963cf692c3df85c114899cc09c2c13e656aafb5d3d69330d7cb11a59f17f22d658163999912bae2e8023d9ac6934adfdb628793bc5b3d15a9cf42733cfceb35ea85ee86dbff5fd7d7271b5bd5dd96bb1e3f9d81fa32b1b1d9d591e33ab5ea89476d92e219d09688271d173442fab3eebd3886c4b6d502325f1e38cc0ffb1d155d74bb9285feb2aa61ee2374ab6ee4b90981adfed36c82e24f09a50deec6d8020d2c31da34e650ce31a6fa85ac6227913bae0dfcb7c9ef6da0e9223c78db471dd92abfcb878efceb746ecaaab299bc30f848f274f69ada8331b0d9113dff3c3fae904c0355854bb81189638fa586184c16930d91e0567581f7b4ecc964dc58cce7e721bfc05c3391fb94a4f4e306be3fe3a22d6e813e4fd12a818daac8e61d76ede7a035436c6277540cdfbf32e8732e79f8f872dcd123e0733ee33e3ea1ad38ae1d718584ca8d29cab1df71d694eb6fb7b13cf4479fef996012d8157f1a820e8e5dd96839d8e52a941176eb6aa84458adf8b30ccb8f366f2da7a49ca8401b7975078c1d581102194d6037e4fbb9632f1102feda3bd142b96ccc1766506a4e65c46ec8a76079ad3fd10e3fece8f39b643e80ebc68338209b27da33d55869d260f0349700280f78c53fcfef2e62247e06fbbebab701dfea7d4e1ab385524fe06f3aa4027ca1cead0dfe840ed8a7b3bb1d06274bf05e137f0f4e7cd4461dce446ca869d34d6b2791a7c1fbe8fbc152f012b11fc6aebff6f9dbec024ffe085a4bcc30621daa7515f104728c584c6cd8f42d0f261265c6ca1407de05080d4784a35fab85b86561854f974e6affd38c077fd8a6d12abe86363eeab68a59519de4dce4d3861a693240fc01e1fadfe2d84159e8793e12ac3fcc09bcf6a5b616025cd5aada10914c1f86711f726a426b30f320f6dbfd9b49789626ace990d374e1e7ef4db40088dada9ba819e18828ed44e7266da562efc2da112a871563f279a2d27de2d1d163049619c047b93f0f75d00c57909977f94ed62a42d7e3779bff29803adc7ab6503fb6b48a4b6b718f5ff33608e9f0e7a2d5e923b0fc17a491fc9f80b6c849370180d6aee1b1b6480281a94560801ab5668a165b943291e33860d70970c93c71eb4e3dbce26e49b6ac0298c58a441423d61344509922b54b9d964ca818a3be5b2a67ea128225914195ae9460d0b9f3b91698bcd606474b3a3463afe5d366bfc791ea1bb9c7397f5b7f3d575b24bf8600f59ca8821127836fa4a8c8f6b747d019745619a1445ec8d565e9ff768b4ea2d2836e1e4266e55d55a8810cde2bce144d821f1306bff05dc902aa09cc56a6fef1f4d079ca34092cb99da707c7f5b5cb7eca299bbf3cbf998b4e5d21e72a2adb85de2e93cd89eeef5ddbb8b6eb85cd982694515fd8448f381b5c97b98daf4cde79918c11f86ef61883d8dfc9429bcd57b98f024f9762810b57917af03ae5f54834fe85b8f74a098ce91e5aea7ba650b5b2b68e9a8e21d30181129b85550f6b87f629ed2d283a3088fd3cfe527834c5e9169f78e1f15e98a7c324454a07c51eca094c897a6a21d0a26688b37cd8cc7923c70682c04e7ec8423336f5b69ff78586867651e01495b33ccf598897a3285522a4aa6bb2998783b3dbbc1180bc23c76ee27f3b202da92363d1e3ad6da2d637d45a38e4f46ed9b5505c2934888bb7d1a03e0b085552f1767bb71a9f8fe5b12a2d195a271076cb16030c9c76e961b06ef3de2b0af6a47c32644fa251baf791043b6dd2fdb405edfb5832c80cabd6e260ca336f0de785852d200b8f3d7ea8da644c67536b27ba114f7f40701cc6efaf412f477b6a147a1e77e4fed0344c6d1db7c6ab39959f793f03489c5fee66410c3fc7ae008db9dd66044b9d803b1bbf318a22d836dfa1b873a5a2175c2f355b6125ad8cec899b92ee763d39c0c3c600d00f56cc8a22385c1cd719a4e732f8dd59e72f89511dde54810fac7b940dff266934f671d4b40ec383de6ae8d1f14d22e83c78f9b7eebb4bbc3cce517108ba985fe122994a6a4da2533b65f87f770e3d5bc9f0eaf3f4bafab524ef84c0d81a5cf27699322826c21d8b70d1fbf472fbb3a5382a22b602a9219d4e85a8b4646ca0a98088683444ab3a024408ca38a1c7454533d7bedbf1401beb4a5100b3d5ead6a5f7ad4c538313a776e2f622b6980ad54fd9554137cd355bc33e091ce878e4bca47bbffa7017295139b703335bf21b7798f83ca5dacd6328672f61245415daeb0ea4655c005f66fd6c9e20a73439c9ca0c1003b36447d70fae8b287bf72671d128b8de3d8e3c20fd14f9cdcfb3b1feabf519445451421a8265a9c137ffd1ae9f2d0e99e518ecabff288290be1619620f92f02b1f5e02dc48f40bdca6e7236982e7d153187199e019e36300f396bb107fb72aeb6f22c4d56f73f5a1eeabfc50dab67f90f76db34338c3f858257a767811e178fd0f84093b58d1c73f2a838b162308c7dcd58d689c30a5502942ba35218f68176207a35472545e6616ec77a6439d7c198e0fa2d05f19d03ba77a353c60a1a84635b955a8d5041ef29911c2457dbcff7df3af6847430071c74ba592d1d9942b9859ea0466bca6849e07a58415e9ad7cd3660ea38fd25024bf61293000ecbd4cd9d7d569e8e5eb2b8daaafe5b3e2a42e5877571e8c02e95e2dcc9898be16211258005aa7a3b63f75f9f79d03001f1b62bcc57deaf0bc5985ae4620266613badef5bd9a73d1c91104742010fa31d99499b4c961feffba4fee962338d61c7ecaa7955d40a10c2cce8f219cc1b75dbce08f0ef675925a20f2478c9a8820a4d9aac2e509e2144c08c4486f73ec33799ce145d7e9d1c392cdbe363bb0101cd1adff6081c094c449b4586c74a29b4a74ce81718bb1ac72f1f7c58fc45f956385e39f666c0481045dca143ec0bf67524f98531841795ee018c66175efed8e84bdf822f42aa0aab21269e04ef770ff09ff728314b3008e2fb0a1beea8d6840464b5a2fe0539242ffe3aabd9b75c015fe1bd692b4fa252a587d905bce22af6047ef89317e839aae2453e7c527684ab4117c7abb9cd2527071d1f5f0f7782c538f1f77b7149f619f4a4d192388e6d29b360152225e4452befad9cf36b0241b554ac3fce5a49d672da9d50e69db16111b5e47eea78386d2ec7cc20a40c85df04f72b508b2f9d36347b8acdd869b08c49959ce4307b85ccb22cfc04b3146d82e890695892ed271f747d4a0dbc1ca12e29834865395d0b499312ea56297bc6d6739575af386ab5dfad37147606abb31b20a92b4609a1ff764723547968d0d96e63addcb617acc1651fd681c709729b41a71199be101e9d1ff2d124e420f3178392a352a8fda9b77bba4e3a10500250179e0e68ae8d6496f6335125ffc7bf842eff6525fbd7ed9e9b37bd32d82ae4d683371a5c5ab88af713303f66854598d730ddd85ea10a653f6bc57d62e777a8fff1eb16879ccf48a7bad052e1d9e3de3ea10039b23be9efb351abca7dfc5fac35ad401092c672a3e1bf585baabbe6d97a7afaad9746900ff83e07a9033028039c0faf35091d16b6ebf514d3874066234e229ebff6d8822fd76f63ef499d250a567e928bbdf2a23e29bd2f5468eefc958ee4bb8b4b350fa2a2ef43b3d5b73f2b8592e1e96133b8394a1d38c2e9239a7f755b9d3af6c5e227f28da79be3d0bdefd808319b37aaca751b5e7158f35daa7d3d9c53642c69a4183a966c477c6a7af83d414849e03ab00654c232d95da6795c48496dd66c92a4f434ef16792dd743b3bb8aa4246ebb3d6c0524894939a8ff89e3bf6b82f9ee7a0b34f1be6156048a350fd7317dcf86d25595484eb0778ec6207f73f65fcc3a8ad481dbdade8d9da39b2a4000f1f71b672992160723a373b931c73ba1bf1925ee5aed8ca19d9a171e6d5e15bc026542f06d351f4524b8623f9f966138a12c749e60ad05e9c9b52988f49077d5fec518fe7674f34f018c3cf8275c0bc33ecb7c5cfc04ac97ccb55f8cbdf6909aa00a35ad480fd1b71fe489b3c4fa9a8a0d39fc63556f7e98b380b18d5b0bcee13a1f373177e4b4aaa390a6e52b72b0a89af3ca97f1848fdbcb56af6a5bab671fabc955c6bf51dda9569d95e641ceb0d6bdf9289575d601f9574f54522c6778f2991c6634947a8c026af296b81d222f2880da7657fec124fb0b00431b8acb8ac0f5310a0d072b37c2e35586f7a1c8a27a8426bd3089c14f8678d0c78116380d825f0e59af11cab52cf0de554d37ca29a526fdcf08f5c4c9c34a0bce689fb50e45fe09d1b0d57e2dcc0812efaff5ae3bfe1ab37fa83fc8fa9cb80c300b2f917177c04dfbcd461b8d58db9398f7c795a0b1883aaf08a1d810bdcd0ddbd93dc49c2c56054e203ebb6d083288ac28f728f13e31f69a459586177aba400c8d5fc4a9cf932a50a35f4a84422003f6e4db7d9a7ee802a16718d75893e430c5b13b9a054c569da5f8c1aea3e444aa5334e93056f26ad0d8f8699ea5918f0ddcc17bd4a09a37f1a151df830ed4e27ad9d3c777f4a3e95f0e9e37121217f64ba076802553ba602ba4fb735d427dfe68bab059272efeed6ed52237ad977f3f5dd07f24e300fc5acee6c3955bf428e42f5a13c96fa5d3eef1a35dd400d13e4ac8120908c26e4e13d22b3b1e2a5e130ce2fb484c4f20913fec83ece5c73c8f120cad14bfccdfa9cda195c54d8817bb0436d2507aa387c143fac8c04f11e65be669472422079692a8a391d89ab7df445130b71da069664b357be3a91dcb5d0aa259a719871ce503a374e7077ab4cb3c331c7fac13b0fd5afc17b8b14065344df7499ceb8543439934010117dc0c266a201138ed0d476d4407d2ea920d6e3670a99437013b89daf6fca08e21083b45b57608c191cc066ebdd42464f6c15e2bc255a40834ef96693ec320908682ebccc5a89d30dbf940cdeeae3ac3967003290dd4add3065bc046cac8432584741546ee1cd534123dd5b9cee583645ca997554b683871768b42523ef0452647c850033c20e1703f2b27eaef289a3a29fc33155913400e8613d71025c249e98b081d9a1fd499045eed624753c08ad22f869d1e908bdbb7f8987835d6df9d99ea8b043ee73a3bb67efe4bbccd9077bc97ad648b29502fa946c2aebf6455072cb9173b87651d81f99cb7b30b0fc7132d26c0654173486317af3d8538bd98f7d4fedccdce1fe1804154712604dbd3e319a2fffcc9e377fbfa66b19973b34955f3194d7a76790945cd2e3a3cc80ced96e623a71fb60ff58286115675d5f1d834d7b44145904bd65c88d3a28a0551417487a95ddb8fa0f67e4e7c65fe8d147c5433854523e76db827e2cc46b2b2b1aba13b9f2329a6d5ebf9a6bff6ee7ff1c096d543efa86c37c6421c48fe7fe63b9e0ee36d69ea67f987d16800548ed25b1acd85ad773eb113c1cdf067ad42c5fd84a76c21389f9cd96da5183931ee6ea222a74e677b7ab5f2bfe5ef81584e5c14c872eb7deb6c3289bf4c34bf316c89c0afcba2cab1fb77881c5b77e595f33fff40d8e4128053caa971caa6b969876cc8a15cd86aaee82055aa2ac39252b5567cb861b81400c329a48928b4636c17c8ad7f75cba46acf412b242f099ad027e4a93f2cff00e4aa7518c2a05f543b1f407b71d49e50e8725be91c752ea9d"}) sendmsg$nl_route(r7, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd09, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) kernel console output (not intermixed with test programs): y_hcd [ 587.856003][ T6] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 588.185977][ T968] usb 3-1: config 0 has no interfaces? [ 588.275072][ T968] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 588.282923][ T9239] loop0: detected capacity change from 0 to 256 [ 588.290148][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 588.298020][ T6] usb 4-1: device descriptor read/64, error -71 [ 588.304028][ T968] usb 3-1: SerialNumber: syz [ 588.309444][ T968] usb 3-1: config 0 descriptor?? [ 588.386020][ T9127] usb 5-1: not running at top speed; connect to a high speed hub [ 588.646033][ T9127] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 588.663192][ T9127] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 588.743529][ T9247] loop1: detected capacity change from 0 to 256 [ 589.011385][ T9226] loop2: detected capacity change from 0 to 40427 [ 589.056071][ T9127] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 589.065401][ T9127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.073385][ T9127] usb 5-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 589.106228][ T9127] usb 5-1: Manufacturer: ᐇ [ 589.110727][ T9127] usb 5-1: SerialNumber: ࠉ [ 589.118883][ T9226] F2FS-fs (loop2): Found nat_bits in checkpoint [ 589.157287][ T9226] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 589.165840][ T9226] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 589.392371][ T9226] netlink: 'syz.2.2250': attribute type 27 has an invalid length. [ 589.400758][ T9226] UDC core: couldn't find an available UDC or it's busy: -16 [ 589.408090][ T9226] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 589.568966][ T9264] binder: Unknown parameter 'st' [ 589.702030][ T9127] cdc_ncm 5-1:1.0: bind() failure [ 589.899087][ T9127] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 589.905768][ T9127] cdc_ncm 5-1:1.1: bind() failure [ 589.911796][ T9127] usb 5-1: USB disconnect, device number 78 [ 589.951776][ T9272] usb usb8: usbfs: process 9272 (syz.1.2263) did not claim interface 0 before use [ 589.975696][ T9274] loop1: detected capacity change from 0 to 515 [ 590.159116][ T9274] EXT4-fs (loop1): Ignoring removed bh option [ 590.170450][ T9274] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 590.220513][ T9274] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 590.342677][ T9279] loop4: detected capacity change from 0 to 512 [ 590.386299][ T9279] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2265: iget: bad extended attribute block 1 [ 590.398910][ T9279] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2265: couldn't read orphan inode 15 (err -117) [ 590.537573][ T9279] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 590.652569][ T9274] loop1: detected capacity change from 0 to 2048 [ 590.740777][ T968] usb 3-1: USB disconnect, device number 92 [ 590.787557][ T8978] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 590.787773][ T9274] EXT4-fs error (device loop1): ext4_fill_super:4831: inode #2: comm syz.1.2264: casefold flag without casefold feature [ 590.817119][ T9274] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 590.826710][ T289] attempt to access beyond end of device [ 590.826710][ T289] loop2: rw=2049, want=45104, limit=40427 [ 590.830220][ T9295] loop4: detected capacity change from 0 to 256 [ 590.856645][ T9274] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 590.864103][ T9274] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 591.096129][ T8978] usb 1-1: device descriptor read/64, error -71 [ 591.791569][ T8978] usb 1-1: device descriptor read/64, error -71 [ 591.975191][ T9316] usb usb8: usbfs: process 9316 (syz.3.2275) did not claim interface 0 before use [ 592.086000][ T8978] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 592.368447][ T1791] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 592.445980][ T8978] usb 1-1: device descriptor read/64, error -71 [ 592.504800][ T9330] loop2: detected capacity change from 0 to 512 [ 592.597801][ T9330] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2279: iget: bad extended attribute block 1 [ 592.610453][ T9330] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2279: couldn't read orphan inode 15 (err -117) [ 592.622510][ T9330] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 592.685977][ T357] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 592.804994][ T9336] loop2: detected capacity change from 0 to 256 [ 592.825971][ T1791] usb 4-1: not running at top speed; connect to a high speed hub [ 592.886563][ T8978] usb 1-1: device descriptor read/64, error -71 [ 592.906014][ T1791] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 592.925914][ T1791] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 593.006042][ T8978] usb usb1-port1: attempt power cycle [ 593.105986][ T357] usb 2-1: config 0 has no interfaces? [ 593.184933][ T9347] loop2: detected capacity change from 0 to 512 [ 593.206284][ T1791] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.216138][ T1791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.224209][ T1791] usb 4-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 593.255740][ T1791] usb 4-1: Manufacturer: ᐇ [ 593.264169][ T1791] usb 4-1: SerialNumber: ࠉ [ 593.269802][ T357] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 593.550622][ T9347] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2284: iget: bad extended attribute block 1 [ 593.564230][ T9347] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2284: couldn't read orphan inode 15 (err -117) [ 593.578162][ T9347] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 593.620648][ T357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 593.667501][ T357] usb 2-1: SerialNumber: syz [ 593.672585][ T357] usb 2-1: config 0 descriptor?? [ 593.697286][ T9353] usb usb8: usbfs: process 9353 (syz.0.2286) did not claim interface 0 before use [ 595.016273][ T1791] cdc_ncm 4-1:1.0: bind() failure [ 595.084960][ T1791] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 595.515785][ T1791] cdc_ncm 4-1:1.1: bind() failure [ 595.540277][ T1791] usb 4-1: USB disconnect, device number 83 [ 595.874764][ T9371] loop0: detected capacity change from 0 to 40427 [ 595.929700][ T9328] loop1: detected capacity change from 0 to 40427 [ 595.966388][ T9371] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 595.975144][ T9371] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 595.989174][ T9371] F2FS-fs (loop0): invalid crc value [ 595.995712][ T9371] F2FS-fs (loop0): Found nat_bits in checkpoint [ 596.020185][ T9328] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 596.039430][ T9371] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 596.046443][ T9371] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 596.067161][ T1791] usb 2-1: USB disconnect, device number 84 [ 596.067801][ T9371] netlink: 'syz.0.2291': attribute type 6 has an invalid length. [ 596.144996][ T9388] loop2: detected capacity change from 0 to 512 [ 596.239684][ T9388] EXT4-fs (loop2): Ignoring removed bh option [ 596.256153][ T9388] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 596.393651][ T9388] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 596.696159][ T8978] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 596.920121][ T9388] loop2: detected capacity change from 0 to 2048 [ 596.985975][ T8978] usb 5-1: device descriptor read/64, error -71 [ 597.012637][ T9388] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz.2.2295: casefold flag without casefold feature [ 597.045458][ T9388] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 597.164420][ T9388] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 597.183925][ T9412] usb usb8: usbfs: process 9412 (syz.0.2301) did not claim interface 0 before use [ 597.185169][ T9388] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 597.525999][ T8978] usb 5-1: device descriptor read/64, error -71 [ 597.795927][ T8978] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 597.965947][ T9127] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 598.705802][ T968] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 598.708589][ T8978] usb 5-1: device descriptor read/64, error -71 [ 599.135933][ T8978] usb 5-1: device descriptor read/64, error -71 [ 599.206002][ T9127] usb 4-1: config 0 has no interfaces? [ 599.256021][ T8978] usb usb5-port1: attempt power cycle [ 599.279730][ T9443] loop4: detected capacity change from 0 to 512 [ 599.316034][ T9127] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 599.319948][ T9443] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2310: iget: bad extended attribute block 1 [ 599.326655][ T9127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 599.337686][ T9443] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2310: couldn't read orphan inode 15 (err -117) [ 599.345658][ T9127] usb 4-1: SerialNumber: syz [ 599.356993][ T9443] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 599.367380][ T9127] usb 4-1: config 0 descriptor?? [ 599.388936][ T968] usb 3-1: not running at top speed; connect to a high speed hub [ 599.476015][ T968] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 599.486845][ T968] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 599.619756][ T9454] loop1: detected capacity change from 0 to 512 [ 599.669723][ T9454] EXT4-fs (loop1): Ignoring removed bh option [ 599.677164][ T9454] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 599.686140][ T968] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 600.393667][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.407864][ T9454] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 600.419129][ T968] usb 3-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 600.459662][ T968] usb 3-1: Manufacturer: ᐇ [ 600.468294][ T968] usb 3-1: SerialNumber: ࠉ [ 600.610603][ T9421] loop3: detected capacity change from 0 to 40427 [ 601.233130][ T9421] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 601.460249][ T9127] usb 4-1: USB disconnect, device number 84 [ 601.485960][ T968] cdc_ncm 3-1:1.0: bind() failure [ 601.491738][ T968] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 601.505933][ T968] cdc_ncm 3-1:1.1: bind() failure [ 601.532503][ T968] usb 3-1: USB disconnect, device number 93 [ 601.837923][ T9483] loop0: detected capacity change from 0 to 512 [ 602.005989][ T8978] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 602.032973][ T9483] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2320: iget: bad extended attribute block 1 [ 602.046724][ T9483] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2320: couldn't read orphan inode 15 (err -117) [ 602.059572][ T9483] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 602.192628][ T9454] loop1: detected capacity change from 0 to 2048 [ 602.333837][ T9493] loop2: detected capacity change from 0 to 512 [ 602.350513][ T9454] EXT4-fs error (device loop1): ext4_fill_super:4831: inode #2: comm syz.1.2314: casefold flag without casefold feature [ 602.365953][ T8978] usb 5-1: device descriptor read/64, error -71 [ 602.396892][ T9493] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2323: iget: bad extended attribute block 1 [ 602.409629][ T9493] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2323: couldn't read orphan inode 15 (err -117) [ 602.421774][ T9493] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 602.451150][ T9454] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 602.479240][ T9454] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 602.487824][ T9454] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 602.952287][ T8978] usb 5-1: device descriptor read/64, error -71 [ 603.235957][ T8978] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 603.236038][ T9127] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 603.315922][ T968] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 603.360525][ T9517] loop3: detected capacity change from 0 to 128 [ 603.446305][ T9517] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 603.514904][ T8978] usb 5-1: device descriptor read/64, error -71 [ 603.526105][ T9127] usb 1-1: device descriptor read/64, error -71 [ 604.616233][ T968] usb 3-1: not running at top speed; connect to a high speed hub [ 604.637822][ T4745] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 605.475963][ T968] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 605.490051][ T9540] loop1: detected capacity change from 0 to 516 [ 605.505958][ T9127] usb 1-1: device descriptor read/64, error -71 [ 605.512184][ T968] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 605.571715][ T9540] EXT4-fs (loop1): Ignoring removed bh option [ 605.594880][ T9546] loop0: detected capacity change from 0 to 256 [ 605.601195][ T9540] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 605.674611][ T9548] loop4: detected capacity change from 0 to 512 [ 605.688216][ T9540] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 605.755771][ T9548] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2337: iget: bad extended attribute block 1 [ 605.769260][ T9548] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2337: couldn't read orphan inode 15 (err -117) [ 605.783246][ T9548] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 606.455943][ T968] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.942561][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.950449][ T968] usb 3-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 606.996024][ T968] usb 3-1: can't set config #1, error -71 [ 607.002723][ T968] usb 3-1: USB disconnect, device number 94 [ 607.048844][ T9536] loop3: detected capacity change from 0 to 40427 [ 607.049247][ T9540] loop1: detected capacity change from 0 to 2048 [ 607.091700][ T9567] loop4: detected capacity change from 0 to 512 [ 607.096717][ T9536] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 607.106388][ T9536] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 607.114837][ T9540] EXT4-fs error (device loop1): ext4_fill_super:4831: inode #2: comm syz.1.2336: casefold flag without casefold feature [ 607.129864][ T9540] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 607.139380][ T9536] F2FS-fs (loop3): invalid crc value [ 607.145649][ T9540] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 607.153359][ T9540] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 607.177029][ T9536] F2FS-fs (loop3): Found nat_bits in checkpoint [ 607.190189][ T9567] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2342: iget: bad extended attribute block 1 [ 607.225994][ T9567] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2342: couldn't read orphan inode 15 (err -117) [ 607.238434][ T9567] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 607.247621][ T9574] loop2: detected capacity change from 0 to 128 [ 607.269997][ T9536] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 607.277181][ T9536] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 607.306826][ T9574] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 607.319020][ T9536] netlink: 'syz.3.2334': attribute type 6 has an invalid length. [ 607.340979][ T9580] usb usb8: usbfs: process 9580 (syz.0.2345) did not claim interface 0 before use [ 607.656486][ T326] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 608.156017][ T1791] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 608.250985][ T9601] loop1: detected capacity change from 0 to 256 [ 608.348544][ T9603] loop2: detected capacity change from 0 to 512 [ 608.596210][ T1791] usb 4-1: device descriptor read/64, error -71 [ 608.734495][ T9603] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2349: iget: bad extended attribute block 1 [ 608.748159][ T9603] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2349: couldn't read orphan inode 15 (err -117) [ 609.136667][ T9603] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 609.194841][ T9616] loop4: detected capacity change from 0 to 512 [ 609.255786][ T9616] EXT4-fs (loop4): Ignoring removed bh option [ 609.265120][ T9616] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 609.273724][ T9616] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 609.315935][ T9127] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 609.456503][ T1791] usb 4-1: device descriptor read/64, error -71 [ 609.643760][ T9616] loop4: detected capacity change from 0 to 2048 [ 609.687356][ T9616] EXT4-fs error (device loop4): ext4_fill_super:4831: inode #2: comm syz.4.2354: casefold flag without casefold feature [ 609.708313][ T9616] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 609.726178][ T9616] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 609.733728][ T9616] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 609.735911][ T1791] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 610.075987][ T1791] usb 4-1: device descriptor read/64, error -71 [ 610.141334][ T9634] loop1: detected capacity change from 0 to 128 [ 610.175594][ T9632] loop4: detected capacity change from 0 to 40427 [ 610.196034][ T9127] usb 1-1: not running at top speed; connect to a high speed hub [ 610.199895][ T9634] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 610.238090][ T9632] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 610.252838][ T9632] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 610.263381][ T9632] F2FS-fs (loop4): invalid crc value [ 610.271033][ T9632] F2FS-fs (loop4): Found nat_bits in checkpoint [ 610.286113][ T9127] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 610.297091][ T9127] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 610.298529][ T9632] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 610.314530][ T9632] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 610.332718][ T9632] netlink: 'syz.4.2359': attribute type 6 has an invalid length. [ 610.485997][ T1791] usb 4-1: device descriptor read/64, error -71 [ 610.486035][ T9127] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.503150][ T9127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.511040][ T9127] usb 1-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 610.541865][ T9127] usb 1-1: Manufacturer: ᐇ [ 610.551289][ T9127] usb 1-1: SerialNumber: ࠉ [ 610.602340][ T9644] usb usb8: usbfs: process 9644 (syz.4.2361) did not claim interface 0 before use [ 610.635817][ T1791] usb usb4-port1: attempt power cycle [ 610.946169][ T9127] cdc_ncm 1-1:1.0: bind() failure [ 610.952023][ T9127] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 610.958724][ T9127] cdc_ncm 1-1:1.1: bind() failure [ 610.964645][ T9127] usb 1-1: USB disconnect, device number 97 [ 611.179102][ T326] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 611.228784][ T9655] loop1: detected capacity change from 0 to 256 [ 611.818266][ T9661] loop0: detected capacity change from 0 to 512 [ 613.490670][ T9661] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2366: iget: bad extended attribute block 1 [ 613.504156][ T9661] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2366: couldn't read orphan inode 15 (err -117) [ 613.516803][ T9661] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 613.673087][ T9667] loop2: detected capacity change from 0 to 512 [ 615.084041][ T9667] EXT4-fs (loop2): Ignoring removed bh option [ 615.106614][ T9667] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 615.125777][ T9667] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 615.214996][ T9667] loop2: detected capacity change from 0 to 2048 [ 615.226821][ T1791] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 615.235417][ T9694] loop1: detected capacity change from 0 to 128 [ 615.261962][ T9667] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz.2.2367: casefold flag without casefold feature [ 615.284838][ T9667] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 615.315742][ T9667] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 615.323236][ T9667] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 615.336742][ T9694] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 615.400250][ T9686] loop0: detected capacity change from 0 to 40427 [ 615.417124][ T9686] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 615.424695][ T9686] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 615.434164][ T9686] F2FS-fs (loop0): invalid crc value [ 615.443112][ T9686] F2FS-fs (loop0): Found nat_bits in checkpoint [ 615.449413][ T9127] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 615.470282][ T9686] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 615.477198][ T9686] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 615.501245][ T9686] netlink: 'syz.0.2372': attribute type 6 has an invalid length. [ 615.505919][ T1791] usb 4-1: device descriptor read/64, error -71 [ 615.684340][ T9706] usb usb8: usbfs: process 9706 (syz.0.2377) did not claim interface 0 before use [ 615.696291][ T9706] loop0: detected capacity change from 0 to 256 [ 615.755952][ T9127] usb 5-1: device descriptor read/64, error -71 [ 615.815952][ T357] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 615.895923][ T1791] usb 4-1: device descriptor read/64, error -71 [ 616.079710][ T4745] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 616.165934][ T1791] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 616.195957][ T9127] usb 5-1: device descriptor read/64, error -71 [ 616.217678][ T9713] loop1: detected capacity change from 0 to 512 [ 616.235952][ T357] usb 3-1: not running at top speed; connect to a high speed hub [ 616.298177][ T9713] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2379: iget: bad extended attribute block 1 [ 616.310777][ T9713] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2379: couldn't read orphan inode 15 (err -117) [ 616.322617][ T357] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 616.333347][ T357] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 616.344003][ T9713] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 616.435938][ T1791] usb 4-1: device descriptor read/64, error -71 [ 616.465916][ T9127] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 616.516105][ T357] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 616.525246][ T357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.533231][ T357] usb 3-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 616.533456][ T9718] loop1: detected capacity change from 0 to 256 [ 616.563695][ T357] usb 3-1: Manufacturer: ᐇ [ 616.574154][ T357] usb 3-1: SerialNumber: ࠉ [ 616.904649][ T9726] loop0: detected capacity change from 0 to 512 [ 617.009923][ T9726] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2382: iget: bad extended attribute block 1 [ 617.023787][ T9726] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2382: couldn't read orphan inode 15 (err -117) [ 617.036772][ T357] cdc_ncm 3-1:1.0: bind() failure [ 617.042990][ T9726] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 617.086327][ T357] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 617.108538][ T357] cdc_ncm 3-1:1.1: bind() failure [ 617.172080][ T357] usb 3-1: USB disconnect, device number 95 [ 617.480667][ T9739] loop0: detected capacity change from 0 to 512 [ 617.505971][ T9127] usb 5-1: device descriptor read/64, error -71 [ 617.527893][ T9739] EXT4-fs (loop0): Ignoring removed bh option [ 617.545201][ T9739] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 617.596627][ T9739] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 617.898560][ T9739] loop0: detected capacity change from 0 to 2048 [ 617.961270][ T9742] loop2: detected capacity change from 0 to 40427 [ 617.968560][ T9739] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.2386: casefold flag without casefold feature [ 617.981536][ T9739] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 617.992726][ T9739] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 618.000371][ T9739] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 618.014340][ T9742] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 618.035904][ T9127] usb 5-1: device descriptor read/64, error -71 [ 618.041995][ T9742] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 618.066192][ T9742] F2FS-fs (loop2): invalid crc value [ 618.081999][ T9742] F2FS-fs (loop2): Found nat_bits in checkpoint [ 618.088648][ T9749] usb usb8: usbfs: process 9749 (syz.3.2388) did not claim interface 0 before use [ 618.101625][ T9749] loop3: detected capacity change from 0 to 256 [ 618.126663][ T9752] loop4: detected capacity change from 0 to 128 [ 618.130942][ T9742] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 618.139818][ T9742] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 618.156006][ T9127] usb usb5-port1: attempt power cycle [ 618.168758][ T9742] netlink: 'syz.2.2387': attribute type 6 has an invalid length. [ 618.435302][ T9752] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 618.745606][ T326] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 619.058334][ T9778] loop2: detected capacity change from 0 to 256 [ 619.096003][ T1791] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 619.376368][ T357] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 619.405951][ T1791] usb 2-1: device descriptor read/64, error -71 [ 619.507796][ T9788] loop2: detected capacity change from 0 to 512 [ 619.597289][ T9788] EXT4-fs (loop2): Ignoring removed bh option [ 619.604925][ T9788] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 619.613619][ T9788] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 619.702731][ T9788] loop2: detected capacity change from 0 to 2048 [ 619.753301][ T9788] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz.2.2399: casefold flag without casefold feature [ 619.767407][ T9788] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 619.778141][ T9788] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 619.785630][ T9788] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 619.799156][ T357] usb 1-1: not running at top speed; connect to a high speed hub [ 619.806774][ T1791] usb 2-1: device descriptor read/64, error -71 [ 619.883122][ T9797] usb usb8: usbfs: process 9797 (syz.2.2401) did not claim interface 0 before use [ 619.892371][ T357] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 619.895145][ T9797] loop2: detected capacity change from 0 to 256 [ 619.903438][ T357] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 620.025914][ T9127] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 620.271572][ T1791] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 620.296327][ T357] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.306405][ T357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.315099][ T357] usb 1-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 620.366091][ T357] usb 1-1: Manufacturer: ᐇ [ 620.370609][ T357] usb 1-1: SerialNumber: ࠉ [ 620.585922][ T1791] usb 2-1: device descriptor read/64, error -71 [ 620.635944][ T9127] usb 5-1: device descriptor read/64, error -71 [ 620.726037][ T357] cdc_ncm 1-1:1.0: bind() failure [ 620.731852][ T357] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 620.738653][ T357] cdc_ncm 1-1:1.1: bind() failure [ 620.744665][ T357] usb 1-1: USB disconnect, device number 98 [ 620.849816][ T9810] loop3: detected capacity change from 0 to 128 [ 620.916704][ T9810] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 620.988297][ T1791] usb 2-1: device descriptor read/64, error -71 [ 621.022398][ T9812] loop2: detected capacity change from 0 to 40427 [ 621.045989][ T9127] usb 5-1: device descriptor read/64, error -71 [ 621.096256][ T9812] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 621.103971][ T9812] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 621.112130][ T1791] usb usb2-port1: attempt power cycle [ 621.113086][ T9812] F2FS-fs (loop2): invalid crc value [ 621.124003][ T9812] F2FS-fs (loop2): Found nat_bits in checkpoint [ 621.146438][ T9812] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 621.153493][ T9812] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 621.185242][ T9812] netlink: 'syz.2.2406': attribute type 6 has an invalid length. [ 621.499283][ T9127] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 621.525914][ T1791] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 621.740168][ T1791] usb 2-1: device descriptor read/8, error -71 [ 621.749508][ T4745] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 622.070178][ T9127] usb 5-1: device descriptor read/64, error -71 [ 622.086087][ T1791] usb 2-1: device descriptor read/8, error -71 [ 622.171712][ T9838] usb usb8: usbfs: process 9838 (syz.3.2412) did not claim interface 0 before use [ 622.207563][ T9837] loop0: detected capacity change from 0 to 256 [ 622.224135][ T9838] loop3: detected capacity change from 0 to 256 [ 622.735952][ T9127] usb 5-1: device descriptor read/64, error -71 [ 622.997854][ T9127] usb usb5-port1: attempt power cycle [ 623.076233][ T9852] loop4: detected capacity change from 0 to 40427 [ 623.173979][ T1791] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 623.235834][ T9852] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 623.282146][ T9852] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 623.291659][ T9852] F2FS-fs (loop4): invalid crc value [ 623.298473][ T9852] F2FS-fs (loop4): Found nat_bits in checkpoint [ 623.317110][ T9867] loop0: detected capacity change from 0 to 128 [ 623.332684][ T9852] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 623.339760][ T9852] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 623.347965][ T9867] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 623.373392][ T9852] netlink: 'syz.4.2419': attribute type 6 has an invalid length. [ 623.425977][ T39] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 623.526058][ T1791] usb 2-1: not running at top speed; connect to a high speed hub [ 623.625975][ T1791] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 623.628287][ T9874] loop4: detected capacity change from 0 to 256 [ 623.637159][ T1791] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 623.735949][ T39] usb 4-1: device descriptor read/64, error -71 [ 623.826344][ T1791] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 623.847869][ T1791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.861437][ T1791] usb 2-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 623.891997][ T1791] usb 2-1: Manufacturer: ᐇ [ 623.896544][ T1791] usb 2-1: SerialNumber: ࠉ [ 624.169988][ T39] usb 4-1: device descriptor read/64, error -71 [ 624.192720][ T326] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 624.243190][ T9884] usb usb8: usbfs: process 9884 (syz.0.2427) did not claim interface 0 before use [ 624.252404][ T1791] cdc_ncm 2-1:1.0: bind() failure [ 624.258367][ T1791] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 624.264986][ T1791] cdc_ncm 2-1:1.1: bind() failure [ 624.271368][ T1791] usb 2-1: USB disconnect, device number 88 [ 624.311859][ T9885] loop0: detected capacity change from 0 to 256 [ 624.445977][ T39] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 624.743290][ T39] usb 4-1: device descriptor read/64, error -71 [ 624.756049][ T9127] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 624.768120][ T9897] loop4: detected capacity change from 0 to 256 [ 625.187684][ T39] usb 4-1: device descriptor read/64, error -71 [ 625.441567][ T39] usb usb4-port1: attempt power cycle [ 625.546484][ T9127] usb 3-1: device descriptor read/64, error -71 [ 625.646336][ T9910] loop1: detected capacity change from 0 to 40427 [ 625.726272][ T9910] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 625.733977][ T9910] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 625.742894][ T9910] F2FS-fs (loop1): invalid crc value [ 625.749542][ T9910] F2FS-fs (loop1): Found nat_bits in checkpoint [ 625.772485][ T9910] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 625.779430][ T9910] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 625.801229][ T9910] netlink: 'syz.1.2435': attribute type 6 has an invalid length. [ 625.833562][ T9916] loop3: detected capacity change from 0 to 256 [ 625.855978][ T39] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 625.965960][ T9127] usb 3-1: device descriptor read/64, error -71 [ 626.725323][ T9933] loop3: detected capacity change from 0 to 512 [ 626.731518][ T39] usb 4-1: device not accepting address 92, error -71 [ 626.758207][ T9933] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2438: iget: bad extended attribute block 1 [ 626.770898][ T9933] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2438: couldn't read orphan inode 15 (err -117) [ 626.782873][ T9933] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 626.838686][ T9939] loop4: detected capacity change from 0 to 256 [ 626.885971][ T9127] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 626.946708][ T9943] usb usb8: usbfs: process 9943 (syz.0.2444) did not claim interface 0 before use [ 627.010337][ T9946] loop0: detected capacity change from 0 to 256 [ 627.115970][ T8978] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 627.279534][ T9127] usb 3-1: device descriptor read/64, error -71 [ 627.666395][ T8978] usb 2-1: not running at top speed; connect to a high speed hub [ 627.750951][ T9952] loop2: detected capacity change from 0 to 40427 [ 627.757460][ T8978] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 627.768304][ T8978] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 627.846489][ T9952] F2FS-fs (loop2): Found nat_bits in checkpoint [ 627.884656][ T9952] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 627.921587][ T9964] loop0: detected capacity change from 0 to 256 [ 627.968638][ T8978] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 627.977647][ T8978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.985590][ T8978] usb 2-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 628.015914][ T8978] usb 2-1: Manufacturer: ᐇ [ 628.020539][ T8978] usb 2-1: SerialNumber: ࠉ [ 628.576013][ T1791] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 628.776588][ T8978] cdc_ncm 2-1:1.0: bind() failure [ 628.782848][ T8978] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 628.789873][ T8978] cdc_ncm 2-1:1.1: bind() failure [ 628.805301][ T8978] usb 2-1: USB disconnect, device number 89 [ 628.890085][ T1791] usb 4-1: device descriptor read/64, error -71 [ 628.937733][ T9977] loop2: detected capacity change from 0 to 40427 [ 629.077912][ T9977] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 629.093304][ T9977] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 629.107604][ T9977] F2FS-fs (loop2): invalid crc value [ 629.135262][ T9977] F2FS-fs (loop2): Found nat_bits in checkpoint [ 629.159339][ T9977] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 629.166244][ T9977] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 629.185735][ T9977] netlink: 'syz.2.2453': attribute type 6 has an invalid length. [ 629.286778][ T1791] usb 4-1: device descriptor read/64, error -71 [ 630.565935][ T1791] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 630.639111][T10005] usb usb8: usbfs: process 10005 (syz.2.2459) did not claim interface 0 before use [ 630.703748][T10006] loop2: detected capacity change from 0 to 256 [ 630.755957][ T8978] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 630.795978][ T39] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 630.835971][ T1791] usb 4-1: device descriptor read/64, error -71 [ 631.085973][ T39] usb 1-1: device descriptor read/64, error -71 [ 631.115992][ T8978] usb 5-1: config 0 has no interfaces? [ 631.195969][ T8978] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 631.204993][ T8978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 631.213011][ T8978] usb 5-1: SerialNumber: syz [ 631.218275][ T8978] usb 5-1: config 0 descriptor?? [ 631.496025][ T39] usb 1-1: device descriptor read/64, error -71 [ 631.711134][T10000] loop4: detected capacity change from 0 to 40427 [ 631.731902][T10018] loop2: detected capacity change from 0 to 256 [ 631.776585][ T39] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 631.801550][T10000] F2FS-fs (loop4): Found nat_bits in checkpoint [ 631.828204][T10000] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 631.835037][T10000] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 631.846904][T10000] netlink: 'syz.4.2458': attribute type 27 has an invalid length. [ 631.855329][T10000] UDC core: couldn't find an available UDC or it's busy: -16 [ 631.862625][T10000] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 632.007026][T10029] binder: Unknown parameter 'st' [ 632.176773][ T39] usb 1-1: device descriptor read/64, error -71 [ 632.183113][ T1791] usb usb4-port1: attempt power cycle [ 632.187041][T10031] loop1: detected capacity change from 0 to 128 [ 632.226571][T10031] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 632.565955][ T39] usb 1-1: device descriptor read/64, error -71 [ 632.596041][ T1791] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 632.694204][ T39] usb usb1-port1: attempt power cycle [ 632.955991][ T1791] usb 4-1: not running at top speed; connect to a high speed hub [ 633.036152][ T1791] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 633.047110][ T1791] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 633.105906][ T39] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 633.224924][ T1791] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 633.238973][ T1791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.247345][ T1791] usb 4-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 633.278358][ T1791] usb 4-1: Manufacturer: ᐇ [ 633.282803][ T1791] usb 4-1: SerialNumber: ࠉ [ 633.295951][ T39] usb 1-1: device descriptor read/8, error -71 [ 633.355003][T10044] loop1: detected capacity change from 0 to 40427 [ 633.426230][T10044] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 633.433952][T10044] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 633.442919][T10044] F2FS-fs (loop1): invalid crc value [ 633.449294][T10044] F2FS-fs (loop1): Found nat_bits in checkpoint [ 633.483903][ T9127] usb 5-1: USB disconnect, device number 90 [ 633.486212][T10044] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 633.505972][T10044] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 633.543488][T10044] netlink: 'syz.1.2469': attribute type 6 has an invalid length. [ 633.550329][ T290] attempt to access beyond end of device [ 633.550329][ T290] loop4: rw=2049, want=45104, limit=40427 [ 633.562079][ T39] usb 1-1: device descriptor read/8, error -71 [ 633.615959][ T1791] cdc_ncm 4-1:1.0: bind() failure [ 633.626728][ T1791] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 633.709563][ T1791] cdc_ncm 4-1:1.1: bind() failure [ 633.742604][ T1791] usb 4-1: USB disconnect, device number 96 [ 634.040552][T10061] loop4: detected capacity change from 0 to 128 [ 634.050272][T10061] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 634.322960][T10066] usb usb8: usbfs: process 10066 (syz.1.2474) did not claim interface 0 before use [ 634.438423][T10066] loop1: detected capacity change from 0 to 256 [ 634.450332][T10072] loop2: detected capacity change from 0 to 256 [ 634.804592][T10079] loop0: detected capacity change from 0 to 256 [ 634.960287][ T4745] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 635.094879][T10085] loop4: detected capacity change from 0 to 512 [ 635.118546][T10085] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2479: iget: bad extended attribute block 1 [ 635.131106][T10085] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2479: couldn't read orphan inode 15 (err -117) [ 635.143083][T10085] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 635.676025][ T39] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 635.839624][T10097] loop3: detected capacity change from 0 to 40427 [ 635.917662][T10097] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 635.933627][T10097] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 635.942935][T10097] F2FS-fs (loop3): invalid crc value [ 635.954966][T10097] F2FS-fs (loop3): Found nat_bits in checkpoint [ 636.006179][T10097] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 636.013189][T10097] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 636.036214][T10097] netlink: 'syz.3.2484': attribute type 6 has an invalid length. [ 636.055977][ T39] usb 3-1: config 0 has no interfaces? [ 636.156991][ T39] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 636.166101][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 636.174237][ T39] usb 3-1: SerialNumber: syz [ 636.184106][ T39] usb 3-1: config 0 descriptor?? [ 636.298899][ T9127] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 636.374489][T10122] loop4: detected capacity change from 0 to 128 [ 636.439869][T10122] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 636.536563][T10125] usb usb8: usbfs: process 10125 (syz.3.2490) did not claim interface 0 before use [ 636.710379][T10128] loop3: detected capacity change from 0 to 256 [ 636.811617][T10093] loop2: detected capacity change from 0 to 40427 [ 636.839151][T10131] loop1: detected capacity change from 0 to 256 [ 636.851116][T10093] F2FS-fs (loop2): Found nat_bits in checkpoint [ 636.874651][T10093] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 636.895234][T10093] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 636.915783][T10093] netlink: 'syz.2.2481': attribute type 27 has an invalid length. [ 636.924371][T10093] UDC core: couldn't find an available UDC or it's busy: -16 [ 636.931686][T10093] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 636.965965][ T9127] usb 1-1: not running at top speed; connect to a high speed hub [ 637.341753][T10139] binder: Unknown parameter 'st' [ 637.396094][ T326] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 637.426874][ T9127] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 637.437749][ T9127] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 637.521813][T10150] loop1: detected capacity change from 0 to 256 [ 637.785940][ T39] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 637.795972][ T9127] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.804967][ T9127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.813000][ T9127] usb 1-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 637.843764][ T9127] usb 1-1: Manufacturer: ᐇ [ 637.848281][ T9127] usb 1-1: SerialNumber: ࠉ [ 638.175949][ T9127] cdc_ncm 1-1:1.0: bind() failure [ 638.181583][ T9127] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 638.185989][ T39] usb 5-1: not running at top speed; connect to a high speed hub [ 638.188339][ T9127] cdc_ncm 1-1:1.1: bind() failure [ 638.202101][ T9127] usb 1-1: USB disconnect, device number 103 [ 638.275966][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.411194][ T6] usb 3-1: USB disconnect, device number 98 [ 638.438077][ T289] attempt to access beyond end of device [ 638.438077][ T289] loop2: rw=2049, want=45104, limit=40427 [ 639.046004][ T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.061476][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.071453][ T39] usb 5-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 639.129968][ T39] usb 5-1: Manufacturer: ᐇ [ 639.246928][ T39] usb 5-1: SerialNumber: ࠉ [ 639.260556][T10172] loop0: detected capacity change from 0 to 128 [ 639.285905][T10171] usb usb8: usbfs: process 10171 (syz.3.2503) did not claim interface 0 before use [ 639.349578][T10175] loop3: detected capacity change from 0 to 256 [ 639.630056][T10172] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 639.719476][ T39] usb 5-1: selecting invalid altsetting 1 [ 639.764380][ T39] cdc_ncm 5-1:1.0: bind() failure [ 639.784767][ T39] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 639.824472][ T39] cdc_ncm 5-1:1.1: bind() failure [ 639.831906][ T39] usb 5-1: USB disconnect, device number 91 [ 640.149523][ T9471] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 640.200024][T10187] loop3: detected capacity change from 0 to 256 [ 640.220304][T10188] loop1: detected capacity change from 0 to 256 [ 641.035951][ T6] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 641.578681][ T39] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 641.846049][ T6] usb 4-1: config 0 has no interfaces? [ 641.857285][ T39] usb 1-1: device descriptor read/64, error -71 [ 641.889492][T10215] usb usb8: usbfs: process 10215 (syz.4.2515) did not claim interface 0 before use [ 641.928385][T10218] loop1: detected capacity change from 0 to 128 [ 641.954552][T10219] loop4: detected capacity change from 0 to 256 [ 641.963391][T10218] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 641.975969][ T6] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 641.995050][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 642.003106][ T6] usb 4-1: SerialNumber: syz [ 642.029949][ T6] usb 4-1: config 0 descriptor?? [ 642.126914][T10216] loop2: detected capacity change from 0 to 40427 [ 642.244113][T10216] F2FS-fs (loop2): Found nat_bits in checkpoint [ 642.295911][ T39] usb 1-1: device descriptor read/64, error -71 [ 642.305508][T10216] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 642.435613][T10200] loop3: detected capacity change from 0 to 40427 [ 642.566018][ T39] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 642.647471][T10200] F2FS-fs (loop3): Found nat_bits in checkpoint [ 642.670298][T10200] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 642.677131][T10200] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 642.689594][T10200] netlink: 'syz.3.2510': attribute type 27 has an invalid length. [ 642.698104][T10200] UDC core: couldn't find an available UDC or it's busy: -16 [ 642.705303][T10200] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 642.794639][ T326] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 642.840180][ T39] usb 1-1: device descriptor read/64, error -71 [ 642.893725][T10236] binder: Unknown parameter 'st' [ 643.285956][ T39] usb 1-1: device descriptor read/64, error -71 [ 643.406279][ T39] usb usb1-port1: attempt power cycle [ 643.525910][ T1791] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 643.737026][T10255] loop4: detected capacity change from 0 to 256 [ 643.816124][ T39] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 643.946021][ T1791] usb 3-1: not running at top speed; connect to a high speed hub [ 644.091543][ T1791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.147529][ T9127] usb 4-1: USB disconnect, device number 97 [ 644.182654][ T288] attempt to access beyond end of device [ 644.182654][ T288] loop3: rw=2049, want=45104, limit=40427 [ 644.316090][ T1791] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 644.341833][ T1791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.350201][ T39] usb 1-1: device not accepting address 106, error -71 [ 644.390151][ T1791] usb 3-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 644.441301][ T1791] usb 3-1: Manufacturer: ᐇ [ 644.446402][ T1791] usb 3-1: SerialNumber: ࠉ [ 644.462389][T10268] usb usb8: usbfs: process 10268 (syz.3.2527) did not claim interface 0 before use [ 644.525779][T10269] loop3: detected capacity change from 0 to 256 [ 644.761731][ T1791] usb 3-1: selecting invalid altsetting 1 [ 644.786129][ T1791] cdc_ncm 3-1:1.0: bind() failure [ 645.889482][ T1791] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 645.896155][ T1791] cdc_ncm 3-1:1.1: bind() failure [ 645.902108][ T1791] usb 3-1: USB disconnect, device number 99 [ 647.834478][T10317] loop2: detected capacity change from 0 to 256 [ 647.855895][ T9127] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 648.355931][ T9127] usb 5-1: device descriptor read/64, error -71 [ 648.573931][T10323] usb usb8: usbfs: process 10323 (syz.0.2544) did not claim interface 0 before use [ 648.683923][T10326] loop0: detected capacity change from 0 to 256 [ 648.745953][ T9127] usb 5-1: device descriptor read/64, error -71 [ 648.778175][T10325] loop2: detected capacity change from 0 to 40427 [ 649.013459][T10325] F2FS-fs (loop2): Found nat_bits in checkpoint [ 649.047642][ T1791] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 649.057064][T10325] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 649.155778][T10343] loop4: detected capacity change from 0 to 512 [ 649.382699][T10343] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2548: iget: bad extended attribute block 1 [ 649.395245][T10343] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2548: couldn't read orphan inode 15 (err -117) [ 649.407200][T10343] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 649.505950][ T1791] usb 2-1: not running at top speed; connect to a high speed hub [ 649.686082][ T1791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.921410][ T1791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 649.955114][ T1791] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 650.107224][T10365] loop3: detected capacity change from 0 to 256 [ 650.163600][T10357] loop2: detected capacity change from 0 to 40427 [ 650.191558][T10357] F2FS-fs (loop2): Found nat_bits in checkpoint [ 650.212970][T10373] loop3: detected capacity change from 0 to 128 [ 650.242423][ T1791] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 650.245628][T10357] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 650.251611][ T1791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.270331][ T1791] usb 2-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 650.274263][T10373] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 650.310892][ T1791] usb 2-1: Manufacturer: ᐇ [ 650.376692][ T1791] usb 2-1: SerialNumber: ࠉ [ 651.165153][ T4745] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 651.176435][ T1791] cdc_ncm 2-1:1.0: skipping garbage [ 651.181506][ T1791] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 651.188281][ T1791] cdc_ncm 2-1:1.0: bind() failure [ 651.194388][ T1791] usb 2-1: USB disconnect, device number 90 [ 651.343923][T10395] usb usb8: usbfs: process 10395 (syz.2.2560) did not claim interface 0 before use [ 651.867176][T10396] loop2: detected capacity change from 0 to 256 [ 652.157870][T10407] loop1: detected capacity change from 0 to 512 [ 652.164214][ T6] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 652.181795][T10407] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2562: iget: bad extended attribute block 1 [ 652.194617][T10407] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2562: couldn't read orphan inode 15 (err -117) [ 652.207486][T10407] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 652.235506][T10409] loop0: detected capacity change from 0 to 256 [ 653.132283][ T6] usb 5-1: device descriptor read/64, error -71 [ 653.163460][T10424] loop2: detected capacity change from 0 to 128 [ 653.184160][T10424] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 653.755914][ T9127] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 653.875919][ T6] usb 5-1: device descriptor read/64, error -71 [ 654.013998][ T9471] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 654.057944][T10442] usb usb8: usbfs: process 10442 (syz.3.2574) did not claim interface 0 before use [ 654.135076][T10445] loop3: detected capacity change from 0 to 256 [ 654.146015][ T6] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 654.197021][T10449] usb usb8: usbfs: process 10449 (syz.4.2576) did not claim interface 0 before use [ 654.198258][ T9127] usb 2-1: not running at top speed; connect to a high speed hub [ 654.483689][T10453] loop4: detected capacity change from 0 to 256 [ 654.586060][ T9127] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 654.597413][ T9127] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 654.765978][ T9127] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 654.775324][ T9127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.785142][ T9127] usb 2-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 654.815915][ T9127] usb 2-1: Manufacturer: ᐇ [ 654.820443][ T9127] usb 2-1: SerialNumber: ࠉ [ 655.101088][T10463] loop2: detected capacity change from 0 to 512 [ 655.225321][T10465] loop4: detected capacity change from 0 to 256 [ 655.256257][T10463] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2578: iget: bad extended attribute block 1 [ 655.271075][T10463] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2578: couldn't read orphan inode 15 (err -117) [ 655.283744][T10463] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 655.315958][ T9127] cdc_ncm 2-1:1.0: bind() failure [ 655.321606][ T9127] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 655.328391][ T9127] cdc_ncm 2-1:1.1: bind() failure [ 655.336545][ T9127] usb 2-1: USB disconnect, device number 91 [ 655.425908][ T308] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 655.502845][T10477] loop2: detected capacity change from 0 to 128 [ 655.566495][T10477] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 656.112716][T10485] loop0: detected capacity change from 0 to 516 [ 656.122872][T10485] EXT4-fs (loop0): Ignoring removed bh option [ 656.134420][T10485] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 656.142952][T10485] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 656.155969][ T308] usb 4-1: not running at top speed; connect to a high speed hub [ 656.235949][ T308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.246065][ T308] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 656.256646][ T308] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.371767][ T4745] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 656.405627][T10485] loop0: detected capacity change from 0 to 2048 [ 656.426291][ T308] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 656.447674][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.456631][ T308] usb 4-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 656.490464][ T308] usb 4-1: Manufacturer: ᐇ [ 656.498778][T10485] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.2585: casefold flag without casefold feature [ 656.511583][ T308] usb 4-1: SerialNumber: ࠉ [ 656.520919][T10485] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 656.531394][T10485] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 656.539220][T10485] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 656.565993][ T39] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 656.865906][ T39] usb 5-1: device descriptor read/64, error -71 [ 656.916323][ T308] cdc_ncm 4-1:1.0: skipping garbage [ 656.922725][ T308] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 656.929739][ T308] cdc_ncm 4-1:1.0: bind() failure [ 656.935527][ T308] usb 4-1: USB disconnect, device number 98 [ 657.126308][ T1791] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 657.275895][ T39] usb 5-1: device descriptor read/64, error -71 [ 657.556297][ T39] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 657.564052][ T1791] usb 2-1: config 0 has no interfaces? [ 657.656044][ T1791] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 657.665000][ T1791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 657.675026][ T1791] usb 2-1: SerialNumber: syz [ 657.745593][T10510] loop3: detected capacity change from 0 to 512 [ 659.274836][ T39] usb 5-1: device descriptor read/64, error -71 [ 659.301517][T10510] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2591: iget: bad extended attribute block 1 [ 659.315178][T10510] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2591: couldn't read orphan inode 15 (err -117) [ 659.327939][T10510] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 659.408407][ T1791] usb 2-1: config 0 descriptor?? [ 659.444671][T10527] loop2: detected capacity change from 0 to 256 [ 659.870672][T10525] loop4: detected capacity change from 0 to 40427 [ 659.919963][T10497] loop1: detected capacity change from 0 to 40427 [ 659.946479][T10525] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 659.954088][T10525] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 659.963063][T10525] F2FS-fs (loop4): invalid crc value [ 659.970012][T10525] F2FS-fs (loop4): Found nat_bits in checkpoint [ 659.992794][T10525] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 659.999698][T10525] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 660.013870][T10497] F2FS-fs (loop1): Found nat_bits in checkpoint [ 660.030384][T10525] netlink: 'syz.4.2597': attribute type 6 has an invalid length. [ 660.064567][T10497] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 660.075930][T10497] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 660.087782][T10497] netlink: 'syz.1.2588': attribute type 27 has an invalid length. [ 660.096166][T10497] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.103405][T10497] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.277146][T10544] binder: Unknown parameter 'st' [ 662.064743][ T308] usb 2-1: USB disconnect, device number 92 [ 662.104491][ T291] attempt to access beyond end of device [ 662.104491][ T291] loop1: rw=2049, want=45104, limit=40427 [ 662.864165][T10576] loop3: detected capacity change from 0 to 512 [ 663.437106][T10576] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2608: iget: bad extended attribute block 1 [ 663.449800][T10576] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2608: couldn't read orphan inode 15 (err -117) [ 663.461943][T10576] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 663.513084][ T9127] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 663.536571][T10584] loop4: detected capacity change from 0 to 512 [ 663.597325][T10584] EXT4-fs (loop4): Ignoring removed bh option [ 663.624899][T10584] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 664.217113][T10584] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 664.264300][T10589] loop3: detected capacity change from 0 to 256 [ 664.270507][ T6] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 664.361416][ T9127] usb 3-1: device descriptor read/64, error -71 [ 664.569172][T10597] loop1: detected capacity change from 0 to 256 [ 664.649659][T10584] loop4: detected capacity change from 0 to 2048 [ 664.711814][T10584] EXT4-fs error (device loop4): ext4_fill_super:4831: inode #2: comm syz.4.2611: casefold flag without casefold feature [ 664.725237][T10584] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 664.739223][T10600] loop3: detected capacity change from 0 to 516 [ 664.750401][T10584] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 664.766020][T10584] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 664.799895][T10600] EXT4-fs (loop3): Ignoring removed bh option [ 664.815935][ T6] usb 1-1: config 0 has no interfaces? [ 664.826404][T10600] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 664.834763][T10600] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 664.895972][ T6] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 664.914978][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 664.922988][ T9127] usb 3-1: device descriptor read/64, error -71 [ 664.972229][ T6] usb 1-1: SerialNumber: syz [ 664.979561][ T6] usb 1-1: config 0 descriptor?? [ 665.386853][T10600] loop3: detected capacity change from 0 to 2048 [ 665.402856][T10612] loop4: detected capacity change from 0 to 256 [ 665.426302][T10600] EXT4-fs error (device loop3): ext4_fill_super:4831: inode #2: comm syz.3.2615: casefold flag without casefold feature [ 665.457245][T10600] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 665.476849][T10600] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 665.556828][T10600] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 665.579141][T10618] loop1: detected capacity change from 0 to 256 [ 665.841468][T10580] loop0: detected capacity change from 0 to 40427 [ 665.919398][T10580] F2FS-fs (loop0): Found nat_bits in checkpoint [ 666.020594][T10580] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 666.027436][T10580] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 666.201871][T10630] netlink: 'syz.0.2610': attribute type 27 has an invalid length. [ 666.217359][T10580] UDC core: couldn't find an available UDC or it's busy: -16 [ 666.225822][T10580] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 666.524628][T10641] binder: Unknown parameter 'st' [ 666.972287][T10644] loop3: detected capacity change from 0 to 512 [ 667.921338][T10644] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2622: iget: bad extended attribute block 1 [ 667.934558][T10644] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2622: couldn't read orphan inode 15 (err -117) [ 667.948019][T10644] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 668.107205][T10650] loop1: detected capacity change from 0 to 256 [ 668.545879][ T9127] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 668.578604][ T1791] usb 1-1: USB disconnect, device number 108 [ 668.635429][ T287] attempt to access beyond end of device [ 668.635429][ T287] loop0: rw=2049, want=45104, limit=40427 [ 668.835928][ T9127] usb 3-1: device descriptor read/64, error -71 [ 668.856491][T10663] loop1: detected capacity change from 0 to 128 [ 668.918011][T10663] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 668.986904][T10672] loop4: detected capacity change from 0 to 256 [ 669.967106][ T316] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 670.005928][ T9127] usb 3-1: device descriptor read/64, error -71 [ 670.052655][T10693] loop3: detected capacity change from 0 to 256 [ 670.535911][ T6] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 670.543386][ T9127] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 670.815904][ T9127] usb 3-1: device descriptor read/64, error -71 [ 670.915449][T10710] loop1: detected capacity change from 0 to 256 [ 670.929078][T10709] loop3: detected capacity change from 0 to 256 [ 670.945923][ T6] usb 5-1: not running at top speed; connect to a high speed hub [ 671.029749][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.039948][ T6] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 672.259701][ T968] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 672.287291][T10723] loop2: detected capacity change from 0 to 128 [ 672.302916][T10723] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 672.425942][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 672.740863][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.790961][ T6] usb 5-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 672.828465][ T6] usb 5-1: Manufacturer: ᐇ [ 672.832411][T10725] loop1: detected capacity change from 0 to 40427 [ 672.851328][ T6] usb 5-1: SerialNumber: ࠉ [ 672.925967][ T968] usb 1-1: config 0 has no interfaces? [ 672.933431][ T6] usb 5-1: can't set config #1, error -71 [ 672.939861][ T6] usb 5-1: USB disconnect, device number 98 [ 672.946964][T10725] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 672.967874][T10725] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 672.977308][T10725] F2FS-fs (loop1): invalid crc value [ 672.984006][T10725] F2FS-fs (loop1): Found nat_bits in checkpoint [ 673.005971][ T968] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 673.007017][T10725] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 673.014957][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 673.022236][T10725] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 673.029792][ T968] usb 1-1: SerialNumber: syz [ 673.049964][T10725] netlink: 'syz.1.2647': attribute type 6 has an invalid length. [ 673.052846][ T968] usb 1-1: config 0 descriptor?? [ 673.154484][ T316] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 673.523603][T10752] loop3: detected capacity change from 0 to 256 [ 673.605886][ T6] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 673.685138][T10697] loop0: detected capacity change from 0 to 40427 [ 673.906812][T10697] F2FS-fs (loop0): Found nat_bits in checkpoint [ 673.929619][T10697] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 673.936424][T10697] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 673.950166][T10697] netlink: 'syz.0.2640': attribute type 27 has an invalid length. [ 673.958673][T10697] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.966031][T10697] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 674.055901][ T6] usb 5-1: device descriptor read/64, error -71 [ 674.114064][T10765] binder: Unknown parameter 'st' [ 674.197293][T10769] loop2: detected capacity change from 0 to 516 [ 674.277098][T10769] EXT4-fs (loop2): Ignoring removed bh option [ 674.287156][T10769] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 674.316094][T10769] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 674.493956][T10769] loop2: detected capacity change from 0 to 2048 [ 674.565873][ T6] usb 5-1: device descriptor read/64, error -71 [ 674.591548][T10769] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz.2.2660: casefold flag without casefold feature [ 674.604310][T10769] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 674.614802][T10769] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 674.623297][T10769] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 674.685953][ T1791] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 674.972964][T10786] loop2: detected capacity change from 0 to 128 [ 675.016005][ T6] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 675.056293][T10786] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 675.135930][ T1791] usb 4-1: not running at top speed; connect to a high speed hub [ 675.236103][ T1791] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.246873][ T1791] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 675.280739][ T1791] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.345132][ T39] usb 1-1: USB disconnect, device number 109 [ 675.355941][ T6] usb 5-1: device descriptor read/64, error -71 [ 675.367778][ T287] attempt to access beyond end of device [ 675.367778][ T287] loop0: rw=2049, want=45104, limit=40427 [ 675.556121][ T1791] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 675.574957][ T1791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.632776][ T1791] usb 4-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 675.710322][ T1791] usb 4-1: Manufacturer: ᐇ [ 675.714826][ T1791] usb 4-1: SerialNumber: ࠉ [ 675.756615][T10798] loop0: detected capacity change from 0 to 40427 [ 675.827267][ T9471] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 675.836968][T10798] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 675.844876][T10798] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 675.854009][T10798] F2FS-fs (loop0): invalid crc value [ 675.860724][T10798] F2FS-fs (loop0): Found nat_bits in checkpoint [ 675.888152][T10798] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 675.898124][T10807] loop2: detected capacity change from 0 to 256 [ 675.899586][T10798] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 675.920941][ T6] usb 5-1: device descriptor read/64, error -71 [ 675.984279][T10798] netlink: 'syz.0.2666': attribute type 6 has an invalid length. [ 675.986765][T10809] loop4: detected capacity change from 0 to 256 [ 676.039084][ T1791] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 676.082110][ T1791] cdc_ncm 4-1:1.0: bind() failure [ 676.249064][ T6] usb usb5-port1: attempt power cycle [ 676.258773][ T1791] usb 4-1: USB disconnect, device number 99 [ 677.512091][T10837] loop2: detected capacity change from 0 to 128 [ 677.531498][T10837] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 677.780959][T10846] loop1: detected capacity change from 0 to 512 [ 678.286095][T10846] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2681: iget: bad extended attribute block 1 [ 678.299231][T10846] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2681: couldn't read orphan inode 15 (err -117) [ 678.311308][T10846] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 678.379481][ T6] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 678.392350][ T4745] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 678.418605][ T39] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 678.447806][T10857] loop2: detected capacity change from 0 to 256 [ 678.736063][ T39] usb 1-1: device descriptor read/64, error -71 [ 678.949684][ T6] usb 5-1: config 0 has no interfaces? [ 679.003196][T10868] loop1: detected capacity change from 0 to 40427 [ 679.055988][ T6] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 679.056648][T10868] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 679.067657][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 679.078720][T10868] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 679.080857][ T6] usb 5-1: SerialNumber: syz [ 679.089422][T10868] F2FS-fs (loop1): invalid crc value [ 679.093866][ T6] usb 5-1: config 0 descriptor?? [ 679.101473][T10868] F2FS-fs (loop1): Found nat_bits in checkpoint [ 679.125892][ T39] usb 1-1: device descriptor read/64, error -71 [ 679.126319][T10868] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 679.139127][T10868] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 679.156872][T10868] netlink: 'syz.1.2688': attribute type 6 has an invalid length. [ 679.321786][T10877] loop3: detected capacity change from 0 to 256 [ 679.395903][ T39] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 679.506534][T10832] loop4: detected capacity change from 0 to 40427 [ 679.706009][ T39] usb 1-1: device descriptor read/64, error -71 [ 679.777979][T10832] F2FS-fs (loop4): Found nat_bits in checkpoint [ 679.801444][T10832] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 679.808336][T10832] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 679.822734][T10832] netlink: 'syz.4.2676': attribute type 27 has an invalid length. [ 679.831188][T10832] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.838415][T10832] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.845928][ T6] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 679.989995][T10891] binder: Unknown parameter 'st' [ 680.246017][ T39] usb 1-1: device descriptor read/64, error -71 [ 680.516637][ T39] usb usb1-port1: attempt power cycle [ 680.545935][ T6] usb 3-1: not running at top speed; connect to a high speed hub [ 680.852412][T10904] loop0: detected capacity change from 0 to 128 [ 680.859468][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 680.869896][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 680.881742][ T6] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 680.956647][T10904] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 681.055958][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 681.065262][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.076146][ T6] usb 3-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 681.129823][T10908] loop3: detected capacity change from 0 to 512 [ 681.167826][ T290] attempt to access beyond end of device [ 681.167826][ T290] loop4: rw=2049, want=45104, limit=40427 [ 681.235539][T10908] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2696: iget: bad extended attribute block 1 [ 681.275867][T10908] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2696: couldn't read orphan inode 15 (err -117) [ 681.312482][T10908] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 681.341730][ T6] usb 3-1: Manufacturer: ᐇ [ 681.436359][ T6] usb 3-1: SerialNumber: ࠉ [ 681.504881][ T9127] usb 5-1: USB disconnect, device number 101 [ 681.610435][T10926] loop1: detected capacity change from 0 to 256 [ 682.300312][ T316] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 682.338149][ T6] usb 3-1: USB disconnect, device number 104 [ 683.022324][T10943] loop1: detected capacity change from 0 to 256 [ 683.072782][T10931] loop0: detected capacity change from 0 to 40427 [ 683.120005][T10931] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 683.128280][T10931] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 683.137662][T10931] F2FS-fs (loop0): invalid crc value [ 683.147770][T10931] F2FS-fs (loop0): Found nat_bits in checkpoint [ 683.170518][T10931] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 683.177455][T10931] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 683.185974][ T1791] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 683.338260][T10931] netlink: 'syz.0.2703': attribute type 6 has an invalid length. [ 683.529716][T10957] loop3: detected capacity change from 0 to 512 [ 683.546014][ T6] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 683.551419][ T1791] usb 5-1: device descriptor read/64, error -71 [ 683.572671][T10957] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2709: iget: bad extended attribute block 1 [ 683.590748][T10957] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2709: couldn't read orphan inode 15 (err -117) [ 683.603353][T10957] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 684.028004][T10972] loop0: detected capacity change from 0 to 128 [ 684.086410][T10972] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 684.135896][ T1791] usb 5-1: device descriptor read/64, error -71 [ 684.291898][ T6] usb 3-1: config 0 has no interfaces? [ 684.496201][ T1791] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 684.722025][ T6] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 684.730912][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 684.738730][ T6] usb 3-1: SerialNumber: syz [ 684.743627][ T6] usb 3-1: config 0 descriptor?? [ 684.765943][ T1791] usb 5-1: device descriptor read/64, error -71 [ 684.897149][ T316] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 685.398362][T10983] netlink: 'syz.3.2715': attribute type 3 has an invalid length. [ 685.684642][ T1791] usb 5-1: device descriptor read/64, error -71 [ 685.732507][T10992] futex_wake_op: syz.3.2718 tries to shift op by 144; fix this program [ 685.846376][ T1791] usb usb5-port1: attempt power cycle [ 687.454644][ T6] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 687.463807][ T39] usb 3-1: USB disconnect, device number 105 [ 687.585196][T11016] 9pnet: Insufficient options for proto=fd [ 687.644659][T11014] loop0: detected capacity change from 0 to 512 [ 687.723308][T11022] loop2: detected capacity change from 0 to 512 [ 691.911451][T11014] EXT4-fs: failed to create workqueue [ 691.917022][T11014] EXT4-fs (loop0): mount failed [ 693.466727][T11055] input: syz1 as /devices/virtual/input/input63 [ 693.528067][ T20] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 693.588040][ T6] usb 2-1: device not accepting address 93, error -71 [ 693.985933][ T6] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 694.006192][ T20] usb 4-1: config 0 has no interfaces? [ 694.316018][ T20] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 694.328284][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 694.336440][ T20] usb 4-1: SerialNumber: syz [ 694.344272][ T20] usb 4-1: config 0 descriptor?? [ 694.446797][T11066] loop2: detected capacity change from 0 to 512 [ 694.528153][ T1791] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 694.610977][T11066] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2738: iget: bad extended attribute block 1 [ 694.624517][T11066] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2738: couldn't read orphan inode 15 (err -117) [ 694.638297][T11066] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 694.788251][T11062] loop0: detected capacity change from 0 to 40427 [ 694.825891][ T1791] usb 5-1: device descriptor read/64, error -71 [ 694.856480][T11062] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 694.874279][T11062] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 694.884577][T11062] F2FS-fs (loop0): invalid crc value [ 694.905356][T11062] F2FS-fs (loop0): Found nat_bits in checkpoint [ 694.975496][T11062] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 694.985402][T11062] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 695.053233][T11062] netlink: 'syz.0.2737': attribute type 6 has an invalid length. [ 695.067529][T11044] loop3: detected capacity change from 0 to 40427 [ 695.105897][ T6] usb 2-1: device descriptor read/64, error -71 [ 695.112958][T11044] F2FS-fs (loop3): Found nat_bits in checkpoint [ 695.194017][T11044] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 695.220470][T11044] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 695.254041][ T1791] usb 5-1: device descriptor read/64, error -71 [ 695.275672][T11044] netlink: 'syz.3.2733': attribute type 27 has an invalid length. [ 695.284253][T11044] UDC core: couldn't find an available UDC or it's busy: -16 [ 695.291724][T11044] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 695.536025][ T1791] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 695.615935][ T20] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 695.660809][T11089] loop0: detected capacity change from 0 to 512 [ 695.678951][T11090] binder: Unknown parameter 'st' [ 695.721072][T11089] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2741: iget: bad extended attribute block 1 [ 695.733743][T11089] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2741: couldn't read orphan inode 15 (err -117) [ 695.746032][T11089] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 695.835870][ T1791] usb 5-1: device descriptor read/64, error -71 [ 696.568591][ T20] usb 3-1: not running at top speed; connect to a high speed hub [ 696.675915][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.685874][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 696.820378][ T1791] usb 5-1: device descriptor read/64, error -71 [ 696.972449][ T9127] usb 4-1: USB disconnect, device number 100 [ 697.007434][ T288] attempt to access beyond end of device [ 697.007434][ T288] loop3: rw=2049, want=45104, limit=40427 [ 697.018710][ T1791] usb usb5-port1: attempt power cycle [ 697.755250][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 697.770056][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.791949][ T20] usb 3-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 697.825731][ T20] usb 3-1: Manufacturer: ᐇ [ 697.830646][ T20] usb 3-1: SerialNumber: ࠉ [ 698.095932][ T1791] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 698.210752][T11128] loop2: detected capacity change from 0 to 128 [ 698.213383][T11124] loop0: detected capacity change from 0 to 40427 [ 698.217725][ T20] usb 3-1: USB disconnect, device number 106 [ 698.256536][T11124] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 698.264229][T11128] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 698.264263][T11124] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 698.275915][ T1791] usb 5-1: device descriptor read/8, error -71 [ 698.282674][T11124] F2FS-fs (loop0): invalid crc value [ 698.307826][T11124] F2FS-fs (loop0): Found nat_bits in checkpoint [ 698.344162][T11124] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 698.351177][ T9127] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 698.354142][T11124] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 698.375576][T11124] netlink: 'syz.0.2751': attribute type 6 has an invalid length. [ 698.576044][ T1791] usb 5-1: device descriptor read/8, error -71 [ 698.704942][ T9127] usb 2-1: device descriptor read/64, error -71 [ 698.838711][T11138] loop3: detected capacity change from 0 to 512 [ 698.845940][ T1791] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 699.081941][ T1791] usb 5-1: device descriptor read/8, error -71 [ 699.088979][T11138] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2754: iget: bad extended attribute block 1 [ 699.101707][T11138] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2754: couldn't read orphan inode 15 (err -117) [ 699.113796][ T4745] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 699.113949][T11138] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 699.456257][ T1791] usb 5-1: device descriptor read/8, error -71 [ 699.474933][ T9127] usb 2-1: device descriptor read/64, error -71 [ 699.576002][ T1791] usb usb5-port1: unable to enumerate USB device [ 699.655316][T11160] 9pnet: Insufficient options for proto=fd [ 699.745886][ T9127] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 699.775934][ T39] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 700.144052][T11170] loop2: detected capacity change from 0 to 40427 [ 700.150324][ T9127] usb 2-1: device descriptor read/64, error -71 [ 700.156434][T11170] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 700.163911][T11170] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 700.172823][T11170] F2FS-fs (loop2): invalid crc value [ 700.175970][ T39] usb 4-1: config 0 has no interfaces? [ 700.179341][T11170] F2FS-fs (loop2): Found nat_bits in checkpoint [ 700.205850][T11170] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 700.212820][T11170] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 700.230644][T11170] netlink: 'syz.2.2763': attribute type 6 has an invalid length. [ 700.255918][ T39] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 700.264936][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 700.272899][ T39] usb 4-1: SerialNumber: syz [ 700.278125][ T39] usb 4-1: config 0 descriptor?? [ 700.456397][ T1791] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 700.840636][ T9127] usb 2-1: device descriptor read/64, error -71 [ 700.843466][T11180] loop0: detected capacity change from 0 to 128 [ 700.896663][T11180] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 700.965978][ T9127] usb usb2-port1: attempt power cycle [ 700.998777][ T39] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 701.037545][T11158] loop3: detected capacity change from 0 to 40427 [ 702.211929][ T1791] usb 5-1: not running at top speed; connect to a high speed hub [ 702.412741][ T9471] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 702.449649][T11158] F2FS-fs (loop3): Found nat_bits in checkpoint [ 702.465961][ T1791] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.485865][ T39] usb 3-1: device descriptor read/64, error -71 [ 702.512424][ T1791] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 702.659673][T11158] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 704.215909][ T1791] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 704.242439][T11205] loop0: detected capacity change from 0 to 256 [ 704.251038][ T1791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.265881][ T39] usb 3-1: device descriptor read/64, error -71 [ 704.372886][ T1791] usb 5-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 705.684337][ T1791] usb 5-1: Manufacturer: ᐇ [ 705.690056][ T357] usb 4-1: USB disconnect, device number 101 [ 705.725956][ T1791] usb 5-1: can't set config #1, error -71 [ 705.883564][ T1791] usb 5-1: USB disconnect, device number 109 [ 706.246090][T11214] loop3: detected capacity change from 0 to 512 [ 706.279100][T11214] EXT4-fs (loop3): Ignoring removed bh option [ 706.296161][T11214] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 706.361389][T11214] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 706.373595][T11212] loop2: detected capacity change from 0 to 40427 [ 706.442433][T11214] loop3: detected capacity change from 0 to 2048 [ 706.450599][T11212] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 706.458460][T11212] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 706.467584][T11212] F2FS-fs (loop2): invalid crc value [ 706.474039][T11212] F2FS-fs (loop2): Found nat_bits in checkpoint [ 706.485738][T11214] EXT4-fs error (device loop3): ext4_fill_super:4831: inode #2: comm syz.3.2773: casefold flag without casefold feature [ 706.498421][T11214] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 706.508753][T11214] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 706.516171][T11214] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 706.522190][T11212] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 706.541937][T11212] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 706.561202][T11212] netlink: 'syz.2.2774': attribute type 6 has an invalid length. [ 706.606516][ T1791] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 706.689651][ T20] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 707.404756][T11236] netlink: 'syz.1.2778': attribute type 3 has an invalid length. [ 707.800453][T11255] input: syz1 as /devices/virtual/input/input64 [ 708.039180][ T6] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 708.039264][ T20] usb 1-1: device descriptor read/64, error -71 [ 708.392070][ T9127] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 710.441631][ T20] usb 1-1: device descriptor read/64, error -71 [ 710.462068][T11269] loop4: detected capacity change from 0 to 512 [ 710.522936][T11269] EXT4-fs (loop4): Ignoring removed bh option [ 710.529000][T11269] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 710.537737][T11269] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 710.576021][ T6] usb 4-1: config 0 has no interfaces? [ 710.819694][T11269] loop4: detected capacity change from 0 to 2048 [ 710.835971][ T9127] usb 2-1: unable to get BOS descriptor set [ 710.836070][ T6] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 710.852656][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 710.868004][T11269] EXT4-fs error (device loop4): ext4_fill_super:4831: inode #2: comm syz.4.2787: casefold flag without casefold feature [ 710.880713][ T20] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 710.895132][T11269] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 710.901288][ T6] usb 4-1: config 0 descriptor?? [ 710.910722][T11269] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 710.918592][T11269] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 710.931890][ T6] usb 4-1: can't set config #0, error -71 [ 710.938698][ T6] usb 4-1: USB disconnect, device number 102 [ 710.995994][ T9127] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 711.005551][ T9127] usb 2-1: can't read configurations, error -71 [ 711.211943][T11289] loop3: detected capacity change from 0 to 512 [ 713.771108][T11299] loop1: detected capacity change from 0 to 256 [ 713.828315][T11289] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2792: iget: bad extended attribute block 1 [ 714.631349][ T1791] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 714.714259][T11289] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2792: couldn't read orphan inode 15 (err -117) [ 714.726179][T11289] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 714.748138][T11307] loop0: detected capacity change from 0 to 515 [ 714.857318][T11307] EXT4-fs (loop0): Ignoring removed bh option [ 714.867944][T11307] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 714.876825][T11307] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 714.946109][ T1791] usb 3-1: device descriptor read/64, error -71 [ 714.984868][T11326] input: syz1 as /devices/virtual/input/input65 [ 715.215891][ T9127] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 715.237990][T11307] loop0: detected capacity change from 0 to 2048 [ 715.297472][T11307] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.2797: casefold flag without casefold feature [ 715.310851][T11307] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 715.315856][ T6] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 715.321432][T11307] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 715.334992][T11307] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 715.347897][ T1791] usb 3-1: device descriptor read/64, error -71 [ 715.478678][T11329] loop0: detected capacity change from 0 to 512 [ 715.536291][T11329] EXT4-fs (loop0): Ignoring removed bh option [ 715.542374][T11329] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 715.550541][T11329] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 715.636367][ T1791] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 715.650518][T11329] loop0: detected capacity change from 0 to 2048 [ 715.686246][ T9127] usb 2-1: not running at top speed; connect to a high speed hub [ 715.697273][T11329] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.2803: casefold flag without casefold feature [ 715.710697][T11329] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 715.724557][T11329] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 715.732291][T11329] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 715.760483][T11335] netlink: 'syz.4.2804': attribute type 3 has an invalid length. [ 715.916010][ T6] usb 4-1: config 0 has no interfaces? [ 715.916010][ T1791] usb 3-1: device descriptor read/64, error -71 [ 715.955952][ T9127] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.966262][ T9127] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 715.995942][ T6] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 716.004801][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 716.012841][ T6] usb 4-1: SerialNumber: syz [ 716.018073][ T6] usb 4-1: config 0 descriptor?? [ 716.305914][ T9127] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 716.314950][ T9127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.315849][ T1791] usb 3-1: device descriptor read/64, error -71 [ 716.323004][ T9127] usb 2-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 716.359117][ T9127] usb 2-1: Manufacturer: ᐇ [ 716.363528][ T9127] usb 2-1: SerialNumber: ࠉ [ 716.439659][T11325] loop3: detected capacity change from 0 to 40427 [ 716.478095][T11325] F2FS-fs (loop3): Found nat_bits in checkpoint [ 716.485986][ T1791] usb usb3-port1: attempt power cycle [ 716.520079][T11325] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 716.526961][T11325] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 716.548352][T11325] netlink: 'syz.3.2802': attribute type 27 has an invalid length. [ 716.556733][T11325] UDC core: couldn't find an available UDC or it's busy: -16 [ 716.563977][T11325] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 716.707875][T11351] binder: Unknown parameter 'st' [ 716.794414][ T9127] usb 2-1: USB disconnect, device number 99 [ 716.897267][ T357] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 718.057540][T11365] loop2: detected capacity change from 0 to 256 [ 718.060906][ T9127] usb 4-1: USB disconnect, device number 103 [ 718.106689][ T288] attempt to access beyond end of device [ 718.106689][ T288] loop3: rw=2049, want=45104, limit=40427 [ 718.128566][ T357] usb 5-1: device descriptor read/64, error -71 [ 718.848971][T11375] loop0: detected capacity change from 0 to 256 [ 719.310768][T11382] loop3: detected capacity change from 0 to 512 [ 720.975951][T11383] netlink: 'syz.2.2815': attribute type 3 has an invalid length. [ 721.534983][T11382] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2812: iget: bad extended attribute block 1 [ 721.574325][T11382] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2812: couldn't read orphan inode 15 (err -117) [ 721.586234][T11382] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 721.627173][T11391] loop1: detected capacity change from 0 to 512 [ 721.653804][ T357] usb 5-1: device descriptor read/64, error -71 [ 721.682755][T11396] loop0: detected capacity change from 0 to 256 [ 722.182330][T11391] EXT4-fs (loop1): Ignoring removed bh option [ 722.235033][T11391] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 722.261214][T11391] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 722.378141][T11391] loop1: detected capacity change from 0 to 2048 [ 722.388709][T11391] EXT4-fs error (device loop1): ext4_fill_super:4831: inode #2: comm syz.1.2816: casefold flag without casefold feature [ 722.401555][T11391] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 722.476146][T11407] netlink: 'syz.3.2820': attribute type 3 has an invalid length. [ 722.487492][ T357] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 722.500501][T11391] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 722.508060][T11391] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 722.675904][ T9127] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 722.765955][ T357] usb 5-1: device descriptor read/64, error -71 [ 723.115874][ T1791] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 723.135873][ T9127] usb 3-1: device descriptor read/64, error -71 [ 723.172767][ T357] usb 5-1: device descriptor read/64, error -71 [ 723.305931][ T357] usb usb5-port1: attempt power cycle [ 723.512001][T11422] loop1: detected capacity change from 0 to 256 [ 723.525889][ T9127] usb 3-1: device descriptor read/64, error -71 [ 723.526043][ T1791] usb 1-1: config 0 has no interfaces? [ 723.616355][ T1791] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 723.625582][ T1791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 723.643636][ T1791] usb 1-1: SerialNumber: syz [ 723.657290][ T1791] usb 1-1: config 0 descriptor?? [ 723.735901][ T357] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 723.795858][ T9127] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 723.915925][ T357] usb 5-1: device descriptor read/8, error -71 [ 724.013943][T11415] loop0: detected capacity change from 0 to 40427 [ 724.065928][ T9127] usb 3-1: device descriptor read/64, error -71 [ 724.087282][T11415] F2FS-fs (loop0): Found nat_bits in checkpoint [ 724.098044][T11427] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.104939][T11427] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.112468][T11427] device bridge_slave_0 entered promiscuous mode [ 724.119491][T11427] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.120589][T11415] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 724.126576][T11427] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.136163][T11415] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 724.139979][T11427] device bridge_slave_1 entered promiscuous mode [ 724.158914][T11415] netlink: 'syz.0.2822': attribute type 27 has an invalid length. [ 724.167538][T11415] UDC core: couldn't find an available UDC or it's busy: -16 [ 724.174768][T11415] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 724.205923][ T357] usb 5-1: device descriptor read/8, error -71 [ 724.236090][T11427] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.242924][T11427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.250108][T11427] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.256949][T11427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.275273][ T1791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 724.282649][ T1791] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.290022][ T1791] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.341846][T11436] binder: Unknown parameter 'st' [ 724.387890][ T1791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 724.396493][ T1791] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.403342][ T1791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.427494][ T1791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 724.435606][ T1791] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.442474][ T1791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.450496][ T1791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 724.465752][T11427] device veth0_vlan entered promiscuous mode [ 724.472807][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 724.481124][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 724.489434][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 724.496897][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 724.497083][ T357] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 724.504283][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 724.525167][T11427] device veth1_macvtap entered promiscuous mode [ 724.533725][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 724.547225][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 724.557350][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 724.565888][ T9127] usb 3-1: device descriptor read/64, error -71 [ 724.588599][T11440] loop1: detected capacity change from 0 to 256 [ 724.599772][T11441] loop3: detected capacity change from 0 to 256 [ 724.685976][ T9127] usb usb3-port1: attempt power cycle [ 724.692833][ T357] usb 5-1: device descriptor read/8, error -71 [ 724.906089][ T357] usb 5-1: device descriptor read/8, error -71 [ 725.026371][ T357] usb usb5-port1: unable to enumerate USB device [ 725.380604][ T357] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 725.543016][T11453] loop1: detected capacity change from 0 to 512 [ 725.706031][ T357] usb 5-1: device descriptor read/64, error -71 [ 725.722235][T11453] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2830: iget: bad extended attribute block 1 [ 725.736106][T11453] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2830: couldn't read orphan inode 15 (err -117) [ 725.750738][T11453] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 725.901583][ T39] usb 1-1: USB disconnect, device number 115 [ 726.038478][ T287] attempt to access beyond end of device [ 726.038478][ T287] loop0: rw=2049, want=45104, limit=40427 [ 726.125251][ T357] usb 5-1: device descriptor read/64, error -71 [ 726.366925][T11457] loop3: detected capacity change from 0 to 512 [ 726.425878][ T357] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 726.436546][T11457] EXT4-fs (loop3): Ignoring removed bh option [ 726.442535][T11457] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 726.450795][T11457] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 726.717663][T11457] loop3: detected capacity change from 0 to 2048 [ 726.745994][ T357] usb 5-1: device descriptor read/64, error -71 [ 726.757119][T11457] EXT4-fs error (device loop3): ext4_fill_super:4831: inode #2: comm syz.3.2831: casefold flag without casefold feature [ 726.769778][T11457] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 726.780050][T11457] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 726.787556][T11457] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 728.038161][T11495] loop0: detected capacity change from 0 to 256 [ 728.160428][ T357] usb 5-1: device descriptor read/64, error -71 [ 728.306029][ T357] usb usb5-port1: attempt power cycle [ 728.415939][ T9127] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 728.423469][ T6] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 728.695870][ T6] usb 3-1: device descriptor read/64, error -71 [ 728.701984][ T9127] usb 4-1: device descriptor read/64, error -71 [ 728.735867][ T357] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 728.947072][ T357] usb 5-1: device descriptor read/8, error -71 [ 729.095887][ T9127] usb 4-1: device descriptor read/64, error -71 [ 729.102010][ T6] usb 3-1: device descriptor read/64, error -71 [ 729.125928][ T1791] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 729.175911][ T357] usb 5-1: device descriptor read/8, error -71 [ 729.365869][ T9127] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 729.375915][ T6] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 729.525923][ T1791] usb 2-1: config 0 has no interfaces? [ 729.625974][ T1791] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 729.634986][ T1791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 729.635866][ T9127] usb 4-1: device descriptor read/64, error -71 [ 729.642805][ T1791] usb 2-1: SerialNumber: syz [ 729.649121][ T6] usb 3-1: device descriptor read/64, error -71 [ 729.656989][ T1791] usb 2-1: config 0 descriptor?? [ 729.675980][ T357] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 730.433515][T11515] loop2: detected capacity change from 0 to 512 [ 730.466806][T11515] EXT4-fs (loop2): Ignoring removed bh option [ 730.472855][T11515] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 730.481270][T11515] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 730.495920][ T357] usb 5-1: config 0 has no interfaces? [ 730.706092][ T357] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 730.877533][ T357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 730.886538][T11499] loop1: detected capacity change from 0 to 40427 [ 730.890309][T11515] loop2: detected capacity change from 0 to 2048 [ 730.899100][ T357] usb 5-1: SerialNumber: syz [ 730.904140][ T357] usb 5-1: config 0 descriptor?? [ 731.132943][T11515] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz.2.2848: casefold flag without casefold feature [ 731.134731][T11499] F2FS-fs (loop1): Found nat_bits in checkpoint [ 731.151632][T11515] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 731.173777][T11515] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 731.181742][T11515] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 731.195564][T11499] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 731.209224][T11499] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 731.238128][T11499] netlink: 'syz.1.2843': attribute type 27 has an invalid length. [ 731.247459][T11499] UDC core: couldn't find an available UDC or it's busy: -16 [ 731.254709][T11499] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 731.443391][T11504] loop4: detected capacity change from 0 to 40427 [ 732.000386][T11539] binder: Unknown parameter 'st' [ 732.866206][ T357] usb 5-1: USB disconnect, device number 118 [ 733.017957][T11550] loop4: detected capacity change from 0 to 256 [ 733.115933][ T39] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 733.375908][ T9127] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 733.525939][ T39] usb 1-1: config 0 has no interfaces? [ 733.615937][ T39] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 733.624957][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 733.632880][ T39] usb 1-1: SerialNumber: syz [ 733.638257][ T39] usb 1-1: config 0 descriptor?? [ 733.646122][ T9127] usb 4-1: device descriptor read/64, error -71 [ 733.863932][T11555] loop4: detected capacity change from 0 to 512 [ 733.867612][ T39] usb 2-1: USB disconnect, device number 100 [ 733.959616][T11558] input: syz1 as /devices/virtual/input/input66 [ 734.048890][T11555] EXT4-fs (loop4): Ignoring removed bh option [ 734.100463][T11555] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 734.147218][ T291] attempt to access beyond end of device [ 734.147218][ T291] loop1: rw=2049, want=45104, limit=40427 [ 734.165575][T11555] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 734.175896][ T9127] usb 4-1: device descriptor read/64, error -71 [ 734.306953][T11542] loop0: detected capacity change from 0 to 40427 [ 734.395495][T11555] loop4: detected capacity change from 0 to 2048 [ 734.402906][T11542] F2FS-fs (loop0): Found nat_bits in checkpoint [ 734.443981][T11542] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 734.445875][ T9127] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 734.457992][T11542] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 734.478332][T11555] EXT4-fs error (device loop4): ext4_fill_super:4831: inode #2: comm syz.4.2857: casefold flag without casefold feature [ 734.491059][T11555] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 734.501572][T11555] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 734.509330][T11555] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,grpid,,errors=continue. Quota mode: writeback. [ 734.523053][T11542] netlink: 'syz.0.2852': attribute type 27 has an invalid length. [ 734.540162][T11542] UDC core: couldn't find an available UDC or it's busy: -16 [ 734.553608][T11542] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.725850][ T9127] usb 4-1: device descriptor read/64, error -71 [ 735.255941][T11570] binder: Unknown parameter 'st' [ 736.850859][ T6] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 736.868657][ T39] usb 1-1: USB disconnect, device number 116 [ 736.893671][ T287] attempt to access beyond end of device [ 736.893671][ T287] loop0: rw=2049, want=45104, limit=40427 [ 737.048347][T11593] input: syz1 as /devices/virtual/input/input67 [ 737.285956][ T6] usb 5-1: device descriptor read/64, error -71 [ 737.292299][ T9127] usb usb4-port1: attempt power cycle [ 737.770925][T11602] loop4: detected capacity change from 0 to 256 [ 737.885985][ T9127] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 738.295917][ T9127] usb 4-1: not running at top speed; connect to a high speed hub [ 738.375937][ T9127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.385916][ T9127] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 738.545936][ T9127] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 738.554978][ T9127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.562931][ T9127] usb 4-1: Product: 롬됹ꮎ諃樕ṹ睸쐝芔槹흻疏ࡹ鶦ꢯ숿窊尲蹸ḧᆪ⦡溸덟ꎑ쏫睊弝뒗∪쎴췷탐칉䫳쏴㨆욮眴搒Ꮾ芡洍㡥앱प튉ᓋ࿺臞킂恬輦쎀ᾟヤ햪魔㬏糺摷悛緲洖脣꒙ₕ秏䳊鑓Ὰ줣㭨㾁൙扛玧鏼췕ꅩ樠樦ࢩ㗪⠿狜鳬쫩㭆掩옝祝ﾛė黵ኈᓜ蚪 [ 738.593402][ T9127] usb 4-1: Manufacturer: ᐇ [ 738.598064][ T9127] usb 4-1: SerialNumber: ࠉ [ 738.628639][T11612] loop1: detected capacity change from 0 to 512 [ 738.719425][T11612] EXT4-fs (loop1): Ignoring removed bh option [ 738.731963][T11612] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 738.740723][T11612] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 738.772827][T11618] loop4: detected capacity change from 0 to 512 [ 739.108748][ T9127] usb 4-1: USB disconnect, device number 108 [ 739.133199][T11618] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2871: iget: bad extended attribute block 1 [ 739.145847][T11618] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2871: couldn't read orphan inode 15 (err -117) [ 739.158273][T11618] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 739.225419][T11612] loop1: detected capacity change from 0 to 2048 [ 739.759792][T11612] EXT4-fs error (device loop1): ext4_fill_super:4831: inode #2: comm syz.1.2872: casefold flag without casefold feature [ 739.774529][T11612] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 739.785502][T11612] ================================================================== [ 739.793385][T11612] BUG: KASAN: use-after-free in __ext4_iget+0x2ee/0x3f00 [ 739.800236][T11612] Read of size 8 at addr ffff88810b09d9e8 by task syz.1.2872/11612 [ 739.807961][T11612] [ 739.810132][T11612] CPU: 0 PID: 11612 Comm: syz.1.2872 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 739.820025][T11612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 739.829932][T11612] Call Trace: [ 739.833044][T11612] [ 739.835829][T11612] dump_stack_lvl+0x151/0x1c0 [ 739.840339][T11612] ? io_uring_drop_tctx_refs+0x190/0x190 [ 739.845857][T11612] ? panic+0x760/0x760 [ 739.849708][T11612] ? __kasan_check_write+0x14/0x20 [ 739.854656][T11612] print_address_description+0x87/0x3b0 [ 739.860039][T11612] ? __se_sys_mount+0x2c4/0x3b0 [ 739.864722][T11612] ? __x64_sys_mount+0xbf/0xd0 [ 739.869369][T11612] kasan_report+0x179/0x1c0 [ 739.873663][T11612] ? __ext4_iget+0x2ee/0x3f00 [ 739.878177][T11612] ? __ext4_iget+0x2ee/0x3f00 [ 739.882690][T11612] __asan_report_load8_noabort+0x14/0x20 [ 739.888157][T11612] __ext4_iget+0x2ee/0x3f00 [ 739.892502][T11612] ? xas_nomem+0x19a/0x1d0 [ 739.896754][T11612] ? ida_alloc_range+0x9fd/0xa80 [ 739.901529][T11612] ? __kasan_kmalloc+0x9/0x10 [ 739.906037][T11612] ? ext4_get_projid+0x140/0x140 [ 739.910810][T11612] ? __kasan_check_write+0x14/0x20 [ 739.915845][T11612] ? _raw_write_lock+0xa4/0x170 [ 739.920534][T11612] ? __proc_create+0x65a/0xa00 [ 739.925133][T11612] ? ext4_init_orphan_info+0x161/0x1080 [ 739.930517][T11612] ext4_enable_quotas+0x556/0x980 [ 739.935375][T11612] ? ext4_force_commit+0xc0/0xc0 [ 739.940150][T11612] ? proc_create+0x2b0/0x2b0 [ 739.944578][T11612] ? ext4_register_sysfs+0x281/0x2c0 [ 739.949694][T11612] ext4_fill_super+0x8b95/0x96e0 [ 739.954488][T11612] ? ext4_mount+0x40/0x40 [ 739.958635][T11612] ? vscnprintf+0x80/0x80 [ 739.962802][T11612] ? set_blocksize+0x1f0/0x380 [ 739.967403][T11612] ? sb_set_blocksize+0xa8/0xf0 [ 739.972086][T11612] mount_bdev+0x282/0x3b0 [ 739.976342][T11612] ? ext4_mount+0x40/0x40 [ 739.980505][T11612] ext4_mount+0x34/0x40 [ 739.984594][T11612] legacy_get_tree+0xf1/0x190 [ 739.989102][T11612] ? ext4_errno_to_code+0x140/0x140 [ 739.994230][T11612] vfs_get_tree+0x88/0x290 [ 739.998478][T11612] do_new_mount+0x2ba/0xb30 [ 740.002812][T11612] ? do_move_mount_old+0x160/0x160 [ 740.007759][T11612] ? security_capable+0x87/0xb0 [ 740.012447][T11612] ? ns_capable+0x89/0xe0 [ 740.016614][T11612] path_mount+0x671/0x1070 [ 740.020873][T11612] __se_sys_mount+0x2c4/0x3b0 [ 740.025381][T11612] ? __x64_sys_mount+0xd0/0xd0 [ 740.029979][T11612] ? debug_smp_processor_id+0x17/0x20 [ 740.035209][T11612] __x64_sys_mount+0xbf/0xd0 [ 740.039614][T11612] x64_sys_call+0x49d/0x9a0 [ 740.043952][T11612] do_syscall_64+0x3b/0xb0 [ 740.048205][T11612] ? clear_bhb_loop+0x35/0x90 [ 740.052724][T11612] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 740.058452][T11612] RIP: 0033:0x7f6e89c4565a [ 740.062703][T11612] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.082143][T11612] RSP: 002b:00007f6e888c0e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 740.090394][T11612] RAX: ffffffffffffffda RBX: 00007f6e888c0ef0 RCX: 00007f6e89c4565a [ 740.098204][T11612] RDX: 0000000020000780 RSI: 00000000200004c0 RDI: 00007f6e888c0eb0 [ 740.106009][T11612] RBP: 0000000020000780 R08: 00007f6e888c0ef0 R09: 00000000000040c2 [ 740.113821][T11612] R10: 00000000000040c2 R11: 0000000000000246 R12: 00000000200004c0 [ 740.121634][T11612] R13: 00007f6e888c0eb0 R14: 0000000000000751 R15: 0000000020000000 [ 740.129451][T11612] [ 740.132308][T11612] [ 740.134476][T11612] Allocated by task 3657: [ 740.138643][T11612] __kasan_slab_alloc+0xb1/0xe0 [ 740.143332][T11612] slab_post_alloc_hook+0x53/0x2c0 [ 740.148278][T11612] kmem_cache_alloc+0xf5/0x200 [ 740.152879][T11612] f2fs_alloc_inode+0x26/0x340 [ 740.157476][T11612] iget_locked+0x174/0x860 [ 740.161729][T11612] f2fs_iget+0x55/0x5040 [ 740.165811][T11612] f2fs_fill_super+0x4eed/0x8170 [ 740.170583][T11612] mount_bdev+0x282/0x3b0 [ 740.174750][T11612] f2fs_mount+0x34/0x40 [ 740.178742][T11612] legacy_get_tree+0xf1/0x190 [ 740.183264][T11612] vfs_get_tree+0x88/0x290 [ 740.187511][T11612] do_new_mount+0x2ba/0xb30 [ 740.191848][T11612] path_mount+0x671/0x1070 [ 740.196099][T11612] __se_sys_mount+0x2c4/0x3b0 [ 740.200612][T11612] __x64_sys_mount+0xbf/0xd0 [ 740.205129][T11612] x64_sys_call+0x49d/0x9a0 [ 740.209564][T11612] do_syscall_64+0x3b/0xb0 [ 740.213806][T11612] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 740.219533][T11612] [ 740.221706][T11612] Last potentially related work creation: [ 740.227266][T11612] kasan_save_stack+0x3b/0x60 [ 740.231773][T11612] __kasan_record_aux_stack+0xd3/0xf0 [ 740.236979][T11612] kasan_record_aux_stack_noalloc+0xb/0x10 [ 740.242623][T11612] call_rcu+0x135/0x1310 [ 740.246708][T11612] evict+0x5df/0x630 [ 740.250432][T11612] iput+0x63b/0x7e0 [ 740.254077][T11612] f2fs_put_super+0x683/0xc10 [ 740.258594][T11612] generic_shutdown_super+0x157/0x2e0 [ 740.263797][T11612] kill_block_super+0x7e/0xe0 [ 740.268315][T11612] kill_f2fs_super+0x2f9/0x3c0 [ 740.272913][T11612] deactivate_locked_super+0xad/0x110 [ 740.278122][T11612] deactivate_super+0xbe/0xf0 [ 740.282632][T11612] cleanup_mnt+0x45c/0x510 [ 740.286893][T11612] __cleanup_mnt+0x19/0x20 [ 740.291140][T11612] task_work_run+0x129/0x190 [ 740.295568][T11612] exit_to_user_mode_loop+0xc4/0xe0 [ 740.300598][T11612] exit_to_user_mode_prepare+0x5a/0xa0 [ 740.305896][T11612] syscall_exit_to_user_mode+0x26/0x160 [ 740.311276][T11612] do_syscall_64+0x47/0xb0 [ 740.315613][T11612] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 740.321344][T11612] [ 740.323513][T11612] Second to last potentially related work creation: [ 740.329938][T11612] kasan_save_stack+0x3b/0x60 [ 740.334448][T11612] __kasan_record_aux_stack+0xd3/0xf0 [ 740.339743][T11612] kasan_record_aux_stack_noalloc+0xb/0x10 [ 740.345383][T11612] call_rcu+0x135/0x1310 [ 740.349476][T11612] evict+0x5df/0x630 [ 740.353195][T11612] evict_inodes+0x5db/0x660 [ 740.357537][T11612] generic_shutdown_super+0x9c/0x2e0 [ 740.362660][T11612] kill_block_super+0x7e/0xe0 [ 740.367171][T11612] kill_f2fs_super+0x2f9/0x3c0 [ 740.371771][T11612] deactivate_locked_super+0xad/0x110 [ 740.376979][T11612] deactivate_super+0xbe/0xf0 [ 740.381492][T11612] cleanup_mnt+0x45c/0x510 [ 740.385744][T11612] __cleanup_mnt+0x19/0x20 [ 740.389996][T11612] task_work_run+0x129/0x190 [ 740.394425][T11612] exit_to_user_mode_loop+0xc4/0xe0 [ 740.399458][T11612] exit_to_user_mode_prepare+0x5a/0xa0 [ 740.404751][T11612] syscall_exit_to_user_mode+0x26/0x160 [ 740.410133][T11612] do_syscall_64+0x47/0xb0 [ 740.414386][T11612] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 740.420113][T11612] [ 740.422283][T11612] The buggy address belongs to the object at ffff88810b09d4e0 [ 740.422283][T11612] which belongs to the cache f2fs_inode_cache of size 1424 [ 740.436694][T11612] The buggy address is located 1288 bytes inside of [ 740.436694][T11612] 1424-byte region [ffff88810b09d4e0, ffff88810b09da70) [ 740.449972][T11612] The buggy address belongs to the page: [ 740.455455][T11612] page:ffffea00042c2600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810b099230 pfn:0x10b098 [ 740.466811][T11612] head:ffffea00042c2600 order:3 compound_mapcount:0 compound_pincount:0 [ 740.474969][T11612] flags: 0x4000000000010200(slab|head|zone=1) [ 740.480886][T11612] raw: 4000000000010200 ffffea000469e200 0000000200000002 ffff888107fbaf00 [ 740.489299][T11612] raw: ffff88810b099230 0000000080150013 00000001ffffffff 0000000000000000 [ 740.497881][T11612] page dumped because: kasan: bad access detected [ 740.504142][T11612] page_owner tracks the page as allocated [ 740.509686][T11612] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 370, ts 25665049685, free_ts 0 [ 740.530002][T11612] post_alloc_hook+0x1a3/0x1b0 [ 740.534592][T11612] prep_new_page+0x1b/0x110 [ 740.538935][T11612] get_page_from_freelist+0x3550/0x35d0 [ 740.544314][T11612] __alloc_pages+0x27e/0x8f0 [ 740.548740][T11612] new_slab+0x9a/0x4e0 [ 740.552656][T11612] ___slab_alloc+0x39e/0x830 [ 740.557083][T11612] __slab_alloc+0x4a/0x90 [ 740.561245][T11612] kmem_cache_alloc+0x134/0x200 [ 740.565929][T11612] f2fs_alloc_inode+0x26/0x340 [ 740.570526][T11612] iget_locked+0x174/0x860 [ 740.574778][T11612] f2fs_iget+0x55/0x5040 [ 740.578862][T11612] f2fs_fill_super+0x4eed/0x8170 [ 740.583633][T11612] mount_bdev+0x282/0x3b0 [ 740.587798][T11612] f2fs_mount+0x34/0x40 [ 740.591792][T11612] legacy_get_tree+0xf1/0x190 [ 740.596305][T11612] vfs_get_tree+0x88/0x290 [ 740.600557][T11612] page_owner free stack trace missing [ 740.605766][T11612] [ 740.607932][T11612] Memory state around the buggy address: [ 740.613411][T11612] ffff88810b09d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 740.621307][T11612] ffff88810b09d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 740.629202][T11612] >ffff88810b09d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 740.637448][T11612] ^ [ 740.644741][T11612] ffff88810b09da00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 740.652636][T11612] ffff88810b09da80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00 00 [ 740.660534][T11612] ================================================================== [ 740.668431][T11612] Disabling lock debugging due to kernel taint [ 740.677405][T11612] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 741.028287][T11612] EXT4-fs (loop1): mount failed