last executing test programs: 23m32.438069558s ago: executing program 32 (id=204): r0 = syz_usb_connect(0x3, 0x50, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) 22m58.056630303s ago: executing program 33 (id=341): syz_usb_connect(0x0, 0x32, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0) 20m43.746683479s ago: executing program 34 (id=891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16, @ANYRESDEC], 0x52) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x50) socketpair(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000000), &(0x7f0000000400)=@tcp6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, 0x0, &(0x7f0000000440)=""/177}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000240)=ANY=[], 0xfd, 0x150c, &(0x7f0000002d40)="$eJzs3Am4jlX3MPC19t43x8nwJJnvtdfNkwybJAklyZAkSUjmhCRJkiRxyJSEJGQ8ScYTkimddMzzkDnp5JUkSUhIsr/rNHz+vcPX+75//8/7fWf9ruu+7OW+177XPut6zj1c13m+6T6iZpNa1RoyM/w79O8D/PWfJABIAIDBAJALAAIAKJ+7fO6M/dk0Jv1bJxH/QxrNutIViCtJ+p+5Sf8zN+l/5ib9z9yk/5mb9D9zk/5nbtJ/ITK1lAJXy5Z5N3n///849d9Jlut/poD/aIf0//83+l86WvqfuUn/Mzfpf+Ym/c/MgitdgLjC5POfuUn/hcjULvs75Q3nrvQ7bdn+hU0IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhPi/4Jy/xADA7+MrXZcQQgghhBBCCCEuH//ula5ACCGEEEIIIYQQ//MQFGgwEEAWyAoJkA0S4SrIDjkgJ+SCGFwNueEayAPXQl7IB/mhABSEQlAYQiCwwBBBESgKcbgOisH1UBxKQEkoBQ5KQxm4AcrCjVAOboLycDNUgFugIlT65ZwZboeqcAdUgzuhOtSAmlAL7oLacDfUgXugLtwL9eA+qA/3QwN4ABpCI2gMD0ITeAiaQjNoDi2gJbSC1n+Sn5zr7+U/D73gBegNfSAJ+kI/eBH6wwAYCINgMLwEQ+BlGAqvwDAYDiPgVRgJr8EoeB1GwxgYC2/AOBgPE2AiTILJkAxvwhR4C6bC2w/lgOkwA2bCLJgNKfAOzIG5MA/ehfnwHiyA5GyLYDEsgfdhKXwAqfAhLIOPIA2WwwpYCatgNayBtbAO1sMG2AibYDNsga2wDT6G7bADdsIu2A17YC98AvvgU9gPn0E6fv4v5p/9Yz70QEBAhQoNGsyCWTABEzAREzE7ZsecmBNjGMPcmBvzYB7Mi3kxP+bHJCyIhbEwEhIyMhbBIhjHOBbDYlgci2NJLIkOHZbBMlgWb8RyWA7LY3msgBWwIlbCSngr3opVsApWxapYDathdayONbEm3oV34d1YB+tgXayL9bAe1sf62AAbYENsiI2xMTbBJtgUm2JzbI4tsSW2xtbYBttgW2yL7bE9dsAO2BE7YifshJ2xM3bBLtgVu2I37IbdsTv2wOfwOXwen8cX8AXsg9VVX+yH/bA/9seBOAgH4Us4BF/Gl/EVHIbDcQS+iq/iazgKz+BoHINjcSxWUeNxAk5EVpMxGZMxK0zBqTgVp+F0nI4zcRbOxhRMwTk4F+fiuzgf38P3cCEuxMW4BJfgUvwAUzEVl+FZTMPluAJX4ipcjatwLa7DtbgBN+IG3IybcStuxY/xY9yBO3AX7sI9uAc/wU/wU/wUh2E6puMBPIAH8SAewkN4GA/jETyCR/EoHsNjeByP4wk8iafwJJ7G03gGz+I5ADiP5/ECXsCLeDHjw68yGGVUFpVFJagElagSVXaVXeVUOVVMxVRulVvlUXlUXpVX5Vf5VUFVUBVWhRUpUqwiVUQVUXEVV8VUMVVcFVclVUnllFNlVBlVVpVV5VQ5VV7drCqoW1RFVUm1c7eqW1UV1d5VVXeoaqqaqq5qqJqqlqqlaqvaqo6qo+qquqqeqqfqq/tVA9UXB2IjldGZJmo4NlUjsLlqoVqqVuo1fFi1UaOwrWqn2qtH1RgcjR1VG9dJPaE6qwnYRT2lJuLTqpuajN3Vs6qHek71VM+rXqqt6636qGlZ+6p+aib2VwPUQDVIzcEaKqNjNdUr6vmsw9UI9apajK+pUep1NVqNUWPVG2qcGq8mqIlqkpqsktWbaop6S01Vb6tparqaoWaqWWq2SlHvqDlqrpqn3lXz1XtqgVqoFqnFaol6Xy1VH6hU9aFapj5SaWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm3qY7Vd7VA71S61W+1Re9Unap/6VO1Xn6l09bk6oP6iDqov1CH1pTqsvlJH1NfqqPpGHVPfquPqO3VCnVSn1PfqtPpBnVFn1Tn1ozqvflIX1M/qovIKNGqltTY60Fl0Vp2gs+lEfZXOrnPonDqXjumrdW59jc6jr9V5dT6d3xTQBXUhXViHmrTVrCNdRBfVcX2dLqav18V1CV1Sl9JOl9Zl9A26rL5Rl9M36fL6Zl1B36Ir6kq6sgd9m66ib9dV9R26mr5TV9c1dE1dS9+la+u7dR19j66r79X19H26vr5fN9AP6Ia6kW6sH9RN9EO6qW6mm+sWuqVupVvrh3Ub/Yhuq9vp9vpR3UE/pjvqx3Un/YTurJ/UXfRTuqt+WnfTz+ju+lndQz+ne+qf9UXtdW/dRyfpvrqfflH31wP0QD1ID9Yv6SH6ZT1Uv6KH6eF6hH5Vj9Sv6VH6dT1aj9Fj9Rt6nB6vJ+iJepKerJP1m3qKfktP1W/raXq6nqFn6ll6th7420zz/on8t/5O/tBfzr5Vb9Mf6+16h96pd+ndeo/eq/fqfXqf3q/363Sdrg/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6R/29Pq1/0Gf0WX1W/6jP6/P6wm8/AzBolNHGmMBkMVlNgslmEs1VJrvJYXKaXCZmrja5zTUmj7nW5DX5TH5TwBQ0hUxhExoy1rCJTBFT1MTNdaaYud4UNyVMSVPKOFPalDE3/Lfz/6y+1qa1aWPamLamrWlv2psOpoPpaDqaTqaT6Ww6my6mi+lquppuppvpbrqbHqaH6Wl6ml6ml+ltepskk2T6mRdNfzPADDSDzGDzkhlihpihZqgZZoaZEWaEGWlGmlFmlBltRpuxZqwZZ8aZCWaCmWQmmWSfy0wxU8xUM9VMM9PMjMG5zCwzy6SYFDPHzDHzzDwz38w3C8wCs8gsMkvMErPULDWpJtUsM8tMmllulpuVZqVZbVabtWatWW/Wm41mo9lsNps0s81sM9vNdrPT7DS7zW6z1+w1+8w+s9/sN+km3RwwB8xBc9AcMofMYXPYHDFHzFFz1Bwzx8xxc9ycMCfMKXPKnDanzRlzxpwz58x5c95cMBfMRXMx47YvUIEKTGCCLEGWICFICBKDxCB7kD3IGeQMYkEsyB3kDvIE1wZ5g3xB/qBAUDAoFBQOwoACG3AQBUWCokE8uC4oFlwfFA9KBCWDUoELSgdlghuCssGNQbngpqB8cHNQIbglqBhUCioHtwa3BVWC24OqwR1BteDOoHpQI6gZ1AruCmoHdwd1gnuCusG9Qb3gvqB+cH/QIHggaBg0ChoHDwZNgoeCpkGzoHnQImgZtApaX9b5vT+T7xHXO+wTJoV9w37hi2H/cEA4MBwUDg5fCoeEL4dDw1fCYeHwcET4ajgyfC0cFb4ejg7HhGPDN8Jx4fhwQjgxnBRODpPDN8Mp4Vvh1PDtcFo4PZwRzAxnhbPDlPCdcE44N5wXvhvOD98LF4QLw0Xh4hB/vSWG1PDDcFn4UZgWLg9XhCvDVeHqcE24NlwXrg83hBvDTeHm8kN+PTTcHu4Id4a7wt3hnnBv+Em4L/w03B9+FqaHn4cHwr+EB8MvwkPhl+Hh8KvwSPh1eDT8JjwWfhseD78LT4Qnw1Ph9+Hp8IfwTHg2PBf+GJ4PfwovhD+HF0OfcXOfcXknQ4ayUBZKoARKpETKTtkpJ+WkGMUoN+WmPJSH8lJeyk/5qSAVpMJUmDIwMRWhIhSnOBWjYlScilNJKkmOHJWhMlSWylI5KkflqTxVoApUkSpSZapMt9FtdDvdTnfQHXQn3Uk1qAbVolpUm2pTHapDdaku1aN6VJ/qUwNqQA2pITWmxtSEmlBTakrNqTm1pJbUmlpTG2pDbakttaf21IE6UEfqSJ2oE3WmztSFulBX6krdqBt1p+7Ug3pQT+pJvagX9abelERJ1I/6UX/qTwNpIA2mwTSEhtBQGkrDaBiNoBE0kkbSKBpFo2kMjaU3aByNpwk0kSbRZEqmZJpCU2gqTaVpNI1m0AyaRbMohVJoDs2heTSP5tN8WkALaBEtoiW0hJbSUkqlVFpGyyiN0mgFraBVtIrW0BpaR+toA22gTbSJttAW2kbbaDttp520k3bTbtpLe2kf7aP9tJ/SKZ0O0AFEOkiH6BAdpsN0hI7QUTpKx+gYHafjdIJO0Ck6RafpNJ2hM3SOztF5+oku0M90kTwl2Gw20V5ls9scNqfNZf86zm8L2IK2kC1sQ5vX5vtDTNba4raELWlLWWdL2zL2hr+JK9pKtrK91d5mq9jbbVVb0WaD/xrXtnfbOvYeW9fea2vZu/4Q17P32fr2IdvANrMNbQvb2LayTexDtqltZpvbFralbWU72MdsR/u47WSfsJ3tk38TL7Uf2HV2vd1gN9p99lN7zv5oj9pv7Hn7k+1t+9jB9iU7xL5sh9pX7DA7/I8xgB1r37Dj7Hg7wU60k+zkv4ln2Jl2lp1tU+w7do6d+zfxEvu+nW9T7QK70C6yi3+JM2pKtR/aZfYjm2aX2xV2pV1lV9s1du3/rnWl3Wy32K12r/3Ebrc77E67y+62e36JM9ax335m0+3n9oj92h60X9hD9pg9bL/6Jc5Y3zH7rT1uv7Mn7El7yn5vT9sf7Bl79pf1Z6z9e/uzvWi9BUZWrNlwwFk4KydwNk7kqzg75+CcnItjfDXn5ms4D1/LeTkf5+cCXJALcWEOmdgyc8RFuCjH+TouxtdzcS7BJbkUOy7NZfgGLss3cjm+icvzzVyBb+GKXIkr8618G1fh27kq38HV+E6uzjW4Jtfiu7g23811+B6uy/dyPb6P6/P93IAf4IbciBvzg9yEH+Km3Iybcwtuya24NT/MbfgRbsvtuD0/yh34Me7Ij3MnfoI785PchZ/irvw0d+NnuDs/yz34Oe7Jz3MvfoF7cx9O4r7cj1/k/jyAB/IgHswv8RB+mYfyKzyMh/MIfpVH8ms8il/n0TyGx/IbPI7H8wSeyJN4Mifzm+2m8Fs8ld/maTydZ/BMnsWzOYXf4Tk8l+fxuzyf3+MFvJAX8WJewu/z0oueU/lDXsYfcRov5xW8klfxal7Da3kdr+cNvJE38Wbewlt5G3/M23kH7+RdvJv38F7+hPfxp7yfP+N0/pwP8F/4IH/Bh/hLPsxf8RH+mo/yN3yMv+Xj/B2f4JN8ir/n0/wDn+GzfI5/5PP8E1/gn/kie4YIIxXpyERBlCXKGiVE2aLE6Kooe5QjyhnlimLR1VHu6JooT3RtlDfKF+WPCkQFo0JR4SiMKLIRR1FUJCoaxaPromLR9VHxqERUMioVuah0VCa6ISob3RiVi26Kykc3RxWiW6KKUaWocnRrdFtUJbo9qhrdEVWL7oyqRzWimlGt6K6odnR3VCe6J6ob3RuVi+6L6kf3Rw2iB6KGUaOocfRg1CR6KGoaNYuaRy2illGrqHX0cNQmeiRqG7WL2kePRh2ix6KO0eNRp+iJqHP05KX9JYJfr6Z/tT8p6hvp396Q3aMXxRfHl8Tfjy+NfxBPjX8YXxb/KJ4WXx5fEV8ZXxVfHV8TXxtfF18f3xDfGN8U3xzfEt8a975WVnCY8SAMxgUui8vqElw2l+iuctldDpfT5XIxd7XL7a5xedy1Lq/L5/K7Aq6gK+QKu9CRs45d5Iq4oi7urnPF3PWuuCvhSrpSzrnSroxr5Vq71q6Ne8S1de1ce/eoe9Q95h5zjyf8Vrjr4p5yXd3Trpt7xj3jnnU93HOup3ve9XIvuN6uj0tySa6f6+f6u/5uoBvoBrvBbogb4oa6oW6YG+ZGuBFupBvpRrlRbrQb7ca6sW6cG+cmuAlukpvkkl2ym+KmuKluqpvmprkZboab5Wa5FJfi5rg5bp6b5+a7+W6BW+AWuUVuiVvilrqlLtWlumVumUtzaW6FW+FWuVVujVvj1rl1boPb4Da5TW6L2+K2uW1uu9vudrqdbrfb7fa6vW6f2+f2u/0u3aW7A+6AO+gOukPuS3fYfeWOuK/dUfeNO+a+dcfdd+6EO+lOOa9Pux/cGXfWnXM/uvPuJ3fB/ewuOu+SY2/GpsTeik2NvR2bFpsemxGbGZsVmx1Lib0TmxObG5sXezc2PxfEFsQWxhYFEFsSez+2NPZBLDX2YWxZ7KNYWmx5bEVsZWxVbHXM+0LbI1/EF/Vxf50v5q/3xX0JX9KX8s6X9mX8Db6sv9GX8zf58v5mX8Hf4iv6Sr6yb+ab+xa+pW/lW/uHfRv/iG/r2/n2/lHfwT/mO/rHfSf/hO/sn/Rd/FO+q3/ad/PP+O7+2fd+67Lv5V/wvX0fn+T7+n7+Rd/fD/AD/SA/2L/kh/iX/VD/ih/mh/sR/lU/0r/mR/nX/Wg/xo/1b/hxfryf4Cf6SX6yT/Zv+in+LT/Vv+2n+el+hp/pZ/nZPsW/4+f4uX6ef9fP9+/5BX6hX+QX+yX+fb/Uf+BT/Yd+mf/Ip/nlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/12v8Pv9Lv8br/H7/Wf+H3+U7/ff+bT/ef+gP+LP+i/8If8l/6w/8of8V/7o/4bf8x/64/77/wJf9Kf8t/70/4Hf8af9ef8j/68/8lf8D/7i/I3a0IIIYQQ/xT9J/v7/p3/U79tGfoBQI4dBQ7/9Zyb8v46HqD2dY4BwBN9ujf6fWvUKCkp6bdj09pAUHQhAMQu5f/y/QO/xcuhPTwGnaAdlP279Q1QlX+57/uH82sI4jcDJAJk+z0n4/EoEf56/hv/wfzN3uc/m38hQPGil3IyTvR7fGn+cv9g/j0d/mT+bF8kA7T9LznZ4VJ8af4y8Ag8CZ3+cKQQQgghhBBCCPGrAep8jz97vs14Pi9oLuVkhUvxnz2f/4mql2MNQgghhBBCCCGE+D97+rmejz/cqVO7rpdl0BYALuuEl2eQ9T+jjP+AAQLAf0AZMvjPH1zp30xCCCGEEEKIy+3STf+VrkQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhMi8/v1vCFP/9MFXeo1CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfa/AgAA///mhlPZ") truncate(0x0, 0x3000000) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0xee00) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000000300)={[{@block_validity}, {@noinit_itable}, {@data_err_abort}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@dioread_lock}, {@nogrpid}, {@inlinecrypt}, {@norecovery}]}, 0x7, 0x577, &(0x7f0000000640)="$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") open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) fallocate(r5, 0x0, 0x0, 0x8800000) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000010000)="0358b660a7ec9b", 0x7}], 0x1, 0x5000, 0xa68, 0x69aa4dc63df2b560) 20m40.728902857s ago: executing program 35 (id=901): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x98, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xbe0, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xfffffe73, 0x1, {0x952, 0x3ff}}]}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7fff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfe, 0xfff}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x98}}, 0x4008010) 20m37.205743027s ago: executing program 36 (id=911): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0fc5:1227:fd', 0xc) 20m28.521080181s ago: executing program 37 (id=920): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1484a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x28f4f8, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}, {@uuid_null}, {@redirect_dir_on}, {@xino_auto}]}) 9m42.802214815s ago: executing program 9 (id=6867): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r1 = dup(r0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0x1010}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) 9m41.81273871s ago: executing program 9 (id=6872): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000b00)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x0, 0xcf, "efb2b82f19d4eda031bd1dd53cf93ecb76f2b318de9a138db8eed46903dd75f9f1ee6eafaf7aa5cdf011336ca662e5a7c00e340d93f82ba6db6c0872981b30", 0x1e}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b80)="886de7b0a7ccd493f17f75d64210fa9891bad6ba118fb50d9ab182be6b750a0df14321b1ce9aaae638972e823b622b6cb2e0a4093dce2e14a36d06bfe0e2e8588ea58f1171fdb63bd7d42eb43d25bf8332ae1d077805f8cd74ba0839e3464f791e4009d6d0f2a64f3dc496d1c60b5b44c15f1a3ee8c91c6a67a610d819d48fd95739a7391de04ffb01ae0132df", 0x8d}, {&(0x7f0000000c80)="d9bdf1d7e25a818f23b6a48d99a1d40173e670cd787da1dc355718582aeab2e9dade2e5ae7b590a5661457343c234ea52d70bb29c8d8fb515d101638d081b1e5681332bef4fff7bdea2a6028d4cd6c8f443d4151d9e640a23fe9477150931f9744d8da8431348f213d887d8e5a1104243834c3c6dab912d98e8ec24ccb078b38b3b8b244ba700b22433b8cb22df4182834d4b8e45c4b4e8ff79c4ce8a159044341e560e0636a865fff1ffaf67bd616", 0xaf}, {&(0x7f0000000d40)="28be3fe934cc4c97d32c5bde9ccd74e013ccc4b166255ae6b31046689e711f46000c1f096813fab480737a0b5528db7677ad0c4bbe9d7a2195b8bb92a61607e2dadbd051fc8d7c40dc030f3eeb4d8afaeb772d1e83ff52290ca70956b1d5c198a6fa8948330cd55f096d62452fffb60c46b4a9dc9c63d5ee61bbeaa63d53dafd8ead971882e98ed59655cefa3e58e59fd4fdb5782c0e7be652310e4c27d81c2c1058078db0acbf9364064ac65d7db2edf0cc7eb3", 0xb4}, {0x0}], 0x4, &(0x7f0000000e80)=[@mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x240}}], 0x90}, 0x6e0e9a619fbe4e26) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0xb5, &(0x7f0000000780), 0x0, 0x0, 0x0, &(0x7f0000000800), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r3}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000640)={'ip6tnl0\x00', @broadcast}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 9m41.626035465s ago: executing program 9 (id=6874): execve(0x0, 0x0, &(0x7f00000003c0)={[&(0x7f0000000380)='system.posix_acl_access\x00']}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x115) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m40.985842482s ago: executing program 9 (id=6880): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000d80)={0x0, [{0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xe0, 0x0}, {0x3, 0x0, 0x9, &(0x7f0000000600)}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x6, &(0x7f0000000800)}, {0x2, 0x290, 0xca, &(0x7f0000000f40)="cf61941b7078cb2decfe8eabbea3fdac56b56a8fa2f4578dbd314f4b9fada071ff0f9acec841e202961775cbd8f9bd6e91dcac336bfe414c284d405e9bcf1fcc677291456a1b94299ee40a2cea0b1b2aff99"}, {0x2, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x13f, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xffffffbc, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0xb8, 0x0, &(0x7f0000000d00)="cbfd14280e6bccbec96fbbe7e046658097abf1974f083a"}]}) 9m40.785394987s ago: executing program 9 (id=6884): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) tee(0xffffffffffffffff, r0, 0x1, 0xe) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 9m40.518235133s ago: executing program 9 (id=6887): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/drivers/serial/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='00:04\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='disable\n', 0x8) write(r1, &(0x7f0000000140)='set io 0-0\n', 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x6, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x4, 0xa, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x3, 0xfffffffe, 0x0, [{0x2, 0x4, 0x7, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x10, 0xc, '\x00', 0x5}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0x5, '\x00', 0xb}, {0xd7, 0xd, 0x9, '\x00', 0x6}, {0x0, 0x28, 0x5, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xd0, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x2, '\x00', 0xb}, {0xc7, 0x6, 0xa, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xc1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x5, 0x4, '\x00', 0x23}]}}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r7, &(0x7f0000000400)="8000289f181b0000", 0xfffffffffffffc5e, 0x50729a38da43edd7, &(0x7f0000000080)={0xa, 0x6f26, 0x80007, @empty, 0x6}, 0x1c) write(r1, &(0x7f0000000180)='activate\n', 0x9) 9m26.67814773s ago: executing program 38 (id=6997): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000ac0)={0x0, &(0x7f0000000140)=[@nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x4, 0x7a55}}, @in_dx={0x69, 0x20, {0x173c, 0xa}}, @wr_crn={0x67, 0x20, {0xa, 0x4}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @out_dx={0x6a, 0x28, {0x3624, 0x0, 0x3}}], 0xd8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 9m25.445869151s ago: executing program 39 (id=6887): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/drivers/serial/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='00:04\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='disable\n', 0x8) write(r1, &(0x7f0000000140)='set io 0-0\n', 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x6, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x4, 0xa, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x3, 0xfffffffe, 0x0, [{0x2, 0x4, 0x7, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x10, 0xc, '\x00', 0x5}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0x5, '\x00', 0xb}, {0xd7, 0xd, 0x9, '\x00', 0x6}, {0x0, 0x28, 0x5, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xd0, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x2, '\x00', 0xb}, {0xc7, 0x6, 0xa, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xc1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x5, 0x4, '\x00', 0x23}]}}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r7, &(0x7f0000000400)="8000289f181b0000", 0xfffffffffffffc5e, 0x50729a38da43edd7, &(0x7f0000000080)={0xa, 0x6f26, 0x80007, @empty, 0x6}, 0x1c) write(r1, &(0x7f0000000180)='activate\n', 0x9) 9m19.914251233s ago: executing program 6 (id=7047): setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) chdir(0x0) r0 = inotify_init() r1 = userfaultfd(0x801) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mlock2(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000405000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000000)=0x102) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 9m19.745526028s ago: executing program 6 (id=7048): r0 = creat(&(0x7f0000000540)='./file0\x00', 0xd7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000052000100"], 0x18}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 9m19.64418092s ago: executing program 6 (id=7049): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) 9m19.477002305s ago: executing program 6 (id=7050): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2125099, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x10010, 0x0) 9m19.337012099s ago: executing program 6 (id=7051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000002dc0)={0x1, [{0x3, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x4, 0x0, 0xf, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x65, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x4, 0x0, 0xa, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x48e27445, 0x0}, {0x3, 0x0, 0xf048, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x1, 0x0, 0x2, 0x0}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) 9m17.444129697s ago: executing program 6 (id=7061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000d80)={0x0, [{0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xe0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x8, &(0x7f0000000700)}, {0x2, 0x20, 0x6, &(0x7f0000000800)="821b941f"}, {0x2, 0x1e8, 0xca, &(0x7f0000000f40)="cf61941b7078cb2decfe8eabbea3fdac56b56a8fa2f4578dbd314f4b9fada071ff0f9acec841e202961775cbd8f9bd6e91dcac336bfe414c284d405e9b"}, {0x2, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x13f, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xffffffbc, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x0, &(0x7f0000000d00)}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m16.93118013s ago: executing program 40 (id=7061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000d80)={0x0, [{0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xe0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x8, &(0x7f0000000700)}, {0x2, 0x20, 0x6, &(0x7f0000000800)="821b941f"}, {0x2, 0x1e8, 0xca, &(0x7f0000000f40)="cf61941b7078cb2decfe8eabbea3fdac56b56a8fa2f4578dbd314f4b9fada071ff0f9acec841e202961775cbd8f9bd6e91dcac336bfe414c284d405e9b"}, {0x2, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x13f, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xffffffbc, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x0, &(0x7f0000000d00)}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m25.417159056s ago: executing program 4 (id=7532): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') r3 = socket$inet(0x2, 0x1, 0x0) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) listen(r3, 0x0) read$FUSE(r2, &(0x7f0000005dc0)={0x2020}, 0x2020) 8m25.177564272s ago: executing program 4 (id=7534): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x4) socket$netlink(0x10, 0x3, 0xa) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000000)=0x1001a, 0x4) io_uring_enter(r1, 0x2219, 0x5544, 0x14, 0x0, 0x0) 8m24.224780567s ago: executing program 4 (id=7540): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd02, &(0x7f0000000100)="0400") 8m23.988121312s ago: executing program 4 (id=7543): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x208}, {r0, 0x18c}], 0x2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x10010, 0x0) 8m23.030132717s ago: executing program 4 (id=7547): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x1402, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) acct(&(0x7f0000000100)='./file0/file0\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setxattr$security_evm(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xb, 0x60080800, 0x0, 0x4, 0x7, 0xa14, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0xb22f, {0x0, 0x1004, 0x2, 0x7, 0xd, 0x8, 0xfffffffd, 0x3, 0x0, 0x1000, 0x0, r2, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x0, 0x3, 0x100, 0x8, 0x104, 0x3, {0x3, 0xfffffffefffffffc, 0x5, 0x8, 0x6, 0x5, 0x10001, 0xd, 0x47, 0xc000, 0x9, r2, r3, 0xbd3, 0x9b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m22.669310266s ago: executing program 4 (id=7551): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd02, &(0x7f0000000100)="0400") 8m22.295325006s ago: executing program 41 (id=7551): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd02, &(0x7f0000000100)="0400") 7m29.106093355s ago: executing program 0 (id=7904): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) listen(r0, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000180)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)='\v', 0x1}], 0x1, 0x0, 0x0, 0x40048d5}, 0x8050) 7m28.705875975s ago: executing program 0 (id=7908): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x20000050) 7m28.50798167s ago: executing program 0 (id=7910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)) 7m27.223568073s ago: executing program 0 (id=7914): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f00000000c0)=[{r0, 0x18c}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x10010, 0x0) 7m26.291861157s ago: executing program 0 (id=7917): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) listen(r0, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000180)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)='\v', 0x1}], 0x1, &(0x7f0000000100), 0x0, 0x40048d5}, 0x8050) 7m26.072363183s ago: executing program 1 (id=7918): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0e, &(0x7f0000000000)) 7m25.905670177s ago: executing program 1 (id=7920): r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x201, 0x1036, 0xffffffffffffffff, 0x0) 7m25.538184496s ago: executing program 1 (id=7923): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 7m25.537375076s ago: executing program 0 (id=7931): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) 7m25.00043002s ago: executing program 42 (id=7931): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) 7m24.99210749s ago: executing program 1 (id=7926): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f00000000c0)=[{r0, 0x18c}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x10010, 0x0) 7m24.711284608s ago: executing program 1 (id=7928): r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x400) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 7m22.162570863s ago: executing program 1 (id=7934): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 7m21.320041475s ago: executing program 43 (id=7934): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 6m22.118161178s ago: executing program 5 (id=8118): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6m20.708755675s ago: executing program 5 (id=8120): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e0b06c900c77c8d"], 0xe) 6m20.430625392s ago: executing program 5 (id=8123): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000700)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x5, 0x3a, '](+\xe4I\xa3v\x98\xb0%b\xfb\xa5\x95\x04\x18\xf3\xc3E\xe6\n\tt\x90\x9bZ,\x9c\n8\xf4\x10O\xa7\xc5\x11\n\xb5\x1f\x93\xd1z\x1d\xb5al*\x15>\x90\xf5\xa8C\x1c\x8f\x813v.fj\xd2\x86\x94\xd9\x93\xa6\xb4\rE\x9c\xcb\x1c2\x0f\xf6\xfb\xf4\xd9Q\xa0\xfd\xa9so\xd2\x0f\x19\xab-\xe8\xc6\x81\xea\xffy\xb6\x99m\xdcm\x9f\xfff\xa3q|`\xcc\xf4^}\xb0H\xb9\xbfl\xf2^/\x01\xafZ\x8e\x0fj\xf1\xac\xe3-H\xca\xc7\x8a\xa9\xf7\x1b\x98\xa3y(\x1eb\n\xbc\x9b6\x1a\xc1\";\xd9}\x9d(\x9eWD9\x1b\xb2\xe7U\xee\x0f1&\xdeu9\xee,Mc\xf1Qj\xdd\x05\x83\xe5\xaa}+\x95\xa5R\xfc\x84\xc3\xb9\xf9\x8c', 0x3a, '\x11!', 0x3a, './file0', 0x3a, [0x0]}, 0xeb) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$OBJ_GET_MAP(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setgroups(0x0, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21cc46, &(0x7f0000000380)=ANY=[], 0x1, 0x1536, &(0x7f0000002c00)="$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") socket$inet(0x2, 0x1, 0x0) fsopen(0x0, 0x0) statx(r3, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x100, 0x8, &(0x7f0000000600)) getgroups(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r4, &(0x7f0000000000)=""/134, 0x86) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 6m18.14984569s ago: executing program 5 (id=8126): socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000180)={0xfffffff9, 0x4, 0xfb2c, 0x10005, 0x4, "008ef1ffa278887cb0baba0000000000000008"}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000020c0)={0x18, {"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", 0x1000}}, 0x1006) close(r1) 6m17.704938812s ago: executing program 5 (id=8128): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) 6m16.736949887s ago: executing program 5 (id=8130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 6m1.478787439s ago: executing program 44 (id=8130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 13.249493199s ago: executing program 2 (id=9273): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 13.21989009s ago: executing program 7 (id=9274): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000700)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x5, 0x3a, '](+\xe4I\xa3v\x98\xb0%b\xfb\xa5\x95\x04\x18\xf3\xc3E\xe6\n\tt\x90\x9bZ,\x9c\n8\xf4\x10O\xa7\xc5\x11\n\xb5\x1f\x93\xd1z\x1d\xb5al*\x15>\x90\xf5\xa8C\x1c\x8f\x813v.fj\xd2\x86\x94\xd9\x93\xa6\xb4\rE\x9c\xcb\x1c2\x0f\xf6\xfb\xf4\xd9Q\xa0\xfd\xa9so\xd2\x0f\x19\xab-\xe8\xc6\x81\xea\xffy\xb6\x99m\xdcm\x9f\xfff\xa3q|`\xcc\xf4^}\xb0H\xb9\xbfl\xf2^/\x01\xafZ\x8e\x0fj\xf1\xac\xe3-H\xca\xc7\x8a\xa9\xf7\x1b\x98\xa3y(\x1eb\n\xbc\x9b6\x1a\xc1\";\xd9}\x9d(\x9eWD9\x1b\xb2\xe7U\xee\x0f1&\xdeu9\xee,Mc\xf1Qj\xdd\x05\x83\xe5\xaa}+\x95\xa5R\xfc\x84\xc3\xb9\xf9\x8c', 0x3a, '\x11!', 0x3a, './file0', 0x3a, [0x0]}, 0xeb) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$OBJ_GET_MAP(0x11, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setgroups(0x0, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21cc46, &(0x7f0000000380)=ANY=[], 0x1, 0x1536, &(0x7f0000002c00)="$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") fsopen(0x0, 0x0) statx(r3, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x100, 0x8, &(0x7f0000000600)) getgroups(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r4, &(0x7f0000000000)=""/134, 0x86) 10.805897401s ago: executing program 7 (id=9277): r0 = socket$alg(0x26, 0x5, 0x0) signalfd4(r0, &(0x7f00000000c0)={[0x2]}, 0x8, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7ffc, 0x65}) socket(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r1, &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4810}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) write$binfmt_elf64(r4, 0x0, 0xfebe) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1ff, @empty, 0x2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001ec0)=""/4109, &(0x7f0000000000)=0x100d) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.580149297s ago: executing program 2 (id=9278): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.190258228s ago: executing program 3 (id=9280): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 9.928804884s ago: executing program 3 (id=9281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 8.890540471s ago: executing program 3 (id=9284): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x20) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0xfffffff9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) 7.514102137s ago: executing program 7 (id=9286): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) 7.298205822s ago: executing program 2 (id=9287): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='4\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1:1\x00', 0x4) write(r3, &(0x7f00000003c0)='1:2\x00', 0x4) write(0xffffffffffffffff, &(0x7f0000000480)='0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='3\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='active\x00', 0x7) 5.225998765s ago: executing program 8 (id=9289): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5.147067277s ago: executing program 2 (id=9290): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, 0x640b1}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.695788809s ago: executing program 8 (id=9291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) 3.998233187s ago: executing program 2 (id=9292): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c0009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.818434282s ago: executing program 3 (id=9293): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) inotify_init() syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x68, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0xa, "315dcd4542a9187f"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) 3.789711892s ago: executing program 8 (id=9294): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='file drivers/md/raid5.c +p', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='4', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='4096', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, &(0x7f0000000500)='1:2', 0x3) write(r5, &(0x7f0000000540)='1:3', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0', 0x1) r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r7, &(0x7f0000000640)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f00000007c0)='active', 0x6) 3.258621966s ago: executing program 7 (id=9295): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"ad65e3e7b9fdf8113c7f46729ea36a5f", 0x0, 0x0, {0x1}, {0x7fffffff, 0x3}, 0x8, [0x800, 0x0, 0x5, 0x821, 0x9, 0x9, 0x74d, 0x8, 0x3, 0x9, 0x4, 0x3ff, 0xfffffffffffffff7, 0xfffffffffffff7be, 0x9, 0x9]}) ioctl(0xffffffffffffffff, 0xc0184d08, &(0x7f0000000900)) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d219f9f86cc41c0ed8b279cd28575a6a528070679baf75e3a4f87987e5460c109d882afd2c2bfb760eaaae9b0710000", @ANYRES16=0x0], 0x1, 0x1a4, &(0x7f0000000700)="$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") r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) read(r0, &(0x7f0000000200)=""/201, 0xc9) 2.858569886s ago: executing program 8 (id=9296): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000700)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x5, 0x3a, '](+\xe4I\xa3v\x98\xb0%b\xfb\xa5\x95\x04\x18\xf3\xc3E\xe6\n\tt\x90\x9bZ,\x9c\n8\xf4\x10O\xa7\xc5\x11\n\xb5\x1f\x93\xd1z\x1d\xb5al*\x15>\x90\xf5\xa8C\x1c\x8f\x813v.fj\xd2\x86\x94\xd9\x93\xa6\xb4\rE\x9c\xcb\x1c2\x0f\xf6\xfb\xf4\xd9Q\xa0\xfd\xa9so\xd2\x0f\x19\xab-\xe8\xc6\x81\xea\xffy\xb6\x99m\xdcm\x9f\xfff\xa3q|`\xcc\xf4^}\xb0H\xb9\xbfl\xf2^/\x01\xafZ\x8e\x0fj\xf1\xac\xe3-H\xca\xc7\x8a\xa9\xf7\x1b\x98\xa3y(\x1eb\n\xbc\x9b6\x1a\xc1\";\xd9}\x9d(\x9eWD9\x1b\xb2\xe7U\xee\x0f1&\xdeu9\xee,Mc\xf1Qj\xdd\x05\x83\xe5\xaa}+\x95\xa5R\xfc\x84\xc3\xb9\xf9\x8c', 0x3a, '\x11!', 0x3a, './file0', 0x3a, [0x0]}, 0xeb) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setgroups(0x0, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21cc46, &(0x7f0000000380)=ANY=[], 0x1, 0x1536, &(0x7f0000002c00)="$eJzs3AucjtX2OPC19t7PGJLeJrkMe+/18CaXTZKEkuSSJEmS5JaQJDmSkBhySxqSkFyG5DKE5DIxadzv90tCkjRJEpJbsv+fifmro/M/5/zq5Px/s76fz/uZvWa/az9rz3ovz/vM8G3nIdUb1qhSn4jgD8ELXxIAIBYABgDANQAQAEDZuLJxGfPZJSb8sYOwP9fDyVe6AnYlcf+zNu5/1sb9z9q4/1kb9z9r4/5nbdz/rI37z1hWtmla/mv5lnVvfP0/K+P3//9F0kuO+XJNyeu7AMT8qync////4R/I5f7/rxX8K3fi/mdt3P+sKvZKF8D+C/DzPyvI9g9nuP9ZG/efsazs19eCu+Y7nx3+C65J/5U3iPwnfwfie174KV/5ff7D/TPGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3+B0/4SBQCZ4ytdF2OMMcYYY4wxxv48PtuVroAxxhhjjDHGGGP/eQgCJCgIIAayQSxkhxwgAGIy56+FOLgOcsP1kAfyQj7ID/FQAAqCBgMWCEIoBIUhCjdAEbgRikIxKA4lwEFJKAU3QWm4GcrALVAWboVycBuUhwpQEW6HO6AS3AmV4S6oAndDVagG1aEG3AM14V6oBfdBbbgf6sADUBcehHrwENSHh6EBPAIN4VFoBI9BY2gCTaEZNP8f5b8I3eEl6AE9IQF6QW94GfpAX+gH/WEAvAID4VUYBK9BIgyGIfA6DIU3YBi8CcNhBIyEt2AUvA2jYQyMhXGQBONhArwDE+FdmASTYQpMhWSYBtPhPZgBM2EWvA+z4QOYA3NhHsyHFPgQFsBCSIWPYBF8DGmwGJbAUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2AbbYQd8AjvhU9gFu2EPfAZ74fN/M//U3+V3QUBAgQIVKozBGIzFWMyBOTAn5sRcmAsjGME4jMPcmBvzYB7Mh/kwHuOxIBZEgwYJCQthIYxiFItgESyKRbE4FkeHDkthKSyNN2MZLINlsSyWw3JYHitgBZnxsKuElbAyVsYqWAWrYlWsjtXxHrwHe2EtrIW1sTbWwTqZl6ewPtbHBtgAG2JDbISNsDE2xqbYFJtjc2yBLbAltsTW2BrbYBtsi22xHbbD9tgeO2AH7IgdsRN2ws7YGbtgV+ya/mI2wJfwJeyJVUUv7I29sQ8mZuuH/bE/voID8VV8FV/DRByMQ/B1fB3fwGF4EoefH4EjcSRWEm/jaByDJMZhEibhBJyAE3EiTsLJOBmnYjJOw+k4HWfgTJyJ7+Ns/AA/wLk4F+djCqbgAlyIqZiKi/AUpuFiXIJLcRkux2W4ElfhSlyDa3ENrsf1uBE34mbcjFtxK27H7fgJKgD8FHfjbkzEvbgX9+E+3I/78QAewHRMx4N4EA/hITyMh/EIHsGjeAyP4zE8gSfwJJ7C03gaz+JZPIfPx3/d4JNiqxNBZFBCiRgRI2JFrMghcoicIqfIJXKJiIiIOBEncovcIo/II/KJfCJexIuCoqAwwggSYcYrhYiKqCgiioiioqgoLooLJ5woJUqJ0qK0KCPKiLLiVlFO3CbKiwqilbtd3C4qidausrhLVBFVRFVRTVQXNUQNUVPUFLVELVFb1BZ1RB1RVzwo6ole2A8fFhmdaSgGYyMxBBuLJkJefIVqIYZhS9FKtBZPihE4HNuKFq6deEa0F6Oxg/ibGIPPiU5iHHYWL4guoqvoJl4U3UVL10P0FJOwl+gtpmIf0Vf0E/3FDKwm3sfZ2auL10SiGCyGiNfFfHxDDBNXieFihBgp3hKjxNtitBgjxopxIkmMFxPEO2KieFdMEpPFFDFVJItpYrp4T8wQM8Us8b6YLT4Qc8RcMU/MFyniQ7FALBSp4iOxSHws0gDEErFULBPLxQqxUqwSq8UasVasE+vFBrFRbBKbxRaxVWwT28UO8YnYKT4Vu8RusUd8JvaKz8U+8YXYL74UB8RXIl18LQ6Kb8Qh8a04LL4TR8T34qg4Jo6LH8QJ8aM4KU6J0+KMOCt+EufEz+K88AIkSiGlVDKQMTKbjJXZZQ55lcwpg8zXfxknr5O55fUyj8wr88n8Ml4WkAWllkZaSTKUhWRhGZU3yCLyRllUFpPFZQnpZEkJ6iZZWt4sy8hbZFl5qywnb5PlZQVZUd4u75CV5J0SIheOUVVWk9VlDXmPTIB7ZS15n6wt75d15AOyrnxQ1pMPyfryYdlAPiIbykdlI/mYbCybyKaymWwuH5ct5BOypWwlW8snZRv5lGwrn5bt5DOyvfQXHyLPyU7yedlZviC7yK6ym/xZnpde9pA9JfQC2Vu+LPvIvrKf7C8HyFfkQPmqHCRfk4lysBwiX5dD5RtymHxTDpcj5Ej5lhwl35aj5Rg5Vo6TSXK8nCDfkRPlu3KSnCynyKkyWU6T/S6uNEvKf5r/zu/kD/rl6BvlJrlZbpFb5Ta5Xe6Qn8idcqfcJXfJPXKP3Cv3yn1yn9wv98sD8oBMl+nyoDwoD8lD8rA8LI/II/KoPCbPyB/kCfmjPClPyVPyjDwrz8pzF38GoFAJJZVSgYpR2VSsyq5yqKtUTnW1yqWuURF1rYpT16nc6nqVR+VV+VR+Fa8KqIJKK6OsIhWqQqqwiqob8OIDRhVXJZRTJVUpddO/k6+KqBtVUVXsN/mZ9SX8g/qaq+aqhWqhWqqWqrVqrdqoNqqtaqvaqXaqvWqvOqgOqqPqqDqpTqqz6qy6qC6qm+qmuqvuqofqoRJUguqtXlZ9VF/VT/VXA9QrImMPg9QglagS1RA1RA1VQ9UwNUwNV8PVSDVSjVKj1Gg1Wo1VY1WSSlIT1AQ1UU1Uk9QkNUVNUckqWU1X09UMNUPNUrPUbDVbzVFz1Dw1T6WoFLVALVCpKlUtUotUmlqsFqulaqlarparlWqlWq1Wq7VqrVqv1qs0tUltUlvUFrVNbVM71A61U+1Uu9QutUftUXvVXrVP7VP71X51QB1Q6SpdHVQH1SF1SB1Wh9URdUQdVUfVcXVcnVAn1El1Up1Wp9VZdVadU+fUeXU+47QvEIEIVKCCmCAmiA1igxxBjiBnkDPIFeQKIkEkiAvigtzB9UGeIG+QL8gfxAcFgoKBDkxgA3Gx6dHghqBIcGNQNCgWFA9KBC4oGZQKbgpKBzcHZYJbgrLBrUG54LagfFAhqBjcHtwRVAruDCoHdwVVgruDqkG1oHpQI7gnqBncG9QK7gtqB/cHdYIHgrrBg0G94KGgfvBw0CB4JGgYPBo0Ch4LGgdNgqZBs6D5n7q+9yfzPuF66J46QffSvfXLuo/uq/vp/nqAfkUP1K/qQfo1nagH6yH6dT1Uv6GH6Tf1cD1Cj9Rv6VH6bT1aj9Fj9TidpMfrCfodPVG/qyfpyXqKnqqT9TQ9Xb+nZ+iZepZ+X8/WH+g5eq6ep+frFP2hXqAX6lT9kV6kP9ZperFeopfqZXq5XqFX6lV6tV6j1+p1er3eoDfqTXqz3qK36m16u96hP9E79ad6l96t9+jP9F79ud6nv9D79Zf6gP5Kp+uv9UH9jT6kv9WH9Xf6iP5eH9XHdBn9gz6hf9Qn9Sl9Wp/RZ/VP+pz+WZ/XPuPkPuPt3SijTIyJMbEm1uQwOUxOk9PkMrlMxERMnIkzuU1uk8fkMflMPhNv4k1BU9BkIEOmkClkoiZqipgipqgpaoqb4sYZZ0qZUqa0KW3KmDKmrClryplyprwpbyqaiuYOc4e509xp7jJ3mbvN3aaaqWZqmBqmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpuGuhqaRaWQam8amqWlqmpvmpoVpYVqalqa1aW3amDamrWlr2pl2pr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WESTILpbXqbPqaP6Wf6mQFmgBloBppBZpBJNIlmiBlihpqhZpgZZoabEWZkxomqeduMNmPMWDPOJJkkM8FMMBPNRDPJTDJTzBSTbJLNdDPdzDAzzCwzy8w2s80cM8fMM/NMikkxC8wCk2pSzSKzyKSZNLPELDHLzDKzwqwwq8wqs8asMetgndlgNphNZpPZYraYbWab2WF2mJ1mp9lldpk9Zo/Za/aafWaf2W/2mwPmgEk36eagOWgOmUPmsDlsjpgj5qg5ao6b4+aEOWFOmpPmtDltzpq8F98vvYm12W0Oe5XNaa+2uew19u/jfDa/jbcFbEGrbR6b9zexsdYWtcVscVvCOlvSlrI3XRaXtxVsRXu7vcNWsnfaypfFNe29tpa9z9a299sa9p7fxHXsA7aufdTWQwSwTWwD28w2tI/aRvYx29g2sU1tM9vGPmXb2qdtO/uMbW+fvSxeYBfaVXa1XWPX2l12tz1tz9hD9lt71v5ke9iedoB9xQ60r9pB9jWbaAdfFo+0b9lR9m072o6xY+24y+IpdqpNttPsdPuenWFnXhan2A/tbJtq59i5dp6d/0ucUVOq/cgush/bNBvAErvULrPL7Qq78v/WutSutxvsRrvTfmq32K12m91ud2SeCNvddo/9zO61n9uD9hu7335pD9jDNt1+/Uucsb/D9jt7xH5vj9pj9rj9wZ6wP6rM7Iy9/2B/tuett0BIQJIUBRRD2SiWslMOuopy0tWUi66hCF1LcXQd5abrKQ/lpXyUn+KpABUkTYYsEYVUiApTlG6gzPKKUwlyVJJK0U1Umm6mMnQLlaVbqRzdRuWpAlWk2+kOqkR3UmW6i6rQ3VSVqlF1qkH3UE26l2rRfVSb7qc69ADVpQepHj1E9elhakCPUEN6lBrRY9SYmlBTakbN6XFqQU9QS2pFrelJakNPUVt6mtrRM9SenqUO9DfqSM9RJ3qeOtML1IW6Ujd6kbrTS9SDelIC9aLe9DL1ob7Uj/rTAHqFBtKrNIheo0QaTEPodRpKb9AwepOG0wgaSW/RKHqbRtMYGkvjKInG0wR6hybSuzSJJtMUmkrJNI2m03s0g2bSLHqfZtMHNIfm0jyaTyn0IS2ghZRKH9Ei+pjSaDEtoaW0jJbTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttMO+oR20qe0i3bTHvqM9tLntI++oP30JR2gryidvqaD9A0dom/pMH3ne9L3dJSO0XH6gU7Qj3SSTtFpOkNn6Sc6Rz/TefIEIYYilKEKgzAmzBbGhtnDHOFVYc7w6jBXeE0YCa8N48Lrwtzh9WGeMG+YL8wfxocFwoKhDk1oQwrDsFBYOIyGN4RFwhvDomGxsHhYInRhybBUeFNYOrw5LBPeEpYNbw3LhbeF5cMK4aP33x7eEVYK7wwrh3eFVcK7w6phtbB6WCO8J6wZ3hvWCu8La4f3h2XCB8K64YNhvfChsH74cNggfCRsGD4aNgofCxuHTcKmYbOwefh42CJ8ImwZtgpbh1eFbcKnwrbh02G78JmwffjsL/MPLMycf/Ky+YSwV9g7fDl8OfT+PjkvOj+aEv0wuiC6MJoa/Si6KPpxNC26OLokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujHqfY1s4NAJJ51ygYtx2Vysy+5yuKtcTne1y+WucRF3rYtz17nc7nqXx+V1+Vx+F+8KuIJOO+OsIxe6Qq6wi7obXBF3oyvqirniroRzrqQr5Zq55q65a+GecC1dK9faPemedE+5p9zT7mn3jGvvnnUd3N9cR/ec6+Sed8+7F1wX19V1cy+67m58rgvPyQTX2/V2fVwf18/1cwPcADfQDXSD3CCX6BLdEDfEDXVD3TA3zA13w91IN9KNcqPcaDfajXVjXZJLchPcBDfRTXST3CQ3xU1xyS7ZTXfT3Qw3w1WaeeEoc9wcN8/NcykuxS1wGeeMqW6RW+TSXJpb4pa4ZW6ZW+FWuFVulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb5a+5sKjb6/a5fW6/2+8OuK9cuvvaHXTfuEPuW3fYfeeOuO/dUXfMHXc/uBPuR3fSnXKn3Rl31v3kzrmf3XnnXVJkfGRC5J3IxMi7kUmRyZEpkamR5Mi0yPTIe5EZkZmRWZH3I7MjH0TmROZG5kXmR1IiH0YWRBZGUiMfRRZFPo6kRRZHlkSWRpZFlke8L7Al9IV8YR/1N/gi/kZf1BfzxX0J73xJX8rf5EtfqDvN+1t9OX+bL+8r+Ir+Md/YN/FNfTPf3D/uW/gnfEvfyrf2T/o2/inf1j/t2/lnfHv/rO/g/+Y7+ud8J/+87+xf8F18V9/Nv+i7+5d8D9/TJ/hevrd/2ffxfX0/398P8K/4gf5VP8i/5hP9YD/Ev+6H+jf8MP+mH+5H+JExb/lRmR+RYZxP8uP9BP+On+jf9ZP8ZD/FT/XJfpqf7t/zM/xMP8u/72f7D/wcP9fP8/N9iv/QL/ALfar/yC/yH/s0vzjzorFf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+E/8Tv9p36X3+33+M/8Xv+53+e/8Pv9l/6A/8qn+6/9Qf+NP+S/9Yf9d/6I/94f9cf8cf+DP+F/9Cf9KX/an/Fn/U/+nP/Zn+d/s8YYY4wx9i8Zf2kofjtz4XJ+r9/JEb+6c28AuHpr/vRfz2ecUa7Lc2HcV8THZnx9pmfnhzNvVasmJCRcvG+ahKDwXIDM3wRl+OVPDy7Gi6E1PAXtoBWU/t36+4quZ+mfrB+9FSDHr3IyCsqML63/BQAmXLbfvuLxJ0cuKBeejvt/rD8XoGjhSznZ4VK8GFr/cn2lFZT5B/XnbfFP6s/+ZRJAy1/l5IRL8aX6S8ET8Cy0+809GWOMMcYYY4yxC/qKih0zP39m/sXn730+j1eXcrLBpfiffT5njDHGGGOMMcbYlfdc125PP96uXauO//6g8v8o618eNIL/1Mo8+N2B9wCZ31EA8AcXBMgYyL9yF5v/kmMlXnzq/P3UsjM+gP+OVv4Zgyv8wsQYY4wxxhj701066f/t99WVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuC/or/TuxK75ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v5PAAAA//8unPrs") fsopen(0x0, 0x0) statx(r3, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x100, 0x8, &(0x7f0000000600)) getgroups(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r4, &(0x7f0000000000)=""/134, 0x86) 1.614256569s ago: executing program 7 (id=9297): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)=ANY=[]) 1.229544498s ago: executing program 7 (id=9298): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='4\x00', 0x2) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1:1\x00', 0x4) write(r3, &(0x7f00000003c0)='1:2\x00', 0x4) write(0xffffffffffffffff, &(0x7f0000000480)='0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='3\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='active\x00', 0x7) 1.180333989s ago: executing program 3 (id=9299): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 728.881731ms ago: executing program 3 (id=9300): r0 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000007c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0xfe, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@multicast1, 0xfffffffc}, {@multicast1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x400, 0x0}}) 666.202992ms ago: executing program 2 (id=9301): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7946gNRHEAfjYYyD8FRelzlXRwjBwhZcqIA+QSHCAFuUK6VJyBdDlChCPsCQu7FKwY26vV90nGeGT/eIOgmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0u9qs/zx9cO3W3P29bV+RcTD1jy9AQAAAC7ZVZtl82beXr9K7W9S07t0XUREeXHkXtejmJxljlJOdXf/99P7q3s1/IxoEg6fMU3Hy4j4mI6/b7v+FgAAAOD52q7Wi3a03r7Mhy6IPrWTNuXrT5nyioio5n8ypZWHvPc5kibp9z2OLzni0sRWzDKFtVNu41xpV2n+7sdZu9nJqWhP5cXHjkVm6zsAANCj0dmp31EIAAAAffo8dAHkdt3yXBH/lzKPS4HTs+dfPCYNAAAAeIqKoQsAAAAAOteM/3va/6+2/x8AAAAMo93/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7tqs1yu1ovbs3Z17fJ0xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjH/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9pAXEEdEMQAokBFnq9lpZuiAEUMfAnIEXptYRe+dFmoFWFuIUNZe6CYEQICRS2/g+dWylL2DLcECRmkM92zvkhcUBkX5LPR3p+Xzsnv++zpShfP+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI3fncZJtunkcVwce7xzfyXrn+zrMw/XNxezlsVRnUkfDy9Xd6Juc4kAAABwoo2qO0lZ34cQttKNpayPO5P6Py0/k9X83z+bx2U9v7/uL/uy9s/ab79uv7g7UCcfJzvp9dXh4MLBvFpHPtNj4rl/+Hl+YaL82UsyuSHxB6MXxunkekbfPnr0XnsSnqkjWwDgvzhf9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfxKDxdxlEIYbE1jTNPdu6vHNY/XN9cLNuVBw/Ww9fTc2anSEMI11eHgwu1zma+3bl77+bycDi4XX/wSgihqdHfKaZ/86MZPhxCI9dHcERBXNzsecnneAQN/lICAOBESouW1fVb6cZSdixaCOGvH/bW/69X4jBj/b/98ZXH1bGq9X+/thnOv97arc97d+7ee3P11vKNwY3Bp29d7L/dv3T18uWrvcmzkp4nJgAAAPw/7aJV6/944eD6/7lKHGas/7/4rv9VdaxE/X+o6aJf05kAAACcbs+/+ucf0SHHo3Y7fLm8tna7n2939y/m2wZS/dfOFK1a/ycLTWcFAAAA1GE8ivas/1+rxGHG9f9nfnzp5+o5kxDC2WL9//zKZ8Nr9U1nrtXx78RNzxEAAIBmnS1adf0/nbz/H+++8hCHEN54LY+LrwGcqf5P3v/mp+pY1ff/L9U3xbkUd/PrMem7IbS6TWcEAADASfZU0bJi//d0Y+mTX8592Pb+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/g4AAP//MY062g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x20) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0xfffffff9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) 563.164615ms ago: executing program 8 (id=9302): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 0s ago: executing program 8 (id=9303): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): 3949][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1283.449864][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 1283.479659][T28547] em28xx 3-1:0.0: Binding DVB extension [ 1283.551926][ T5818] usb 3-1: USB disconnect, device number 91 [ 1283.575292][ T5818] em28xx 3-1:0.0: Disconnecting em28xx [ 1283.732331][T28547] em28xx 3-1:0.0: Registering input extension [ 1283.764123][ T5818] em28xx 3-1:0.0: Closing input extension [ 1283.805613][ T5818] em28xx 3-1:0.0: Freeing device [ 1283.812752][T32041] loop3: detected capacity change from 0 to 4096 [ 1283.837481][T32041] EXT4-fs: inline encryption not supported [ 1283.885410][T32041] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1283.912953][T32041] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1283.960299][T32041] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0002] [ 1283.994276][T32041] System zones: 0-5 [ 1284.088115][T32041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.244761][T32041] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.8460: bg 0: block 200: padding at end of block bitmap is not set [ 1284.331550][T32041] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1284.373653][T32041] fs-verity (loop3, inode 13): ext4_end_enable_verity() failed with err -28 [ 1284.507743][T29551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1284.808043][T32066] fuse: Bad value for 'rootmode' [ 1284.818977][T32067] jffs2: notice: (32067) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1284.998201][T32072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8464'. [ 1285.188845][T32075] loop3: detected capacity change from 0 to 512 [ 1285.313421][T32075] EXT4-fs: Ignoring removed oldalloc option [ 1285.361344][T32075] EXT4-fs (loop3): 1 truncate cleaned up [ 1285.389544][T32075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1285.503969][T28547] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1285.693915][T28547] usb 3-1: Using ep0 maxpacket: 16 [ 1285.716893][T28547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1285.761041][T28547] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1285.780597][T28547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.814530][T28547] usb 3-1: Product: syz [ 1285.819020][T28547] usb 3-1: Manufacturer: syz [ 1285.837261][T28547] usb 3-1: SerialNumber: syz [ 1285.865192][T28547] usb 3-1: config 0 descriptor?? [ 1285.884265][T28547] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1285.905657][T28547] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1285.954628][T29551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.966525][T32074] loop7: detected capacity change from 0 to 32768 [ 1286.191189][T32074] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1286.451570][T32074] XFS (loop7): Ending clean mount [ 1287.255515][T28547] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1287.274825][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805d9f0000: rx timeout, send abort [ 1287.526206][T28547] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1287.564189][T28547] em28xx 3-1:0.0: board has no eeprom [ 1287.774967][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805d9f3400: rx timeout, send abort [ 1287.819089][T32132] loop8: detected capacity change from 0 to 128 [ 1287.893372][T32132] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1287.947717][T28721] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1287.974027][T32132] hpfs: filesystem error: improperly stopped [ 1287.980745][T32132] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1288.014290][T32132] hpfs: You really don't want any checks? You are crazy... [ 1288.023209][T32132] hpfs: hpfs_map_sector(): read error [ 1288.028848][T32132] hpfs: code page support is disabled [ 1288.038578][T32132] hpfs: hpfs_map_4sectors(): unaligned read [ 1288.051369][T32132] hpfs: hpfs_map_4sectors(): unaligned read [ 1288.058314][T32132] hpfs: filesystem error: unable to find root dir [ 1288.114439][T28547] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1288.122778][T28547] em28xx 3-1:0.0: dvb set to bulk mode. [ 1288.198324][ T5838] em28xx 3-1:0.0: Binding DVB extension [ 1288.286267][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805d9f3400: abort rx timeout. Force session deactivation [ 1288.565880][T28547] usb 3-1: USB disconnect, device number 92 [ 1288.725105][T28547] em28xx 3-1:0.0: Disconnecting em28xx [ 1288.880964][T32139] jffs2: notice: (32139) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1289.014327][ T5838] em28xx 3-1:0.0: Registering input extension [ 1289.075337][T28547] em28xx 3-1:0.0: Closing input extension [ 1289.126421][T32143] loop2: detected capacity change from 0 to 256 [ 1289.149250][T28547] em28xx 3-1:0.0: Freeing device [ 1289.737318][T32154] loop3: detected capacity change from 0 to 128 [ 1289.938104][T32161] hpfs: hpfs_map_4sectors(): unaligned read [ 1290.150245][T32165] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[29551] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[32165] [ 1290.863961][T32159] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.004036][ T5838] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1291.966299][ T5838] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1291.994145][ T5838] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1292.015590][ T5838] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1292.034260][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1292.042840][ T5838] usb 3-1: Product: syz [ 1292.067313][ T5838] usb 3-1: Manufacturer: syz [ 1292.072852][ T5838] usb 3-1: SerialNumber: syz [ 1292.086387][T32182] jffs2: notice: (32182) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1292.122403][ T5838] usb 3-1: config 0 descriptor?? [ 1292.134253][T26360] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1292.142423][ T5838] usb 3-1: selecting invalid altsetting 0 [ 1292.352458][T26360] usb 8-1: Using ep0 maxpacket: 16 [ 1292.372784][T26360] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1292.415193][T26360] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1292.426419][ T789] usb 3-1: USB disconnect, device number 93 [ 1292.430985][ C0] usb 3-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 1292.444010][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1292.457016][T26360] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.464564][T32168] usb 3-1: cannot submit urb 0, error -19: no device [ 1292.499021][T26360] usb 8-1: Product: syz [ 1292.521673][T26360] usb 8-1: Manufacturer: syz [ 1292.541034][T26360] usb 8-1: SerialNumber: syz [ 1292.569681][T26360] usb 8-1: config 0 descriptor?? [ 1292.603628][T26360] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1292.637384][T26360] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1292.984144][T32197] loop3: detected capacity change from 0 to 256 [ 1293.015403][T32197] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1294.283155][T32213] loop8: detected capacity change from 0 to 128 [ 1294.712053][T32216] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[30704] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[32216] [ 1295.447945][T26360] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1295.536758][T32224] jffs2: notice: (32224) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1295.623852][T32227] loop3: detected capacity change from 0 to 512 [ 1295.656193][T26360] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1295.794160][T32227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1295.865603][T26360] em28xx 8-1:0.0: board has no eeprom [ 1296.345048][T26360] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1296.371101][T32232] loop7: detected capacity change from 0 to 128 [ 1296.435011][T26360] em28xx 8-1:0.0: dvb set to bulk mode. [ 1296.448727][ T5881] em28xx 8-1:0.0: Binding DVB extension [ 1296.468121][T32232] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1296.524002][T32232] hpfs: filesystem error: improperly stopped [ 1296.531920][T32232] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1296.554746][T32232] hpfs: You really don't want any checks? You are crazy... [ 1296.562720][T32232] hpfs: hpfs_map_sector(): read error [ 1296.577021][T32232] hpfs: code page support is disabled [ 1296.599703][T26360] usb 8-1: USB disconnect, device number 26 [ 1296.608019][T32232] hpfs: hpfs_map_4sectors(): unaligned read [ 1296.618257][T32232] hpfs: hpfs_map_4sectors(): unaligned read [ 1296.643068][T32232] hpfs: filesystem error: unable to find root dir [ 1296.665761][T29551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.673152][T26360] em28xx 8-1:0.0: Disconnecting em28xx [ 1296.739529][ T5881] em28xx 8-1:0.0: Registering input extension [ 1296.773118][T26360] em28xx 8-1:0.0: Closing input extension [ 1296.885000][T26360] em28xx 8-1:0.0: Freeing device [ 1297.094377][T32241] hpfs: hpfs_map_4sectors(): unaligned read [ 1297.339196][T32243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8499'. [ 1297.615426][T32219] loop2: detected capacity change from 0 to 32768 [ 1297.654079][T32219] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.8495 (32219) [ 1297.782290][T32219] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1297.842683][T32219] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1297.897689][T32219] BTRFS info (device loop2): using free space tree [ 1298.309332][T32219] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1298.367106][T32219] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1298.633354][T32219] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1298.687475][T32219] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1298.700514][T32219] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1298.804771][T32219] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1298.853143][T32219] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1299.112172][T32219] BTRFS error (device loop2): open_ctree failed: -12 [ 1299.163954][ T9] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1299.603564][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 1299.614214][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1299.629162][ T9] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1299.639164][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.663004][ T9] usb 4-1: Product: syz [ 1299.674005][ T9] usb 4-1: Manufacturer: syz [ 1299.679808][ T9] usb 4-1: SerialNumber: syz [ 1299.752034][T32285] loop7: detected capacity change from 0 to 256 [ 1299.806435][T32285] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1300.159519][T29911] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by udevd (29911) [ 1300.260485][ T9] oti6858 4-1:1.0: oti6858 converter detected [ 1300.333280][ T9] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 1301.310025][ T789] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1301.397618][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.427217][T32294] loop8: detected capacity change from 0 to 512 [ 1301.517548][ T789] usb 3-1: Using ep0 maxpacket: 16 [ 1301.564289][T32294] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1301.663486][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1301.923967][ T789] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1301.926082][ T5815] usb 4-1: USB disconnect, device number 69 [ 1301.954480][ T5815] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1301.963596][ T5815] oti6858 4-1:1.0: device disconnected [ 1301.987557][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.026761][T30704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.044142][ T789] usb 3-1: Product: syz [ 1302.075987][ T789] usb 3-1: Manufacturer: syz [ 1302.105867][ T789] usb 3-1: SerialNumber: syz [ 1302.165299][ T789] usb 3-1: config 0 descriptor?? [ 1302.196498][ T789] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1302.415493][ T789] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1303.184399][ T789] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1303.248435][T32309] loop8: detected capacity change from 0 to 1024 [ 1303.264871][T32309] EXT4-fs: Ignoring removed orlov option [ 1304.976067][ T789] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1304.980283][T32313] jffs2: notice: (32313) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1304.997189][ T789] em28xx 3-1:0.0: board has no eeprom [ 1305.062037][T32309] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1305.103917][ T789] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1305.967563][ T789] em28xx 3-1:0.0: dvb set to bulk mode. [ 1305.974242][ T8809] em28xx 3-1:0.0: Binding DVB extension [ 1305.996265][ T789] usb 3-1: USB disconnect, device number 94 [ 1306.003456][ T789] em28xx 3-1:0.0: Disconnecting em28xx [ 1306.382771][T32331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8516'. [ 1306.475059][T30704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1306.515214][ T8809] em28xx 3-1:0.0: Registering input extension [ 1306.531755][ T789] em28xx 3-1:0.0: Closing input extension [ 1306.741817][ T789] em28xx 3-1:0.0: Freeing device [ 1308.054059][ T5815] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1308.153988][ T9] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1308.993908][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1309.004384][ T5815] usb 4-1: not running at top speed; connect to a high speed hub [ 1309.016501][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1309.028926][ T5815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1309.066619][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1309.077459][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.090798][ T9] usb 3-1: Product: syz [ 1309.096282][ T5815] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1309.109316][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.320951][ T9] usb 3-1: Manufacturer: syz [ 1309.326865][ T9] usb 3-1: SerialNumber: syz [ 1309.332908][ T5815] usb 4-1: Product: syz [ 1309.337404][ T5815] usb 4-1: Manufacturer: syz [ 1309.342758][ T5815] usb 4-1: SerialNumber: syz [ 1309.348659][ T9] usb 3-1: config 0 descriptor?? [ 1309.358776][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1309.368618][ T9] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1309.387769][ T5815] oti6858 4-1:1.0: oti6858 converter detected [ 1309.487544][T32372] loop8: detected capacity change from 0 to 256 [ 1309.656951][ T5815] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 1309.948576][T32372] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1310.395980][T32373] loop7: detected capacity change from 0 to 128 [ 1310.405980][T32373] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1310.470030][T32373] hpfs: filesystem error: improperly stopped [ 1310.508350][ T5815] usb 4-1: USB disconnect, device number 70 [ 1310.528593][T32373] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1310.598618][ T5815] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1310.629721][T32373] hpfs: You really don't want any checks? You are crazy... [ 1310.684757][ T5815] oti6858 4-1:1.0: device disconnected [ 1310.692101][T32373] hpfs: hpfs_map_sector(): read error [ 1310.733372][T32373] hpfs: code page support is disabled [ 1310.785075][T32373] hpfs: hpfs_map_4sectors(): unaligned read [ 1310.847027][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1310.871886][T32373] hpfs: hpfs_map_4sectors(): unaligned read [ 1310.920216][T32373] hpfs: filesystem error: unable to find root dir [ 1311.351136][T32381] hpfs: hpfs_map_4sectors(): unaligned read [ 1311.604126][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1311.669935][ T9] em28xx 3-1:0.0: board has no eeprom [ 1311.891884][T32383] loop8: detected capacity change from 0 to 512 [ 1311.921336][T32383] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1311.952021][T32390] binder: BINDER_SET_CONTEXT_MGR already set [ 1311.972152][T32390] binder: 32389:32390 ioctl 4018620d 200000000040 returned -16 [ 1312.005618][T30704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.022446][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1312.067012][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 1312.098582][ T5838] em28xx 3-1:0.0: Binding DVB extension [ 1312.157055][ T9] usb 3-1: USB disconnect, device number 95 [ 1312.195227][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 1312.310258][ T5838] em28xx 3-1:0.0: Registering input extension [ 1312.320763][ T9] em28xx 3-1:0.0: Closing input extension [ 1312.344162][ T9] em28xx 3-1:0.0: Freeing device [ 1312.425313][T32406] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8529'. [ 1314.058345][T32431] loop3: detected capacity change from 0 to 256 [ 1314.294136][T32431] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1314.696030][T32432] jffs2: notice: (32432) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1315.465782][T32442] binder: BINDER_SET_CONTEXT_MGR already set [ 1315.472024][T32442] binder: 32441:32442 ioctl 4018620d 200000000040 returned -16 [ 1315.489045][T32437] loop7: detected capacity change from 0 to 512 [ 1315.516535][T32437] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1315.747803][T28721] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.212861][T32477] netlink: 'syz.8.8544': attribute type 1 has an invalid length. [ 1316.224835][ T789] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1316.439631][ T789] usb 8-1: Using ep0 maxpacket: 16 [ 1316.477103][ T789] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1316.521239][ T789] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1316.573536][ T789] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.593082][ T789] usb 8-1: Product: syz [ 1316.598845][ T789] usb 8-1: Manufacturer: syz [ 1316.614028][ T789] usb 8-1: SerialNumber: syz [ 1316.654846][ T789] usb 8-1: config 0 descriptor?? [ 1316.679320][T32489] loop3: detected capacity change from 0 to 256 [ 1316.700770][ T789] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1316.779481][ T789] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1317.319871][ T789] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1317.914480][ T789] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1318.011797][T32506] loop2: detected capacity change from 0 to 256 [ 1318.078503][T32506] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1318.586493][T32507] loop3: detected capacity change from 0 to 512 [ 1318.662341][T32507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1318.683773][ T5838] page_pool_release_retry() stalled pool shutdown 1 inflight 482 sec [ 1319.403968][ T789] em28xx 8-1:0.0: board has no eeprom [ 1319.626429][ T789] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1319.683999][ T789] em28xx 8-1:0.0: dvb set to bulk mode. [ 1319.695414][ T23] em28xx 8-1:0.0: Binding DVB extension [ 1319.702011][T32513] binder: 32512:32513 ioctl c0306201 0 returned -14 [ 1319.715382][T29551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.767561][ T789] usb 8-1: USB disconnect, device number 27 [ 1319.782824][T32513] binder: BINDER_SET_CONTEXT_MGR already set [ 1319.804933][ T789] em28xx 8-1:0.0: Disconnecting em28xx [ 1319.834841][T32513] binder: 32512:32513 ioctl 4018620d 200000000040 returned -16 [ 1319.939396][ T23] em28xx 8-1:0.0: Registering input extension [ 1319.999466][ T789] em28xx 8-1:0.0: Closing input extension [ 1320.090660][ T789] em28xx 8-1:0.0: Freeing device [ 1320.314616][ T5838] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1320.429149][T32538] loop8: detected capacity change from 0 to 256 [ 1320.518887][T32538] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1320.534074][ T8809] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1320.537334][ T5838] usb 4-1: not running at top speed; connect to a high speed hub [ 1320.601965][ T5838] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1320.665981][ T5838] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1320.760876][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.774249][ T8809] usb 3-1: Using ep0 maxpacket: 32 [ 1320.792452][ T8809] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1320.821701][ T5838] usb 4-1: Product: syz [ 1320.827757][ T8809] usb 3-1: config 0 has no interface number 0 [ 1320.831865][ T5838] usb 4-1: Manufacturer: syz [ 1320.863920][ T5838] usb 4-1: SerialNumber: syz [ 1320.869391][ T8809] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1320.897019][ T5838] oti6858 4-1:1.0: oti6858 converter detected [ 1320.926175][ T5838] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 1320.933482][ T8809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.968322][ T8809] usb 3-1: Product: syz [ 1320.979731][ T8809] usb 3-1: Manufacturer: syz [ 1320.997030][ T8809] usb 3-1: SerialNumber: syz [ 1321.027431][ T8809] usb 3-1: config 0 descriptor?? [ 1321.080429][ T8809] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1321.137643][ T8809] usb 3-1: selecting invalid altsetting 1 [ 1321.145981][ T8809] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1321.160405][ T8809] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1321.165531][T32551] jffs2: notice: (32551) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1321.181271][ T8809] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1321.239344][ T8809] usb 3-1: media controller created [ 1321.329582][ T8809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1321.414322][ T8809] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1321.440238][ T8809] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1321.463578][ T28] audit: type=1800 audit(1786510699.186:1093): pid=32538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8558" name="file1" dev="loop8" ino=1048996 res=0 errno=0 [ 1321.508770][ T8809] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1321.553980][T32559] loop7: detected capacity change from 0 to 128 [ 1321.576281][ T8809] usb 3-1: USB disconnect, device number 96 [ 1321.948815][T32563] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28721] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[32563] [ 1322.706367][ T5838] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1322.891725][T32578] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1322.921200][ T5838] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1322.946712][ T5838] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1322.958638][ T5838] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1322.967141][ T23] usb 4-1: USB disconnect, device number 71 [ 1323.004650][ T5838] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1323.009165][ T23] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1323.045754][ T5838] usb 9-1: Product: syz [ 1323.050071][ T5838] usb 9-1: Manufacturer: syz [ 1323.076371][ T23] oti6858 4-1:1.0: device disconnected [ 1323.078372][ T5838] usb 9-1: SerialNumber: syz [ 1323.134653][ T5838] usb 9-1: config 0 descriptor?? [ 1323.165216][ T5838] usb 9-1: selecting invalid altsetting 0 [ 1323.476850][ T5838] usb 9-1: USB disconnect, device number 20 [ 1323.490093][T32565] usb 9-1: cannot submit urb 0, error -19: no device [ 1323.828966][T32614] loop2: detected capacity change from 0 to 128 [ 1324.380602][T32618] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28097] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[32618] [ 1324.964928][T32625] binder: 32624:32625 ioctl c0306201 0 returned -14 [ 1325.174191][ T23] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1326.445948][T32645] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1326.702686][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 1326.768917][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1326.878341][ T23] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1326.911958][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.971400][ T23] usb 4-1: Product: syz [ 1327.072495][T32650] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8581'. [ 1327.123503][T32655] loop2: detected capacity change from 0 to 128 [ 1327.181949][ T23] usb 4-1: Manufacturer: syz [ 1327.187862][ T23] usb 4-1: SerialNumber: syz [ 1327.214861][ T23] oti6858 4-1:1.0: oti6858 converter detected [ 1327.236225][ T23] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 1327.636361][T32661] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28097] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[32661] [ 1328.350292][T32669] loop7: detected capacity change from 0 to 2048 [ 1328.409203][T32669] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1328.451097][T32669] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1328.484053][T32669] UDF-fs: Scanning with blocksize 512 failed [ 1328.587032][T32669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1328.675602][ T28] audit: type=1800 audit(1786510706.406:1094): pid=32669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8584" name="file1" dev="loop7" ino=838 res=0 errno=0 [ 1329.505792][T32689] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1329.632324][T32101] usb 4-1: USB disconnect, device number 72 [ 1330.081673][T32101] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1330.098781][T32101] oti6858 4-1:1.0: device disconnected [ 1330.161758][T32692] loop7: detected capacity change from 0 to 128 [ 1330.817739][T32697] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28721] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[32697] [ 1331.775325][T32701] loop7: detected capacity change from 0 to 40427 [ 1331.804743][T32701] F2FS-fs (loop7): invalid crc value [ 1331.838610][T32701] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1332.002895][T32701] F2FS-fs (loop7): Start checkpoint disabled! [ 1332.091889][T32701] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1332.535073][T29667] kworker/u4:4: attempt to access beyond end of device [ 1332.535073][T29667] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1332.568511][T29667] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1332.576022][T29667] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1334.212518][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 1335.304165][ T5838] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1335.508791][ T5838] usb 8-1: not running at top speed; connect to a high speed hub [ 1335.528535][ T5838] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1335.546350][ T5838] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1335.568080][ T5838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.583979][ T5838] usb 8-1: Product: syz [ 1335.588736][ T5838] usb 8-1: Manufacturer: syz [ 1335.595238][ T5838] usb 8-1: SerialNumber: syz [ 1335.624350][ T5838] oti6858 8-1:1.0: oti6858 converter detected [ 1335.633737][ T5838] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 1336.132085][T32686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8591'. [ 1336.396249][T32723] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1336.416644][T32721] jffs2: notice: (32721) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1336.436329][T32726] binder: BINDER_SET_CONTEXT_MGR already set [ 1336.455644][T32726] binder: 32724:32726 ioctl 4018620d 200000000040 returned -16 [ 1336.927617][T32745] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1337.187734][T32749] loop2: detected capacity change from 0 to 256 [ 1337.367069][T32749] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1338.002165][ T9] usb 8-1: USB disconnect, device number 28 [ 1338.150588][T32754] loop3: detected capacity change from 0 to 128 [ 1338.165300][ T9] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1338.220060][T32754] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1338.314896][ T9] oti6858 8-1:1.0: device disconnected [ 1338.358585][T32754] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1338.499761][T32754] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1339.903907][T29551] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1340.502532][ T324] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1340.846933][ T340] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1341.134122][ T789] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1341.351238][ T354] loop7: detected capacity change from 0 to 256 [ 1341.417578][ T354] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1343.118321][ T789] usb 9-1: not running at top speed; connect to a high speed hub [ 1343.127605][ T789] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1343.160318][ T789] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1343.169666][ T789] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.178629][ T789] usb 9-1: Product: syz [ 1343.183015][ T789] usb 9-1: Manufacturer: syz [ 1343.189547][ T789] usb 9-1: SerialNumber: syz [ 1343.200675][ T789] oti6858 9-1:1.0: oti6858 converter detected [ 1343.211028][ T789] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 1343.259131][ T364] loop7: detected capacity change from 0 to 2048 [ 1343.298103][ T364] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1343.311559][ T364] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1343.323690][ T364] UDF-fs: Scanning with blocksize 512 failed [ 1343.335642][ T364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1344.019538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.171052][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.858890][ T789] usb 9-1: USB disconnect, device number 21 [ 1344.902504][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.915166][ T789] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1344.933558][ T789] oti6858 9-1:1.0: device disconnected [ 1345.020457][ C0] vkms_vblank_simulate: vblank timer overrun [ 1345.078931][ C0] vkms_vblank_simulate: vblank timer overrun [ 1345.141714][ C0] vkms_vblank_simulate: vblank timer overrun [ 1345.202861][ C0] vkms_vblank_simulate: vblank timer overrun [ 1345.706939][ C0] vkms_vblank_simulate: vblank timer overrun [ 1345.742255][ C0] vkms_vblank_simulate: vblank timer overrun [ 1345.772298][ C0] vkms_vblank_simulate: vblank timer overrun [ 1345.819756][ C0] vkms_vblank_simulate: vblank timer overrun [ 1345.920204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1346.039308][ C0] vkms_vblank_simulate: vblank timer overrun [ 1346.486620][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.423035][ T402] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1350.824230][T32101] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 1351.259462][T32101] usb 9-1: not running at top speed; connect to a high speed hub [ 1351.303394][ T8002] hsr_slave_0: left promiscuous mode [ 1351.313264][T32101] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1351.325162][ T8002] hsr_slave_1: left promiscuous mode [ 1351.350576][T32101] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1351.368232][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1351.371059][T32101] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.396198][T32101] usb 9-1: Product: syz [ 1351.406470][T32101] usb 9-1: Manufacturer: syz [ 1351.413901][ T8002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.416609][T32101] usb 9-1: SerialNumber: syz [ 1351.444726][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.463212][T32101] oti6858 9-1:1.0: oti6858 converter detected [ 1351.464871][ T8002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.503362][T32101] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 1351.735702][ T8002] veth1_macvtap: left promiscuous mode [ 1351.764003][ T8002] veth0_macvtap: left promiscuous mode [ 1351.770396][ T8002] veth1_vlan: left promiscuous mode [ 1351.791006][ T8002] veth0_vlan: left promiscuous mode [ 1353.304893][ T9] usb 9-1: USB disconnect, device number 22 [ 1353.434343][ T461] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1353.906100][ T9] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1353.916191][ T9] oti6858 9-1:1.0: device disconnected [ 1354.052016][ T467] binder: 464:467 ioctl 4018620d 0 returned -22 [ 1356.789616][ T8002] team0 (unregistering): Port device team_slave_1 removed [ 1356.897103][ T8002] team0 (unregistering): Port device team_slave_0 removed [ 1357.115611][ T8002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.352316][ T8002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.467576][ T497] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1358.623728][ T500] binder: 499:500 ioctl 4018620d 0 returned -22 [ 1358.790364][T32101] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1359.078695][ T8002] bond0 (unregistering): Released all slaves [ 1359.116755][T32101] usb 9-1: not running at top speed; connect to a high speed hub [ 1359.187745][T32101] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1359.463752][T32101] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1359.525848][T32101] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.619391][T32101] usb 9-1: Product: syz [ 1359.683657][T32101] usb 9-1: Manufacturer: syz [ 1359.688800][T32101] usb 9-1: SerialNumber: syz [ 1359.743306][T32101] oti6858 9-1:1.0: oti6858 converter detected [ 1359.762117][T32101] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 1360.098212][ T516] loop7: detected capacity change from 0 to 128 [ 1360.548123][ T530] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28721] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[530] [ 1360.579138][ T530] netlink: 260 bytes leftover after parsing attributes in process `syz.7.8656'. [ 1360.588919][ T530] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8656'. [ 1360.598815][ T530] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8656'. [ 1361.039649][ T523] loop2: detected capacity change from 0 to 512 [ 1361.138480][ T532] Bluetooth: hci0: unsupported parameter 255 [ 1361.162084][ T532] Bluetooth: hci0: unsupported parameter 255 [ 1361.341989][ T523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.351966][ T538] jffs2: notice: (538) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1361.404505][ T5838] usb 9-1: USB disconnect, device number 23 [ 1361.458620][ T540] binder: 539:540 ioctl 4018620d 0 returned -22 [ 1361.518007][ T5838] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1361.548549][ T5838] oti6858 9-1:1.0: device disconnected [ 1361.587027][T28097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.839565][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.710989][ T593] loop2: detected capacity change from 0 to 16 [ 1363.742950][ T593] erofs: (device loop2): mounted with root inode @ nid 36. [ 1363.804049][ T5838] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1364.015381][ T5838] usb 9-1: not running at top speed; connect to a high speed hub [ 1364.047010][ T599] loop2: detected capacity change from 0 to 512 [ 1364.056618][ T5838] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1364.072683][ T5838] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1364.082997][ T5838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.187147][ T5838] usb 9-1: Product: syz [ 1364.270725][ T599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1364.340739][ T5838] usb 9-1: Manufacturer: syz [ 1364.345928][ T5838] usb 9-1: SerialNumber: syz [ 1364.355373][ T5838] oti6858 9-1:1.0: oti6858 converter detected [ 1364.363261][ T5838] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 1364.480542][T28097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.740876][ T608] binder: 607:608 ioctl c0306201 0 returned -14 [ 1366.066322][ T628] loop3: detected capacity change from 0 to 1024 [ 1366.074702][ T628] EXT4-fs: Ignoring removed bh option [ 1366.714176][ T8809] usb 9-1: USB disconnect, device number 24 [ 1366.726153][ T628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1366.817854][ T8809] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1366.884559][ T8809] oti6858 9-1:1.0: device disconnected [ 1366.966452][ T642] binder: 640:642 ioctl c0306201 0 returned -14 [ 1366.997612][ T645] loop7: detected capacity change from 0 to 512 [ 1367.315587][ T651] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1368.089893][T29551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.168704][ T645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1368.177702][ T655] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1369.108910][T28721] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.914170][T32101] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1370.151561][T32101] usb 9-1: not running at top speed; connect to a high speed hub [ 1370.301827][T32101] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1370.352109][ T686] binder: 685:686 ioctl c0306201 0 returned -14 [ 1370.425895][T32101] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1370.456056][T32101] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.512378][T32101] usb 9-1: Product: syz [ 1370.550792][T32101] usb 9-1: Manufacturer: syz [ 1370.584025][T32101] usb 9-1: SerialNumber: syz [ 1370.627704][T32101] oti6858 9-1:1.0: oti6858 converter detected [ 1370.677636][T32101] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 1371.821056][ T711] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1372.532061][ T5881] usb 9-1: USB disconnect, device number 25 [ 1372.764773][ T5881] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1372.793186][ T5881] oti6858 9-1:1.0: device disconnected [ 1373.853024][ T742] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1373.972886][ T748] loop7: detected capacity change from 0 to 128 [ 1374.386327][ T756] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28721] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[756] [ 1375.257524][ T768] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1375.428313][ T771] fuse: Bad value for 'fd' [ 1375.826026][ T767] jffs2: notice: (767) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1376.180691][ T786] loop8: detected capacity change from 0 to 512 [ 1376.384130][ T786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1376.531313][ T799] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1376.577144][ T798] loop7: detected capacity change from 0 to 128 [ 1377.052067][ T803] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28721] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[803] [ 1377.532690][T30704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.546133][ T814] binder: BINDER_SET_CONTEXT_MGR already set [ 1378.552370][ T814] binder: 812:814 ioctl 4018620d 200000000040 returned -16 [ 1378.895637][ T820] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1379.485524][ T824] jffs2: notice: (824) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1380.034296][ T5838] page_pool_release_retry() stalled pool shutdown 1 inflight 543 sec [ 1380.167265][ T850] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1380.307647][ T853] loop2: detected capacity change from 0 to 512 [ 1380.475427][ T853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1381.480857][T28097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.652868][ T872] jffs2: notice: (872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1383.036532][ T902] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1383.399745][ T910] loop2: detected capacity change from 0 to 128 [ 1383.459461][ T910] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1383.527191][ T910] hpfs: filesystem error: improperly stopped [ 1383.565892][ T910] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1383.623576][ T910] hpfs: You really don't want any checks? You are crazy... [ 1383.683179][ T910] hpfs: hpfs_map_sector(): read error [ 1383.710433][ T910] hpfs: code page support is disabled [ 1383.738891][ T910] hpfs: hpfs_map_4sectors(): unaligned read [ 1383.764982][ T910] hpfs: hpfs_map_4sectors(): unaligned read [ 1383.790667][ T910] hpfs: filesystem error: unable to find root dir [ 1384.312137][ T922] hpfs: hpfs_map_4sectors(): unaligned read [ 1385.325241][ T888] Set syz1 is full, maxelem 65536 reached [ 1386.189691][ T958] jffs2: notice: (958) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1386.333927][ T5838] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 1386.432470][ T967] loop2: detected capacity change from 0 to 128 [ 1386.455579][ T967] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1386.481936][ T967] hpfs: filesystem error: improperly stopped [ 1386.489070][ T967] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1386.510179][ T967] hpfs: You really don't want any checks? You are crazy... [ 1386.514116][ T5838] usb 8-1: device descriptor read/64, error -71 [ 1386.545577][ T967] hpfs: hpfs_map_sector(): read error [ 1386.563264][ T967] hpfs: code page support is disabled [ 1386.610525][ T967] hpfs: hpfs_map_4sectors(): unaligned read [ 1386.644045][ T967] hpfs: hpfs_map_4sectors(): unaligned read [ 1386.650137][ T967] hpfs: filesystem error: unable to find root dir [ 1386.834289][ T5838] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 1386.912940][ T978] jffs2: notice: (978) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1387.006344][ T982] hpfs: hpfs_map_4sectors(): unaligned read [ 1387.638684][ T5838] usb 8-1: device descriptor read/64, error -71 [ 1387.767626][ T5838] usb usb8-port1: attempt power cycle [ 1387.833475][ T1001] binder: 1000:1001 ioctl c0306201 0 returned -14 [ 1388.083023][ T1012] jffs2: notice: (1012) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1388.193901][ T5838] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 1388.252905][ T5838] usb 8-1: device descriptor read/8, error -71 [ 1388.721818][ T1029] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1389.156568][ T1034] loop8: detected capacity change from 0 to 128 [ 1389.321420][ T1034] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1389.396517][ T1034] hpfs: filesystem error: improperly stopped [ 1389.403175][ T1034] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1389.432978][ T1034] hpfs: You really don't want any checks? You are crazy... [ 1389.446623][ T1047] loop3: detected capacity change from 0 to 128 [ 1389.454376][ T1034] hpfs: hpfs_map_sector(): read error [ 1389.459799][ T1034] hpfs: code page support is disabled [ 1389.489980][ T1034] hpfs: hpfs_map_4sectors(): unaligned read [ 1389.502877][ T1034] hpfs: hpfs_map_4sectors(): unaligned read [ 1389.515549][ T1054] binder: 1052:1054 ioctl c0306201 0 returned -14 [ 1389.543245][ T1034] hpfs: filesystem error: unable to find root dir [ 1389.859842][ T1063] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[29551] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[1063] [ 1389.892787][ T1063] netlink: 260 bytes leftover after parsing attributes in process `syz.3.8778'. [ 1389.903461][ T1063] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8778'. [ 1389.915285][ T1063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8778'. [ 1390.700493][ T1070] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8785'. [ 1391.305016][ T1085] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1391.914482][ T1087] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1392.114562][ T1087] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1392.564401][ T1093] binder: 1090:1093 ioctl c0306201 0 returned -14 [ 1392.857747][ T1102] loop7: detected capacity change from 0 to 128 [ 1393.213738][ T1111] netlink: 260 bytes leftover after parsing attributes in process `syz.7.8791'. [ 1393.225172][ T1111] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8791'. [ 1393.236255][ T1111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8791'. [ 1394.371115][ T1132] syzkaller0: entered promiscuous mode [ 1394.393173][ T1132] syzkaller0: entered allmulticast mode [ 1394.429944][ T1135] tipc: Enabled bearer , priority 0 [ 1394.496391][ T1131] tipc: Resetting bearer [ 1394.667933][ T1131] tipc: Disabling bearer [ 1394.954293][ T1148] loop2: detected capacity change from 0 to 128 [ 1395.314635][ T1158] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8805'. [ 1395.324181][ T1158] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8805'. [ 1395.334089][ T1158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8805'. [ 1395.931599][ T1120] loop7: detected capacity change from 0 to 32768 [ 1396.089008][ T1120] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1396.310427][ T1120] XFS (loop7): Ending clean mount [ 1396.333523][ T1140] loop8: detected capacity change from 0 to 32768 [ 1396.419343][ T1140] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1396.553668][ T1188] jffs2: notice: (1188) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1396.565247][ T1140] XFS (loop8): Ending clean mount [ 1396.631528][T28721] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1396.832597][ T28] audit: type=1800 audit(1786510774.556:1095): pid=1140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8802" name="file1" dev="loop8" ino=4422 res=0 errno=0 [ 1396.891083][ T1140] XFS (loop8): User initiated shutdown received. [ 1396.956908][ T1140] XFS (loop8): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 1397.031101][ T1140] XFS (loop8): Please unmount the filesystem and rectify the problem(s) [ 1397.046645][ T1200] loop3: detected capacity change from 0 to 128 [ 1397.479410][T30704] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1397.683392][ T1200] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1398.320626][ T1200] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1398.403599][ T1200] ext2 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1398.907186][ T1231] loop8: detected capacity change from 0 to 128 [ 1399.351641][ T1239] netlink: 260 bytes leftover after parsing attributes in process `syz.8.8815'. [ 1399.361552][ T1239] netlink: 104 bytes leftover after parsing attributes in process `syz.8.8815'. [ 1399.371043][ T1239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8815'. [ 1399.824924][ T1240] siw: device registration error -23 [ 1400.147702][ T28] audit: type=1800 audit(1786510777.876:1096): pid=1242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8822" name="zoned" dev="configfs" ino=163418 res=0 errno=0 [ 1400.149907][ T1244] loop7: detected capacity change from 0 to 16 [ 1400.194329][ T1244] erofs: (device loop7): mounted with root inode @ nid 36. [ 1400.273692][ T28] audit: type=1800 audit(1786510777.906:1097): pid=1242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8822" name="memory_backed" dev="configfs" ino=163419 res=0 errno=0 [ 1400.385563][ T28] audit: type=1800 audit(1786510777.906:1098): pid=1242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8822" name="zone_nr_conv" dev="configfs" ino=164197 res=0 errno=0 [ 1400.434338][T29551] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1400.511570][ T28] audit: type=1800 audit(1786510777.906:1099): pid=1242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8822" name="power" dev="configfs" ino=164198 res=0 errno=0 [ 1400.915955][ T1264] syz.8.8827: attempt to access beyond end of device [ 1400.915955][ T1264] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1400.931608][ T1264] efs: cannot read volume header [ 1401.696992][ T1270] loop2: detected capacity change from 0 to 128 [ 1401.967139][ T1276] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28097] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[1276] [ 1401.986036][ T1276] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8829'. [ 1401.995583][ T1276] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8829'. [ 1402.004712][ T1276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8829'. [ 1403.545529][ T28] audit: type=1800 audit(1786510781.266:1100): pid=1289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8833" name="zoned" dev="configfs" ino=163470 res=0 errno=0 [ 1403.585890][ T1292] loop7: detected capacity change from 0 to 16 [ 1403.693038][ T1292] erofs: (device loop7): mounted with root inode @ nid 36. [ 1403.710811][ T1298] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8834'. [ 1403.720166][ T28] audit: type=1800 audit(1786510781.266:1101): pid=1289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8833" name="memory_backed" dev="configfs" ino=163471 res=0 errno=0 [ 1403.901895][ T28] audit: type=1800 audit(1786510781.266:1102): pid=1289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8833" name="zone_nr_conv" dev="configfs" ino=163472 res=0 errno=0 [ 1403.940073][ T28] audit: type=1800 audit(1786510781.266:1103): pid=1289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8833" name="power" dev="configfs" ino=163473 res=0 errno=0 [ 1404.960501][ T1316] loop2: detected capacity change from 0 to 128 [ 1405.470237][ T1328] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28097] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[1328] [ 1405.489451][ T1328] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8841'. [ 1405.498809][ T1328] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8841'. [ 1405.508023][ T1328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8841'. [ 1406.125888][ T28] audit: type=1800 audit(1786510783.856:1104): pid=1337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8845" name="zoned" dev="configfs" ino=164297 res=0 errno=0 [ 1406.193409][ T28] audit: type=1800 audit(1786510783.866:1105): pid=1337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8845" name="memory_backed" dev="configfs" ino=164298 res=0 errno=0 [ 1406.383064][ T28] audit: type=1800 audit(1786510783.866:1106): pid=1337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8845" name="zone_nr_conv" dev="configfs" ino=164299 res=0 errno=0 [ 1406.819112][ T28] audit: type=1800 audit(1786510783.866:1107): pid=1337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8845" name="power" dev="configfs" ino=164302 res=0 errno=0 [ 1407.336861][ T1363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8848'. [ 1408.334954][ T1381] loop2: detected capacity change from 0 to 128 [ 1408.758173][ T1386] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28097] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[1386] [ 1408.777552][ T1386] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8854'. [ 1408.787078][ T1386] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8854'. [ 1408.797026][ T1386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8854'. [ 1409.287613][ T1369] loop7: detected capacity change from 0 to 32768 [ 1409.320924][ T5818] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1409.354672][ T1369] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1409.372323][ T1369] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1409.422602][ T1369] BTRFS info (device loop7): using free space tree [ 1409.684317][ T5818] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.736231][ T1369] BTRFS info (device loop7): enabling ssd optimizations [ 1409.833307][ T1369] BTRFS info (device loop7): auto enabling async discard [ 1410.399007][ T5818] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 1410.421977][ T5818] usb 9-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 1410.439021][ T5818] usb 9-1: Product: syz [ 1410.443442][ T5818] usb 9-1: SerialNumber: syz [ 1410.453611][ T5818] usb 9-1: config 0 descriptor?? [ 1410.485726][ T5818] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1410.556750][ T5818] usb 9-1: Detected SIO [ 1410.575740][ T5818] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1410.653915][ T28] audit: type=1800 audit(1786510788.376:1108): pid=1369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8851" name="file1" dev="loop7" ino=271 res=0 errno=0 [ 1410.862198][ T5818] usb 9-1: USB disconnect, device number 26 [ 1410.922331][ T5818] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1410.987657][ T5818] ftdi_sio 9-1:0.0: device disconnected [ 1411.315805][T28721] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1411.628290][ T1410] loop3: detected capacity change from 0 to 32768 [ 1411.764846][ T1436] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8861'. [ 1411.913313][ T1410] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1412.449537][ T1410] XFS (loop3): Ending clean mount [ 1412.731018][ T1410] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1412.877352][ T1459] loop8: detected capacity change from 0 to 128 [ 1413.215039][ T1461] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[30704] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[1461] [ 1413.235867][ T1461] netlink: 260 bytes leftover after parsing attributes in process `syz.8.8865'. [ 1413.245320][ T1461] netlink: 104 bytes leftover after parsing attributes in process `syz.8.8865'. [ 1413.255885][ T1461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8865'. [ 1414.391789][ T1489] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1414.991587][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8873'. [ 1415.176447][ T1495] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1415.189097][ T1495] qnx6: wrong signature (magic) in superblock #1. [ 1415.196368][ T1495] qnx6: unable to read the first superblock [ 1416.773442][ T1518] loop7: detected capacity change from 0 to 128 [ 1417.071042][ T1519] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28721] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[1519] [ 1417.091197][ T1519] netlink: 260 bytes leftover after parsing attributes in process `syz.7.8879'. [ 1417.102308][ T1519] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8879'. [ 1417.111712][ T1519] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8879'. [ 1418.395235][ T1544] loop7: detected capacity change from 0 to 512 [ 1418.455511][ T1544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1418.509764][ T1550] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8885'. [ 1418.857757][T28721] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.515970][ T1588] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1421.649038][ T1602] loop3: detected capacity change from 0 to 512 [ 1422.080672][ T1602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.347355][T29551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.006264][ T1637] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1424.310651][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.941322][ T1665] loop8: detected capacity change from 0 to 512 [ 1425.013585][ T1665] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1425.252272][T30704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.914054][ T1690] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1427.092385][ T1701] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1428.925335][ T1717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8921'. [ 1429.756455][ T1740] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1430.744044][ T1743] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1432.134525][ T1773] loop7: detected capacity change from 0 to 512 [ 1432.309068][ T1773] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.8931: ea_inode with extended attributes [ 1432.357360][ T1773] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.8931: error while reading EA inode 11 err=-117 [ 1432.397679][ T1773] EXT4-fs (loop7): 1 orphan inode deleted [ 1432.409542][ T1773] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1432.807684][T28721] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.044170][T23099] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1433.204373][T28062] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1433.244011][T23099] usb 9-1: Using ep0 maxpacket: 8 [ 1433.262503][T23099] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1433.285139][T23099] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1433.315361][T23099] usb 9-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping [ 1433.336136][T23099] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1433.353944][T23099] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1433.373544][T23099] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.402989][T23099] usbtmc 9-1:16.0: bulk endpoints not found [ 1433.416615][T28062] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.461405][T28062] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.490028][T28062] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1433.500132][T28062] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1433.522480][T28062] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1433.531783][T28062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.974088][T28062] usbhid 3-1:1.0: can't add hid device: -71 [ 1434.001982][T28062] usbhid: probe of 3-1:1.0 failed with error -71 [ 1434.022541][T28062] usb 3-1: USB disconnect, device number 97 [ 1434.205693][ T1816] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8938'. [ 1435.744290][T32101] usb 9-1: USB disconnect, device number 27 [ 1435.775780][ T1861] binder: 1860:1861 ioctl c0306201 0 returned -14 [ 1435.974803][ T1870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8947'. [ 1437.480426][ T1887] loop8: detected capacity change from 0 to 128 [ 1437.546127][ T1887] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1437.616844][ T1887] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1437.672653][ T1887] ext2 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1438.375600][ T1907] md: could not open device unknown-block(1,0). [ 1438.399418][ T1907] md: could not open device unknown-block(1,1). [ 1438.423542][ T1907] md: could not open device unknown-block(1,2). [ 1438.443016][ T1907] md: could not open device unknown-block(1,3). [ 1438.954205][ T1922] binder: 1921:1922 ioctl c0306201 0 returned -14 [ 1439.532702][ T1927] loop2: detected capacity change from 0 to 512 [ 1439.728311][ T1927] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.8957: ea_inode with extended attributes [ 1439.751762][ T1927] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.8957: error while reading EA inode 11 err=-117 [ 1439.781768][ T1927] EXT4-fs (loop2): 1 orphan inode deleted [ 1439.793986][ T1927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1440.245317][T28097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.449696][T32101] page_pool_release_retry() stalled pool shutdown 1 inflight 603 sec [ 1440.488436][ T1939] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1440.834686][ T1940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8959'. [ 1441.317077][T30704] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1441.464847][ T1947] fuse: Bad value for 'fd' [ 1441.634518][ T1953] md: could not open device unknown-block(1,0). [ 1441.678768][ T1953] md: could not open device unknown-block(1,1). [ 1441.710909][ T1953] md: could not open device unknown-block(1,2). [ 1441.726484][ T1953] md: could not open device unknown-block(1,3). [ 1442.394938][ T1972] xt_connbytes: Forcing CT accounting to be enabled [ 1442.402441][ T1972] Cannot find del_set index 1 as target [ 1443.488140][ T1985] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1444.197082][ T1989] fuse: Bad value for 'fd' [ 1444.462432][ T1998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8971'. [ 1444.786263][ T2004] md: could not open device unknown-block(1,0). [ 1444.806020][ T2004] md: could not open device unknown-block(1,1). [ 1444.819513][ T2004] md: could not open device unknown-block(1,2). [ 1444.854390][ T2004] md: could not open device unknown-block(1,3). [ 1445.217998][ T2004] md/raid:md0: not clean -- starting background reconstruction [ 1445.248809][ T2004] md/raid:md0: device ram3 operational as raid disk 3 [ 1445.267373][ T2004] md/raid:md0: device ram0 operational as raid disk 0 [ 1445.365424][ T2004] md/raid:md0: not enough operational devices (2/4 failed) [ 1445.521626][ T2004] md/raid:md0: failed to run raid set. [ 1445.534443][ T2004] md: pers->run() failed ... [ 1446.382308][ T2047] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1446.401127][ T2046] fuse: Bad value for 'fd' [ 1446.424698][ T2048] md: could not open device unknown-block(1,1). [ 1446.436028][ T2048] md: could not open device unknown-block(1,2). [ 1447.192522][ T2065] md: could not open device unknown-block(1,0). [ 1447.264442][ T2065] md: could not open device unknown-block(1,1). [ 1447.271841][ T2065] md: could not open device unknown-block(1,2). [ 1447.279674][ T2065] md: could not open device unknown-block(1,3). [ 1447.369948][ T2065] md/raid:md0: not clean -- starting background reconstruction [ 1447.398597][ T2065] md/raid:md0: device ram3 operational as raid disk 3 [ 1447.425306][ T2065] md/raid:md0: device ram0 operational as raid disk 0 [ 1447.559517][ T2065] md/raid:md0: not enough operational devices (2/4 failed) [ 1447.799243][ T2065] md/raid:md0: failed to run raid set. [ 1447.824186][ T2065] md: pers->run() failed ... [ 1448.365608][ T2094] md: could not open device unknown-block(1,1). [ 1448.384651][ T2094] md: could not open device unknown-block(1,2). [ 1448.512559][ T2094] md/raid:md0: not clean -- starting background reconstruction [ 1448.539519][ T2094] md/raid:md0: device ram3 operational as raid disk 3 [ 1448.557636][ T2094] md/raid:md0: device ram0 operational as raid disk 0 [ 1448.651221][ T2094] md/raid:md0: not enough operational devices (2/4 failed) [ 1448.866383][ T2094] md/raid:md0: failed to run raid set. [ 1448.906504][ T2094] md: pers->run() failed ... [ 1449.421474][ T2118] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1449.761184][ T2126] loop7: detected capacity change from 0 to 16384 [ 1449.780125][ T28] audit: type=1800 audit(1786510827.506:1109): pid=2125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8999" name="zoned" dev="configfs" ino=166235 res=0 errno=0 [ 1449.857389][ T28] audit: type=1800 audit(1786510827.536:1110): pid=2125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8999" name="memory_backed" dev="configfs" ino=165336 res=0 errno=0 [ 1449.925116][ T28] audit: type=1800 audit(1786510827.546:1111): pid=2125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8999" name="zone_nr_conv" dev="configfs" ino=165337 res=0 errno=0 [ 1449.987209][ T28] audit: type=1800 audit(1786510827.546:1112): pid=2125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8999" name="power" dev="configfs" ino=165338 res=0 errno=0 [ 1451.317261][ T2151] loop2: detected capacity change from 0 to 8 [ 1451.386807][ T2151] SQUASHFS error: Unable to read inode 0x0 [ 1451.837703][ T2151] loop2: detected capacity change from 0 to 256 [ 1451.976139][ T2151] exfat: Unknown parameter 'ÿÿdùO¤' [ 1452.109731][ T2169] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1455.019259][ T2200] loop8: detected capacity change from 0 to 512 [ 1455.083119][ T2200] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1455.304070][T30704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.044367][ T2190] loop7: detected capacity change from 0 to 32768 [ 1456.423112][ T2190] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1457.493336][ T2190] XFS (loop7): Ending clean mount [ 1457.725027][T28721] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1458.548075][ T2252] loop3: detected capacity change from 0 to 512 [ 1459.018892][ T2252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1460.216462][ T2249] Set syz1 is full, maxelem 65536 reached [ 1460.346985][T29551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.427687][ T2286] loop3: detected capacity change from 0 to 8 [ 1462.494700][ T2286] SQUASHFS error: Unable to read inode 0x0 [ 1462.997426][ T2295] loop3: detected capacity change from 0 to 1024 [ 1463.028492][ T2299] loop8: detected capacity change from 0 to 512 [ 1463.062196][ T2299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1463.106270][ T2295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1463.215668][T30704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.392265][T29551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.485359][ T2270] loop2: detected capacity change from 0 to 32768 [ 1463.522716][ T2270] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.9031 (2270) [ 1463.562833][ T2313] md: could not open device unknown-block(1,1). [ 1463.582643][ T2270] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1463.599200][ T2270] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1463.600531][ T2313] md: could not open device unknown-block(1,2). [ 1463.608964][ T2270] BTRFS info (device loop2): using free space tree [ 1463.609534][ T2270] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1463.629602][ T2270] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1463.645394][ T2270] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1463.684374][ T2270] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1463.729291][ T2270] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1463.752909][ T2270] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1463.844829][ T2270] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1463.937517][ T2270] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1463.956386][ T2313] md/raid:md0: not clean -- starting background reconstruction [ 1464.054600][ T2313] md/raid:md0: device ram3 operational as raid disk 3 [ 1464.062095][ T2270] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1464.062960][ T2270] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1464.084115][ T2313] md/raid:md0: device ram0 operational as raid disk 0 [ 1464.151187][ T2270] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1464.177991][ T2270] BTRFS error (device loop2): open_ctree failed: -12 [ 1464.252056][ T2339] siw: device registration error -23 [ 1464.998598][ T2313] md/raid:md0: couldn't allocate thread. [ 1465.375983][ T2313] md: pers->run() failed ... [ 1465.939715][ T2356] loop7: detected capacity change from 0 to 512 [ 1466.003413][ T2356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1466.098351][ T28] audit: type=1800 audit(1786510843.806:1113): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.9050" name="zoned" dev="configfs" ino=166474 res=0 errno=0 [ 1466.218356][T28721] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1466.283840][ T28] audit: type=1800 audit(1786510843.826:1114): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.9050" name="memory_backed" dev="configfs" ino=166479 res=0 errno=0 [ 1466.384368][ T28] audit: type=1800 audit(1786510843.866:1115): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.9050" name="zone_nr_conv" dev="configfs" ino=166480 res=0 errno=0 [ 1466.487821][ T28] audit: type=1800 audit(1786510843.866:1116): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.9050" name="power" dev="configfs" ino=166481 res=0 errno=0 [ 1466.971805][ T2387] md: could not open device unknown-block(1,1). [ 1467.010715][ T2387] md: could not open device unknown-block(1,2). [ 1467.187015][ T2387] md/raid:md0: not clean -- starting background reconstruction [ 1467.204803][ T2387] md/raid:md0: device ram3 operational as raid disk 3 [ 1467.215466][ T2387] md/raid:md0: device ram0 operational as raid disk 0 [ 1467.353226][ T2387] md/raid:md0: not enough operational devices (2/4 failed) [ 1467.373317][ T2369] loop2: detected capacity change from 0 to 32768 [ 1467.398109][ T2369] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.9053 (2369) [ 1467.492904][ T2369] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1467.548363][ T2369] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1467.580924][ T2387] md/raid:md0: failed to run raid set. [ 1467.584720][ T2369] BTRFS info (device loop2): using free space tree [ 1467.620193][ T2387] md: pers->run() failed ... [ 1467.802400][ T2369] BTRFS info (device loop2): enabling ssd optimizations [ 1467.841444][ T2369] BTRFS info (device loop2): auto enabling async discard [ 1467.854130][ T789] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1468.070304][ T789] usb 4-1: not running at top speed; connect to a high speed hub [ 1468.120872][ T2432] loop8: detected capacity change from 0 to 512 [ 1468.138342][ T789] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.174156][ T789] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1468.196599][T28097] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1468.208766][ T2432] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1468.235146][ T789] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1468.245161][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.253901][ T789] usb 4-1: Product: syz [ 1468.259369][ T789] usb 4-1: Manufacturer: syz [ 1468.264662][ T789] usb 4-1: SerialNumber: syz [ 1468.276150][ T789] oti6858 4-1:1.0: required endpoints missing [ 1468.371611][T30704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.728126][ T405] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop2 scanned by udevd (405) [ 1468.958764][ T28] audit: type=1800 audit(1786510846.686:1117): pid=2452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.9063" name="zoned" dev="configfs" ino=166552 res=0 errno=0 [ 1469.084013][ T28] audit: type=1800 audit(1786510846.686:1118): pid=2452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.9063" name="memory_backed" dev="configfs" ino=166553 res=0 errno=0 [ 1469.197385][ T28] audit: type=1800 audit(1786510846.686:1119): pid=2452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.9063" name="zone_nr_conv" dev="configfs" ino=166554 res=0 errno=0 [ 1469.312262][ T28] audit: type=1800 audit(1786510846.686:1120): pid=2452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.9063" name="power" dev="configfs" ino=166555 res=0 errno=0 [ 1470.142999][ T2472] program syz.7.9066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1470.519282][T32101] usb 4-1: USB disconnect, device number 73 [ 1470.894045][ T2490] md: could not open device unknown-block(1,1). [ 1471.038717][ T2495] md: could not open device unknown-block(1,2). [ 1471.649967][ T2498] loop2: detected capacity change from 0 to 512 [ 1471.674769][ T2498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1471.877593][T28097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.991328][ T2514] loop7: detected capacity change from 0 to 128 [ 1472.320791][ T2526] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28721] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[2526] [ 1472.683922][ T2532] trusted_key: encrypted_key: insufficient parameters specified [ 1473.289490][ T9] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 1473.493370][ T9] usb 9-1: not running at top speed; connect to a high speed hub [ 1473.524912][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.543911][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1473.596206][ T9] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1473.623937][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.652457][ T9] usb 9-1: Product: syz [ 1473.657387][ T9] usb 9-1: Manufacturer: syz [ 1473.662035][ T9] usb 9-1: SerialNumber: syz [ 1473.703429][ T9] oti6858 9-1:1.0: required endpoints missing [ 1473.935046][ T2557] md: could not open device unknown-block(1,1). [ 1473.952521][ T2557] md: could not open device unknown-block(1,2). [ 1474.080981][ T2557] md/raid:md0: not clean -- starting background reconstruction [ 1474.107532][ T2557] md/raid:md0: device ram3 operational as raid disk 3 [ 1474.121723][ T2562] jffs2: notice: (2562) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1474.131417][ T2557] md/raid:md0: device ram0 operational as raid disk 0 [ 1474.253295][ T2557] md/raid:md0: not enough operational devices (2/4 failed) [ 1474.552615][ T2557] md/raid:md0: failed to run raid set. [ 1474.585360][ T2557] md: pers->run() failed ... [ 1475.042494][ T2595] loop2: detected capacity change from 0 to 128 [ 1475.457160][T23099] usb 9-1: USB disconnect, device number 28 [ 1475.984441][ T2606] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28097] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[2606] [ 1476.537350][ T2625] loop8: detected capacity change from 0 to 64 [ 1476.776447][ T28] audit: type=1800 audit(1786510854.506:1121): pid=2634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9093" name="zoned" dev="configfs" ino=166706 res=0 errno=0 [ 1476.894389][ T28] audit: type=1800 audit(1786510854.506:1122): pid=2634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9093" name="memory_backed" dev="configfs" ino=166707 res=0 errno=0 [ 1476.984240][ T28] audit: type=1800 audit(1786510854.506:1123): pid=2634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9093" name="zone_nr_conv" dev="configfs" ino=166708 res=0 errno=0 [ 1477.045584][ T28] audit: type=1800 audit(1786510854.516:1124): pid=2634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9093" name="power" dev="configfs" ino=166709 res=0 errno=0 [ 1477.696501][ T2655] loop8: detected capacity change from 0 to 128 [ 1477.699372][ T2652] md: could not open device unknown-block(1,1). [ 1477.742590][ T2652] md: could not open device unknown-block(1,2). [ 1477.756735][ T2655] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1477.795667][ T2655] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1477.835627][ T2655] ext2 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1477.968472][ T2652] md/raid:md0: not clean -- starting background reconstruction [ 1477.990679][ T2652] md/raid:md0: device ram3 operational as raid disk 3 [ 1478.005283][ T2652] md/raid:md0: device ram0 operational as raid disk 0 [ 1478.119007][ T2652] md/raid:md0: not enough operational devices (2/4 failed) [ 1478.324512][ T2652] md/raid:md0: failed to run raid set. [ 1478.330527][ T2652] md: pers->run() failed ... [ 1478.723896][T23099] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1479.272973][T23099] usb 3-1: not running at top speed; connect to a high speed hub [ 1479.497316][T23099] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.818634][ T2696] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1479.831366][ T2696] qnx6: wrong signature (magic) in superblock #1. [ 1479.838667][ T2696] qnx6: unable to read the first superblock [ 1479.875102][T23099] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1480.091774][T23099] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1480.165322][T23099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.173543][T23099] usb 3-1: Product: syz [ 1480.223848][T23099] usb 3-1: Manufacturer: syz [ 1480.228782][T23099] usb 3-1: SerialNumber: syz [ 1480.260220][T23099] oti6858 3-1:1.0: required endpoints missing [ 1480.465545][T29790] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1480.665684][T29790] usb 8-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1480.685246][T29790] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.712582][T29790] usb 8-1: Product: syz [ 1480.722793][T29790] usb 8-1: Manufacturer: syz [ 1480.736979][T29790] usb 8-1: SerialNumber: syz [ 1480.849701][T30704] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1481.574261][ T2700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.598989][ T2700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.835319][T32101] usb 3-1: USB disconnect, device number 98 [ 1482.466252][ T2755] md: could not open device unknown-block(1,1). [ 1482.494563][ T2755] md: could not open device unknown-block(1,2). [ 1482.638813][ T2755] md/raid:md0: not clean -- starting background reconstruction [ 1482.662291][ T2755] md/raid:md0: device ram3 operational as raid disk 3 [ 1482.679869][ T2755] md/raid:md0: device ram0 operational as raid disk 0 [ 1482.771134][ T2755] md/raid:md0: not enough operational devices (2/4 failed) [ 1482.944294][ T2755] md/raid:md0: failed to run raid set. [ 1482.964014][ T2755] md: pers->run() failed ... [ 1483.812965][ T2753] loop2: detected capacity change from 0 to 32768 [ 1483.893406][T29790] kalmia 8-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 1483.907994][T29790] kalmia: probe of 8-1:1.0 failed with error -71 [ 1483.919267][T29790] usb 8-1: USB disconnect, device number 33 [ 1483.971903][ T2776] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1483.984617][ T2776] qnx6: wrong signature (magic) in superblock #1. [ 1483.994101][ T2776] qnx6: unable to read the first superblock [ 1484.338489][ T2753] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1484.488127][ T2753] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1484.635721][ T2753] BTRFS info (device loop2): using free space tree [ 1484.727357][ T2779] loop7: detected capacity change from 0 to 512 [ 1484.763684][ T2779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1484.952598][ T2753] BTRFS info (device loop2): enabling ssd optimizations [ 1484.966001][T28721] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1485.012399][ T2753] BTRFS info (device loop2): auto enabling async discard [ 1485.033926][T29790] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 1485.197507][ T28] audit: type=1800 audit(1786510862.926:1125): pid=2753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9109" name="file1" dev="loop2" ino=270 res=0 errno=0 [ 1485.366981][T28097] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1485.463880][T29790] usb 9-1: not running at top speed; connect to a high speed hub [ 1485.494478][T29790] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1485.545671][T29790] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1485.612963][T29790] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.633631][T29790] usb 9-1: Product: syz [ 1485.662344][T29790] usb 9-1: Manufacturer: syz [ 1485.688050][T29790] usb 9-1: SerialNumber: syz [ 1485.708249][T29790] oti6858 9-1:1.0: required endpoints missing [ 1485.751018][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.967561][ T405] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop2 scanned by udevd (405) [ 1486.274901][ T2847] md: could not open device unknown-block(1,1). [ 1486.292196][ T2847] md: could not open device unknown-block(1,2). [ 1486.384763][ T2817] loop3: detected capacity change from 0 to 32768 [ 1486.451093][ T2847] md/raid:md0: not clean -- starting background reconstruction [ 1486.484714][ T2847] md/raid:md0: device ram3 operational as raid disk 3 [ 1486.500972][ T2847] md/raid:md0: device ram0 operational as raid disk 0 [ 1486.578449][ T2817] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1486.731192][ T2847] md/raid:md0: not enough operational devices (2/4 failed) [ 1486.765329][ T2817] XFS (loop3): Ending clean mount [ 1486.882973][ T28] audit: type=1800 audit(1786510864.596:1126): pid=2817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9116" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 1486.923161][ T2847] md/raid:md0: failed to run raid set. [ 1486.939677][ T2847] md: pers->run() failed ... [ 1487.093286][T29551] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1487.757976][T29790] usb 9-1: USB disconnect, device number 29 [ 1489.530690][ T2894] loop3: detected capacity change from 0 to 512 [ 1489.577869][ T2894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1489.888597][T29551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1490.461903][ T2918] md: could not open device unknown-block(1,1). [ 1490.547449][ T2918] md: could not open device unknown-block(1,2). [ 1490.752392][ T2918] md/raid:md0: not clean -- starting background reconstruction [ 1490.794302][ T2918] md/raid:md0: device ram3 operational as raid disk 3 [ 1490.831131][ T2918] md/raid:md0: device ram0 operational as raid disk 0 [ 1490.943442][ T2918] md/raid:md0: not enough operational devices (2/4 failed) [ 1491.074028][ T789] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 1491.933748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1492.089402][ T2918] md/raid:md0: failed to run raid set. [ 1492.114360][ T2918] md: pers->run() failed ... [ 1492.168180][ T789] usb 8-1: not running at top speed; connect to a high speed hub [ 1492.195143][ T789] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1492.233383][ T789] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1492.265736][ T789] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.378115][ T789] usb 8-1: Product: syz [ 1492.562088][ T789] usb 8-1: Manufacturer: syz [ 1492.590719][ T789] usb 8-1: SerialNumber: syz [ 1492.622383][ T789] oti6858 8-1:1.0: required endpoints missing [ 1494.209459][T29790] usb 8-1: USB disconnect, device number 34 [ 1494.365251][ T2949] Set syz1 is full, maxelem 65536 reached [ 1494.573323][ T2961] loop2: detected capacity change from 0 to 512 [ 1494.607039][ T2961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1494.815352][T28097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.706517][ T2986] loop8: detected capacity change from 0 to 4096 [ 1496.814067][T26360] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1496.876990][ T2986] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1496.974306][T28547] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1497.011510][T26360] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.035458][T26360] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1497.061624][T26360] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1497.099648][T26360] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1497.136666][T26360] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1497.157581][T26360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.174459][T28547] usb 3-1: not running at top speed; connect to a high speed hub [ 1497.201671][T28547] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1497.240146][T28547] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1497.284367][T28547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.323221][T28547] usb 3-1: Product: syz [ 1497.331992][T28547] usb 3-1: Manufacturer: syz [ 1497.344945][T28547] usb 3-1: SerialNumber: syz [ 1497.380496][T28547] oti6858 3-1:1.0: required endpoints missing [ 1497.724051][ T789] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1497.848930][T26360] gud 4-1:1.0: Failed to get properties (error=-71) [ 1497.865807][T26360] gud: probe of 4-1:1.0 failed with error -71 [ 1497.902220][T26360] usb 4-1: USB disconnect, device number 74 [ 1497.947725][ T789] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1497.963919][ T789] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.982803][ T789] usb 9-1: Product: syz [ 1497.987482][ T789] usb 9-1: Manufacturer: syz [ 1498.004053][ T789] usb 9-1: SerialNumber: syz [ 1498.018214][ T789] usb 9-1: config 0 descriptor?? [ 1498.039292][ T789] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1498.466718][ T3011] loop8: detected capacity change from 0 to 512 [ 1498.506019][ T3011] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1498.569432][ T3011] EXT4-fs (loop8): 1 truncate cleaned up [ 1498.588995][ T3011] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1498.769880][ T3011] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1498.978428][ T789] gspca_sunplus: reg_w_riv err -110 [ 1498.988253][ T789] sunplus: probe of 9-1:0.0 failed with error -110 [ 1499.017864][ T3040] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1499.639867][T32101] usb 3-1: USB disconnect, device number 99 [ 1499.842178][ T3011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.905453][ T3011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.962421][T28547] usb 9-1: USB disconnect, device number 30 [ 1500.275116][T32101] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1500.446023][T32101] usb 3-1: device descriptor read/64, error -71 [ 1500.539863][ T3069] No source specified [ 1500.585331][T30704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1500.722276][T32101] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1501.099745][T32101] usb 3-1: device descriptor read/64, error -71 [ 1501.795650][T32101] usb usb3-port1: attempt power cycle [ 1501.833110][T23099] page_pool_release_retry() stalled pool shutdown 1 inflight 665 sec [ 1502.254235][T32101] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1502.273895][T28547] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1502.314293][T23099] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1502.336542][T32101] usb 3-1: device descriptor read/8, error -71 [ 1502.466223][T28547] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.490461][T28547] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.520239][T28547] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1502.545528][T23099] usb 4-1: not running at top speed; connect to a high speed hub [ 1502.577783][T28547] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1502.612993][T23099] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1502.625306][T32101] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1502.633369][T28547] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1502.660643][T23099] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1502.681818][T28547] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.702401][T32101] usb 3-1: device descriptor read/8, error -71 [ 1502.714977][T23099] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1502.751982][T23099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.802420][T23099] usb 4-1: Product: syz [ 1502.820497][T23099] usb 4-1: Manufacturer: syz [ 1502.826148][T32101] usb usb3-port1: unable to enumerate USB device [ 1502.852668][T23099] usb 4-1: SerialNumber: syz [ 1502.905555][T23099] oti6858 4-1:1.0: oti6858 converter detected [ 1502.982453][T23099] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 1503.161222][T28547] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 1503.257145][ T3090] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 1503.279874][T28547] lg-g15 0003:046D:C222.000C: unbalanced collection at end of report description [ 1503.339373][ T9] usb 4-1: USB disconnect, device number 75 [ 1503.366775][T28547] lg-g15: probe of 0003:046D:C222.000C failed with error -22 [ 1503.454913][ T9] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1503.489556][T28547] usb 8-1: USB disconnect, device number 35 [ 1503.497120][ T3105] fuse: Bad value for 'fd' [ 1503.527615][ T9] oti6858 4-1:1.0: device disconnected [ 1504.395850][ T3081] Set syz1 is full, maxelem 65536 reached [ 1504.945341][ T3126] No source specified [ 1506.633892][T28547] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 1506.859365][T28547] usb 9-1: not running at top speed; connect to a high speed hub [ 1506.879983][T28547] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1506.914248][T28547] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1506.956783][T28547] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1506.984034][T28547] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.012917][T28547] usb 9-1: Product: syz [ 1507.023041][T28547] usb 9-1: Manufacturer: syz [ 1507.043278][T28547] usb 9-1: SerialNumber: syz [ 1507.076897][T28547] oti6858 9-1:1.0: oti6858 converter detected [ 1507.107195][T28547] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 1507.371501][ T3143] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 1507.395023][T28547] usb 9-1: USB disconnect, device number 31 [ 1507.426214][T28547] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1507.475417][T28547] oti6858 9-1:1.0: device disconnected [ 1507.582603][ T3181] jffs2: notice: (3181) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1507.736837][ T3187] loop7: detected capacity change from 0 to 64 [ 1509.531538][ T3223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9189'. [ 1509.708294][ T3194] loop2: detected capacity change from 0 to 32768 [ 1509.738100][ T3194] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop2 scanned by syz.2.9181 (3194) [ 1509.945861][ T3194] BTRFS info (device loop2): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 1509.977289][ T3194] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1509.997455][ T3194] BTRFS info (device loop2): using free space tree [ 1510.407702][ T3248] loop3: detected capacity change from 0 to 64 [ 1510.543586][ T3194] BTRFS info (device loop2): enabling ssd optimizations [ 1510.583775][ T3194] BTRFS info (device loop2): auto enabling async discard [ 1510.814357][ T3256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9193'. [ 1510.876805][ T3256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9193'. [ 1511.093964][T28062] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 1511.265536][T28097] BTRFS info (device loop2): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 1511.482937][T28062] usb 9-1: not running at top speed; connect to a high speed hub [ 1511.500147][T28062] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1511.512252][T28062] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1512.233807][T28062] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1512.242912][T28062] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.252928][T28062] usb 9-1: Product: syz [ 1512.257468][T28062] usb 9-1: Manufacturer: syz [ 1512.262265][T28062] usb 9-1: SerialNumber: syz [ 1512.285817][T28062] oti6858 9-1:1.0: oti6858 converter detected [ 1512.347722][T28062] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 1512.595953][T28547] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1512.608572][ T5881] usb 9-1: USB disconnect, device number 32 [ 1512.626602][ T3258] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -19 [ 1512.746402][ T5881] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1512.785009][ T5881] oti6858 9-1:1.0: device disconnected [ 1512.815730][T28547] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.844185][T28547] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.899641][T28547] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.923809][T28547] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1512.945026][T28547] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1512.946431][ T3285] loop2: detected capacity change from 0 to 128 [ 1512.959915][T28547] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.976080][ T3285] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1512.988546][ T3285] hpfs: filesystem error: improperly stopped [ 1513.001176][ T3285] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1513.018766][ T3285] hpfs: You really don't want any checks? You are crazy... [ 1513.046392][ T3285] hpfs: hpfs_map_sector(): read error [ 1513.060021][ T3285] hpfs: code page support is disabled [ 1513.071643][ T3285] hpfs: hpfs_map_4sectors(): unaligned read [ 1513.097586][ T3285] hpfs: hpfs_map_4sectors(): unaligned read [ 1513.109759][ T3285] hpfs: filesystem error: unable to find root dir [ 1513.478147][ T3292] hpfs: hpfs_map_4sectors(): unaligned read [ 1513.614221][T28547] lg-g15 0003:046D:C222.000D: unknown main item tag 0x0 [ 1513.847054][T28547] lg-g15 0003:046D:C222.000D: unbalanced collection at end of report description [ 1513.905285][T28547] lg-g15: probe of 0003:046D:C222.000D failed with error -22 [ 1513.986522][T28547] usb 8-1: USB disconnect, device number 36 [ 1514.188594][ T3300] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9199'. [ 1514.370536][ T3306] loop3: detected capacity change from 0 to 64 [ 1514.596257][ T3311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9202'. [ 1514.615952][ T3311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9202'. [ 1514.805108][ T3318] md: could not open device unknown-block(1,2). [ 1514.963114][ T3318] md/raid:md0: not clean -- starting background reconstruction [ 1514.985495][ T3318] md/raid:md0: device ram3 operational as raid disk 3 [ 1515.011775][ T3318] md/raid:md0: device ram0 operational as raid disk 0 [ 1515.124328][ T3318] md/raid:md0: not enough operational devices (2/4 failed) [ 1515.283865][T28062] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 1515.864122][T28062] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1515.880232][T28062] usb 8-1: can't read configurations, error -71 [ 1515.936761][ T3318] md/raid:md0: failed to run raid set. [ 1515.942916][ T3318] md: pers->run() failed ... [ 1516.072879][ T3336] loop3: detected capacity change from 0 to 128 [ 1516.105231][ T3336] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1516.131846][ T3336] hpfs: filesystem error: improperly stopped [ 1516.181209][ T3336] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1516.212748][ T3336] hpfs: You really don't want any checks? You are crazy... [ 1516.230374][ T3336] hpfs: hpfs_map_sector(): read error [ 1516.304046][ T3336] hpfs: code page support is disabled [ 1516.310877][ T3336] hpfs: hpfs_map_4sectors(): unaligned read [ 1516.330446][ T3336] hpfs: hpfs_map_4sectors(): unaligned read [ 1516.347414][ T3336] hpfs: filesystem error: unable to find root dir [ 1516.762558][ T3355] hpfs: hpfs_map_4sectors(): unaligned read [ 1517.347091][ T3360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9213'. [ 1517.358275][ T3360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9213'. [ 1517.366009][ T3358] loop7: detected capacity change from 0 to 512 [ 1517.470574][ T3358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1517.602692][ T3358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1517.620890][ T3377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9212'. [ 1517.749985][ T3358] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1517.884482][ T3385] md: could not open device unknown-block(1,2). [ 1518.075691][ T3385] md/raid:md0: not clean -- starting background reconstruction [ 1518.296510][ T3385] md/raid:md0: device ram3 operational as raid disk 3 [ 1518.303526][ T3385] md/raid:md0: device ram0 operational as raid disk 0 [ 1518.656816][T28062] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 1518.874443][ T3385] md/raid:md0: not enough operational devices (2/4 failed) [ 1519.005165][T28062] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1519.038660][T28721] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.052762][T28062] usb 9-1: can't read configurations, error -71 [ 1519.095791][ T3385] md/raid:md0: failed to run raid set. [ 1519.112353][ T3385] md: pers->run() failed ... [ 1519.209676][ T3410] loop7: detected capacity change from 0 to 128 [ 1519.260720][ T3410] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1519.298474][ T3410] hpfs: filesystem error: improperly stopped [ 1519.334745][ T3410] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1519.393791][ T3410] hpfs: You really don't want any checks? You are crazy... [ 1519.418734][ T3410] hpfs: hpfs_map_sector(): read error [ 1519.425384][ T3414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9222'. [ 1519.434504][ T3410] hpfs: code page support is disabled [ 1519.440063][ T3410] hpfs: hpfs_map_4sectors(): unaligned read [ 1519.456134][ T3414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9222'. [ 1519.467678][ T3410] hpfs: hpfs_map_4sectors(): unaligned read [ 1519.474329][ T3410] hpfs: filesystem error: unable to find root dir [ 1519.821399][ T3419] hpfs: hpfs_map_4sectors(): unaligned read [ 1521.684927][ T3439] loop8: detected capacity change from 0 to 4096 [ 1521.855638][ T3439] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1521.878110][ T8809] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1522.106166][ T8809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1522.127203][ T8809] usb 3-1: not running at top speed; connect to a high speed hub [ 1522.159458][ T8809] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1522.173983][ T8809] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1522.205881][ T8809] usb 3-1: config 14 has no interface number 0 [ 1522.220987][ T8809] usb 3-1: config 14 has no interface number 1 [ 1522.255556][ T8809] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1522.280246][ T8809] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 1522.412442][ T8809] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1522.646959][ T8809] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1522.749718][ T8809] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1522.956122][ T3458] md/raid:md0: not clean -- starting background reconstruction [ 1523.018023][ T8809] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1523.104336][ T8809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.120597][ T3458] md/raid:md0: device ram3 operational as raid disk 3 [ 1523.232394][ T8809] usb 3-1: Product: syz [ 1523.234679][ T3458] md/raid:md0: device ram0 operational as raid disk 0 [ 1523.251414][ T8809] usb 3-1: Manufacturer: syz [ 1523.271799][ T3458] md/raid:md0: couldn't allocate thread. [ 1523.280980][ T8809] usb 3-1: SerialNumber: syz [ 1523.322536][ T3458] md: pers->run() failed ... [ 1523.525265][ T9] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 1523.544399][ T3469] program syz.7.9233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1524.322042][ T8809] legousbtower 3-1:14.57: interrupt endpoints not found [ 1524.377119][ T3472] loop7: detected capacity change from 0 to 128 [ 1524.412739][ T3472] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1524.432550][ T3472] hpfs: filesystem error: improperly stopped [ 1524.441213][ T3472] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1524.450310][ T3472] hpfs: You really don't want any checks? You are crazy... [ 1524.460100][ T3472] hpfs: hpfs_map_sector(): read error [ 1524.468707][ T3472] hpfs: code page support is disabled [ 1524.474198][ T8809] legousbtower 3-1:14.228: interrupt endpoints not found [ 1524.475993][ T3472] hpfs: hpfs_map_4sectors(): unaligned read [ 1524.488715][ T3472] hpfs: hpfs_map_4sectors(): unaligned read [ 1524.503957][ T3472] hpfs: filesystem error: unable to find root dir [ 1524.522520][ T9] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1524.550479][ T9] usb 9-1: can't read configurations, error -71 [ 1525.027215][ T3477] hpfs: hpfs_map_4sectors(): unaligned read [ 1525.365634][ T3481] md: could not open device unknown-block(1,0). [ 1525.414793][ T3481] md: could not open device unknown-block(1,1). [ 1525.422266][ T3481] md: could not open device unknown-block(1,2). [ 1525.611584][ T3481] md/raid:md0: not clean -- starting background reconstruction [ 1525.644399][ T3481] md/raid:md0: device ram3 operational as raid disk 3 [ 1525.659528][ T3481] md/raid:md0: device ram0 operational as raid disk 0 [ 1525.817484][ T3481] md/raid:md0: not enough operational devices (2/4 failed) [ 1526.803676][ T3481] md/raid:md0: failed to run raid set. [ 1526.840613][ T3481] md: pers->run() failed ... [ 1526.876293][ T788] usb 3-1: USB disconnect, device number 104 [ 1527.058874][ T3502] jffs2: notice: (3502) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1527.226117][ T3511] loop2: detected capacity change from 0 to 512 [ 1527.300225][ T3511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1528.122494][T28097] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1528.188720][ T3515] md/raid:md0: not clean -- starting background reconstruction [ 1528.214452][ T3515] md/raid:md0: device ram3 operational as raid disk 3 [ 1528.282392][ T3515] md/raid:md0: device ram0 operational as raid disk 0 [ 1528.360678][ T3523] program syz.2.9242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1529.216204][ T3515] md/raid:md0: couldn't allocate thread. [ 1529.340299][ T3515] md: pers->run() failed ... [ 1529.503877][ T8809] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1529.568292][ T3532] loop3: detected capacity change from 0 to 128 [ 1529.604638][ T3532] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1529.636038][ T3532] hpfs: filesystem error: improperly stopped [ 1529.672775][ T3532] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1529.704103][ T3532] hpfs: You really don't want any checks? You are crazy... [ 1529.737917][ T3532] hpfs: hpfs_map_sector(): read error [ 1529.794918][ T3532] hpfs: code page support is disabled [ 1529.818862][ T3532] hpfs: hpfs_map_4sectors(): unaligned read [ 1529.871342][ T3532] hpfs: hpfs_map_4sectors(): unaligned read [ 1529.947234][ T3532] hpfs: filesystem error: unable to find root dir [ 1530.202659][ T8809] usb 3-1: not running at top speed; connect to a high speed hub [ 1530.252207][ T8809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1530.273239][ T8809] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1530.359061][ T3542] hpfs: hpfs_map_4sectors(): unaligned read [ 1530.813830][ T9] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1530.847601][ T8809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.856195][ T8809] usb 3-1: Product: syz [ 1530.860842][ T8809] usb 3-1: Manufacturer: syz [ 1530.866321][ T8809] usb 3-1: SerialNumber: syz [ 1530.881034][ T8809] oti6858 3-1:1.0: oti6858 converter detected [ 1530.901481][ T8809] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 1531.018801][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.030742][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1531.054105][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1531.088750][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1531.163849][ T9] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1531.186568][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.659062][ T5881] usb 9-1: USB disconnect, device number 37 [ 1532.354448][ T3578] jffs2: notice: (3578) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1532.388517][ T3565] loop7: detected capacity change from 0 to 40427 [ 1532.525881][ T5881] usb 3-1: USB disconnect, device number 105 [ 1532.533605][ T3584] program syz.8.9252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1532.685559][ T3565] F2FS-fs (loop7): invalid crc value [ 1532.908970][ T5881] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1533.158204][ T5881] oti6858 3-1:1.0: device disconnected [ 1533.211199][ T3565] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1533.344782][ T3565] F2FS-fs (loop7): Start checkpoint disabled! [ 1533.378566][ T3565] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1533.482138][ T3591] md/raid:md0: not clean -- starting background reconstruction [ 1533.503457][ T3591] md/raid:md0: device ram3 operational as raid disk 3 [ 1533.543914][ T3591] md/raid:md0: device ram0 operational as raid disk 0 [ 1533.705747][ T3591] md/raid:md0: not enough operational devices (2/4 failed) [ 1533.890068][ T3600] IPVS: Unknown mcast interface: ip6gretap0 [ 1534.741718][ T3591] md/raid:md0: failed to run raid set. [ 1534.772918][ T3591] md: pers->run() failed ... [ 1535.078639][ T3612] loop8: detected capacity change from 0 to 128 [ 1535.135614][ T3612] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1535.183934][ T3612] hpfs: filesystem error: improperly stopped [ 1535.232575][ T3612] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1535.279895][ T3612] hpfs: You really don't want any checks? You are crazy... [ 1535.370073][ T3612] hpfs: hpfs_map_sector(): read error [ 1535.424239][ T3612] hpfs: code page support is disabled [ 1535.463368][ T3612] hpfs: hpfs_map_4sectors(): unaligned read [ 1535.521942][ T3612] hpfs: hpfs_map_4sectors(): unaligned read [ 1535.553873][ T3612] hpfs: filesystem error: unable to find root dir [ 1535.644185][T29791] kworker/u4:5: attempt to access beyond end of device [ 1535.644185][T29791] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1535.782773][T29791] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1535.845068][T29791] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1536.055426][ T3625] hpfs: hpfs_map_4sectors(): unaligned read [ 1537.088807][ T3640] loop8: detected capacity change from 0 to 512 [ 1537.306506][ T3640] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1537.984355][T30704] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1538.214492][ T5818] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1538.234568][ T3653] md: could not open device unknown-block(1,1). [ 1538.256443][ T3653] md: could not open device unknown-block(1,2). [ 1538.419645][ T5818] usb 3-1: not running at top speed; connect to a high speed hub [ 1538.467416][ T5818] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1538.495734][ T5818] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1538.520782][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.624352][ T3661] loop8: detected capacity change from 0 to 256 [ 1538.788853][ T3661] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1539.186830][ T3653] md/raid:md0: not clean -- starting background reconstruction [ 1539.266282][ T3653] md/raid:md0: device ram3 operational as raid disk 3 [ 1539.326602][ T3653] md/raid:md0: device ram0 operational as raid disk 0 [ 1539.545268][ T3653] md/raid:md0: not enough operational devices (2/4 failed) [ 1540.255328][ T5818] usb 3-1: Product: syz [ 1540.255660][ T3653] md/raid:md0: failed to run raid set. [ 1540.259521][ T5818] usb 3-1: Manufacturer: syz [ 1540.259536][ T5818] usb 3-1: SerialNumber: syz [ 1540.324955][ T3653] md: pers->run() failed ... [ 1540.426935][ T5818] oti6858 3-1:1.0: oti6858 converter detected [ 1540.445067][ T5818] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 1542.001681][ T5881] usb 3-1: USB disconnect, device number 106 [ 1542.084405][ T5881] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1542.102617][ T5881] oti6858 3-1:1.0: device disconnected [ 1542.500869][ T3708] loop3: detected capacity change from 0 to 128 [ 1542.556456][ T3678] loop8: detected capacity change from 0 to 40427 [ 1542.592993][ T3678] F2FS-fs (loop8): invalid crc value [ 1542.810844][ T3678] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1542.918313][ T3711] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[29551] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[3711] [ 1542.942792][ T3678] F2FS-fs (loop8): Start checkpoint disabled! [ 1543.045757][ T3678] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1543.941003][ T3728] loop7: detected capacity change from 0 to 256 [ 1544.226167][ T3728] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1544.826357][ T3731] md: could not open device unknown-block(1,1). [ 1544.898130][ T3735] md: could not open device unknown-block(1,2). [ 1545.183210][ T3731] md/raid:md0: not clean -- starting background reconstruction [ 1545.210417][ T3731] md/raid:md0: device ram3 operational as raid disk 3 [ 1545.217387][ T3731] md/raid:md0: device ram0 operational as raid disk 0 [ 1545.251664][ T3731] md/raid:md0: not enough operational devices (2/4 failed) [ 1545.988639][ T4306] kworker/u4:8: attempt to access beyond end of device [ 1545.988639][ T4306] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1545.989619][ T3731] md/raid:md0: failed to run raid set. [ 1546.013587][ T4306] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1546.059814][ T3731] md: pers->run() failed ... [ 1546.454298][ T5838] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1546.665398][ T5838] usb 3-1: not running at top speed; connect to a high speed hub [ 1546.684019][ T5838] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1546.714886][ T5838] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1546.747157][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.783353][ T5838] usb 3-1: Product: syz [ 1546.798786][ T5838] usb 3-1: Manufacturer: syz [ 1546.803470][ T5838] usb 3-1: SerialNumber: syz [ 1546.855149][ T5838] oti6858 3-1:1.0: oti6858 converter detected [ 1546.923598][ T5838] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 1547.163340][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.302608][ T3769] input: syz0 as /devices/virtual/input/input35 [ 1547.517287][ T3774] loop8: detected capacity change from 0 to 128 [ 1548.311977][ T3783] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[30704] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[3783] [ 1548.803579][ T3779] loop3: detected capacity change from 0 to 40427 [ 1548.848051][ T3779] F2FS-fs (loop3): invalid crc value [ 1548.891084][ T3779] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1549.194057][ T5838] usb 3-1: USB disconnect, device number 107 [ 1549.206406][ T5838] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1549.217627][ T5838] oti6858 3-1:1.0: device disconnected [ 1549.326754][ T3802] loop8: detected capacity change from 0 to 256 [ 1549.370015][ T3779] F2FS-fs (loop3): Start checkpoint disabled! [ 1549.490466][ T3802] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1550.055179][ T3779] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1550.488967][ T3810] md: could not open device unknown-block(1,1). [ 1550.540225][ T3810] md: could not open device unknown-block(1,2). [ 1550.892906][ T3810] md/raid:md0: not clean -- starting background reconstruction [ 1550.975148][ T3810] md/raid:md0: device ram3 operational as raid disk 3 [ 1551.014346][ T3810] md/raid:md0: device ram0 operational as raid disk 0 [ 1551.244571][ T3810] md/raid:md0: not enough operational devices (2/4 failed) [ 1551.361262][ T3810] md/raid:md0: failed to run raid set. [ 1551.381348][ T3810] md: pers->run() failed ... [ 1552.987580][ T3848] md: could not open device unknown-block(1,0). [ 1553.000915][ T3848] md: could not open device unknown-block(1,2). [ 1553.011160][ T3848] md: could not open device unknown-block(1,3). [ 1553.015096][ T8002] kworker/u4:11: attempt to access beyond end of device [ 1553.015096][ T8002] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1553.053859][T26360] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1553.062334][ T8002] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1553.092682][ T8002] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1553.146416][ T3848] md/raid:md0: not clean -- starting background reconstruction [ 1553.180117][ T3848] md/raid:md0: device ram3 operational as raid disk 3 [ 1553.213898][ T3848] md/raid:md0: device ram0 operational as raid disk 0 [ 1553.273988][T26360] usb 3-1: Using ep0 maxpacket: 16 [ 1553.306293][T26360] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1553.339511][ T3848] md/raid:md0: not enough operational devices (2/4 failed) [ 1553.364278][T26360] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1553.398422][T26360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.429486][T26360] usb 3-1: Product: syz [ 1553.461220][T26360] usb 3-1: Manufacturer: syz [ 1553.481579][T26360] usb 3-1: SerialNumber: syz [ 1553.502963][T26360] usb 3-1: config 0 descriptor?? [ 1553.598028][ T3865] loop7: detected capacity change from 0 to 8 [ 1553.606154][ T3848] md/raid:md0: failed to run raid set. [ 1553.611760][ T3848] md: pers->run() failed ... [ 1553.896697][ T3874] loop3: detected capacity change from 0 to 128 [ 1554.320171][ T3880] loop8: detected capacity change from 0 to 256 [ 1554.337014][ T3881] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[29551] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[3881] [ 1554.395290][ T3880] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 1555.689696][ T3893] md: could not open device unknown-block(1,1). [ 1555.734669][ T3893] md: could not open device unknown-block(1,2). [ 1555.931555][ T9] usb 3-1: USB disconnect, device number 108 [ 1556.069196][ T3893] md/raid:md0: not clean -- starting background reconstruction [ 1556.115007][ T3893] md/raid:md0: device ram3 operational as raid disk 3 [ 1556.169101][ T3893] md/raid:md0: device ram0 operational as raid disk 0 [ 1556.544595][ T3893] md/raid:md0: couldn't allocate thread. [ 1556.821920][ T3893] md: pers->run() failed ... [ 1556.889818][ T3918] [ 1556.892377][ T3918] ====================================================== [ 1556.899871][ T3918] WARNING: possible circular locking dependency detected [ 1556.907180][ T3918] syzkaller #0 Not tainted [ 1556.911620][ T3918] ------------------------------------------------------ [ 1556.919138][ T3918] syz.8.9303/3918 is trying to acquire lock: [ 1556.925326][ T3918] ffff888020078b80 (&sb->s_type->i_mutex_key#32){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 1556.937076][ T3918] [ 1556.937076][ T3918] but task is already holding lock: [ 1556.944939][ T3918] ffff888066c62920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 1556.954490][ T3918] [ 1556.954490][ T3918] which lock already depends on the new lock. [ 1556.954490][ T3918] [ 1556.964974][ T3918] [ 1556.964974][ T3918] the existing dependency chain (in reverse order) is: [ 1556.974180][ T3918] [ 1556.974180][ T3918] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 1556.982255][ T3918] __mutex_lock+0x135/0xc80 [ 1556.987541][ T3918] tcm_set_name+0x2a/0x90 [ 1556.992631][ T3918] function_make+0x199/0x350 [ 1556.998056][ T3918] configfs_mkdir+0x515/0x9e0 [ 1557.004150][ T3918] vfs_mkdir+0x2a5/0x470 [ 1557.009741][ T3918] do_mkdirat+0x1dc/0x450 [ 1557.015025][ T3918] __x64_sys_mkdirat+0x89/0xa0 [ 1557.020402][ T3918] do_syscall_64+0x55/0xb0 [ 1557.025449][ T3918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1557.031965][ T3918] [ 1557.031965][ T3918] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1557.040507][ T3918] __mutex_lock+0x135/0xc80 [ 1557.045590][ T3918] uvc_func_allow_link+0x70/0x360 [ 1557.051402][ T3918] configfs_symlink+0x5a5/0xfe0 [ 1557.057242][ T3918] vfs_symlink+0x138/0x2b0 [ 1557.062219][ T3918] do_symlinkat+0x1ba/0x400 [ 1557.067359][ T3918] __x64_sys_symlink+0x7e/0x90 [ 1557.072778][ T3918] do_syscall_64+0x55/0xb0 [ 1557.077903][ T3918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1557.084521][ T3918] [ 1557.084521][ T3918] -> #0 (&sb->s_type->i_mutex_key#32){++++}-{3:3}: [ 1557.093839][ T3918] __lock_acquire+0x37ef/0x7d80 [ 1557.099256][ T3918] lock_acquire+0x19e/0x420 [ 1557.104294][ T3918] down_write+0x97/0x200 [ 1557.109066][ T3918] configfs_depend_item_unlocked+0x157/0x430 [ 1557.116813][ T3918] usbg_make_tpg+0x1f7/0x580 [ 1557.122273][ T3918] target_fabric_make_tpg+0xa4/0x6d0 [ 1557.128493][ T3918] configfs_mkdir+0x515/0x9e0 [ 1557.134110][ T3918] vfs_mkdir+0x2a5/0x470 [ 1557.140046][ T3918] do_mkdirat+0x1dc/0x450 [ 1557.145275][ T3918] __x64_sys_mkdirat+0x89/0xa0 [ 1557.151795][ T3918] do_syscall_64+0x55/0xb0 [ 1557.158591][ T3918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1557.165209][ T3918] [ 1557.165209][ T3918] other info that might help us debug this: [ 1557.165209][ T3918] [ 1557.176245][ T3918] Chain exists of: [ 1557.176245][ T3918] &sb->s_type->i_mutex_key#32 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 1557.176245][ T3918] [ 1557.191120][ T3918] Possible unsafe locking scenario: [ 1557.191120][ T3918] [ 1557.198706][ T3918] CPU0 CPU1 [ 1557.204199][ T3918] ---- ---- [ 1557.211124][ T3918] lock(&opts->dep_lock); [ 1557.215903][ T3918] lock(gadget_subsys.su_mutex); [ 1557.225382][ T3918] lock(&opts->dep_lock); [ 1557.233037][ T3918] lock(&sb->s_type->i_mutex_key#32); [ 1557.239081][ T3918] [ 1557.239081][ T3918] *** DEADLOCK *** [ 1557.239081][ T3918] [ 1557.248288][ T3918] 5 locks held by syz.8.9303/3918: [ 1557.253925][ T3918] #0: ffff8881426d0418 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1557.266341][ T3918] #1: ffff88805e539ab0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 1557.278210][ T3918] #2: ffffffff8db2b830 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 1557.288364][ T3918] #3: ffffffff8de58f08 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 1557.298435][ T3918] #4: ffff888066c62920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 1557.308111][ T3918] [ 1557.308111][ T3918] stack backtrace: [ 1557.314015][ T3918] CPU: 0 PID: 3918 Comm: syz.8.9303 Not tainted syzkaller #0 [ 1557.321550][ T3918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1557.333833][ T3918] Call Trace: [ 1557.337209][ T3918] [ 1557.340280][ T3918] dump_stack_lvl+0x18c/0x250 [ 1557.344975][ T3918] ? load_image+0x420/0x420 [ 1557.349588][ T3918] ? show_regs_print_info+0x20/0x20 [ 1557.354802][ T3918] ? print_circular_bug+0x12b/0x1a0 [ 1557.360582][ T3918] check_noncircular+0x2fc/0x400 [ 1557.365917][ T3918] ? look_up_lock_class+0x75/0x140 [ 1557.371486][ T3918] ? print_deadlock_bug+0x5d0/0x5d0 [ 1557.377164][ T3918] ? lockdep_lock+0xf5/0x230 [ 1557.381861][ T3918] ? __lock_acquire+0x357f/0x7d80 [ 1557.388203][ T3918] ? _find_first_zero_bit+0xd6/0x100 [ 1557.393651][ T3918] __lock_acquire+0x37ef/0x7d80 [ 1557.398550][ T3918] ? is_bpf_text_address+0x28f/0x2a0 [ 1557.403984][ T3918] ? verify_lock_unused+0x140/0x140 [ 1557.409281][ T3918] lock_acquire+0x19e/0x420 [ 1557.414180][ T3918] ? configfs_depend_item_unlocked+0x157/0x430 [ 1557.420803][ T3918] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1557.427229][ T3918] ? __might_sleep+0xe0/0xe0 [ 1557.431991][ T3918] ? rcu_is_watching+0x15/0xb0 [ 1557.437744][ T3918] ? read_lock_is_recursive+0x20/0x20 [ 1557.443141][ T3918] ? trace_contention_end+0x39/0xe0 [ 1557.449571][ T3918] ? __mutex_lock+0x30d/0xc80 [ 1557.454897][ T3918] ? do_syscall_64+0x55/0xb0 [ 1557.459676][ T3918] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1557.466316][ T3918] down_write+0x97/0x200 [ 1557.470573][ T3918] ? configfs_depend_item_unlocked+0x157/0x430 [ 1557.477702][ T3918] ? down_read_killable+0x340/0x340 [ 1557.483012][ T3918] configfs_depend_item_unlocked+0x157/0x430 [ 1557.489103][ T3918] usbg_make_tpg+0x1f7/0x580 [ 1557.493701][ T3918] ? usbg_drop_tport+0x20/0x20 [ 1557.498557][ T3918] ? vscnprintf+0x80/0x80 [ 1557.503016][ T3918] target_fabric_make_tpg+0xa4/0x6d0 [ 1557.508423][ T3918] ? target_fabric_release_wwn+0xb0/0xb0 [ 1557.514257][ T3918] configfs_mkdir+0x515/0x9e0 [ 1557.519173][ T3918] vfs_mkdir+0x2a5/0x470 [ 1557.523614][ T3918] do_mkdirat+0x1dc/0x450 [ 1557.528224][ T3918] ? vfs_mkdir+0x470/0x470 [ 1557.532845][ T3918] __x64_sys_mkdirat+0x89/0xa0 [ 1557.537627][ T3918] do_syscall_64+0x55/0xb0 [ 1557.542135][ T3918] ? clear_bhb_loop+0x40/0x90 [ 1557.546999][ T3918] ? clear_bhb_loop+0x40/0x90 [ 1557.551761][ T3918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1557.557918][ T3918] RIP: 0033:0x7f79e419e0d9 [ 1557.562439][ T3918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.582684][ T3918] RSP: 002b:00007f79e5038028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1557.591476][ T3918] RAX: ffffffffffffffda RBX: 00007f79e4425fa0 RCX: 00007f79e419e0d9 [ 1557.599729][ T3918] RDX: 00000000000001ff RSI: 0000200000000740 RDI: ffffffffffffff9c [ 1557.607704][ T3918] RBP: 00007f79e4235024 R08: 0000000000000000 R09: 0000000000000000 [ 1557.615854][ T3918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1557.623936][ T3918] R13: 00007f79e4426038 R14: 00007f79e4425fa0 R15: 00007ffeae79a728 [ 1557.631931][ T3918] [ 1557.810252][ T3904] loop2: detected capacity change from 0 to 40427 [ 1557.836328][ T3904] F2FS-fs (loop2): invalid crc value [ 1557.855640][ T3904] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1557.856640][ T28] audit: type=1800 audit(1786510935.586:1127): pid=3918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.9303" name="nexus" dev="configfs" ino=169042 res=0 errno=0 [ 1557.977252][ T3904] F2FS-fs (loop2): Start checkpoint disabled! [ 1557.997354][ T3904] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1558.787238][ T4324] kworker/u4:9: attempt to access beyond end of device [ 1558.787238][ T4324] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1558.802738][ T4324] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1558.810815][ T4324] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1561.953818][ T5818] page_pool_release_retry() stalled pool shutdown 1 inflight 725 sec