last executing test programs: 3m24.126787995s ago: executing program 0 (id=1103): set_mempolicy(0x5, &(0x7f0000000040)=0x4000000ff9, 0xf) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3m23.784980236s ago: executing program 0 (id=1105): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='\'r', 0x2) 3m23.359759442s ago: executing program 0 (id=1107): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="a2", 0x1}], 0x1}}], 0x1, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 3m23.185090493s ago: executing program 0 (id=1108): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu1Mv2jnEu7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe11qknbrx/oeDn0289d03/ySj3/82kcSJeCV74fLz2C5DMVT/P0lWZw2Mb3dhBenK/k5qtVotT0u6i60TG5f//noi4skYjK548MsbjE9fLbRywI6qJY33bqCMEvEPJZX3A/Jr+5XXwZVCeiVAJ9w72RgAWB3/3Y2xweirjw3svp/E8mGdJCK2NjLXbE9E3Lk9cePs7YkbsUPjcEBri9cj4qlW8Z/U478afVGtx3+lKf7TfsHp7DlNf22L5a8cKhb/0DmN+O9bM/6jTfy/kz5fa8Twu1ssv/pg873+pvjv3+opAQAAAAAAQGndOhkRL7T6/L+yNP8nWsz/GYiIE9tQ/tCK/dWf/1fubkMxQAv3Tka83HL+byWf/VvtWraEtRo9ydnzM9NHIuJ/EXEoenal+6NrlHH4831ft8sbyub/5Y+0/DvZXMCsHne7dzUfMzU5P/kQpwxk7l2PeLrl/N9kqf1PWrT/6TvD7AbL2PfczdPt8taPf2Cn1L6NONiy/X9w14pk7ftzjNT7AyN5r2C1Zz7+4od25W81/t1iAh5e2v7vXjv+q8ny+/XMbb6MowvdtXZ5W+3/9yZv1O8q1JulfTQ5P39lNKI3OdWVpjalj22+zvA4yuMhj5c0/g89u/b4X6v+f39ELK742clfzWuKc0/8O/B7u/ro/0Nx0vif2lT7v/mNsZvVH9uVv7H2/1i9rT+UpRj/g4av8jDtbU5vEY7drbI6XV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBxUImJPJJXhpe1KZXg4YiAi/h+7KzOX5+afP3v5g0tTaV79+/8r+Tf9Djb2k/z7/6vL9sdW7B+NiL0R8WVXf31/+MzlmamiTx4AAAAAAAAAAAAAAAAAAAAeEQNt1v+n/ugqunbAjusuugJAYVrE/y9F1APoPO0/lJf4h/IS/1Be4h/KS/xDea0d/2+Pd6wiQMdp/6G8xD8AAAAAADxW9h649WsSEYsv9dcfqd4sr6fQmgE7rVJ0BYDCuMUPlJepP1BervGBZJ38vrYHrXfkWmbPPMTBAAAAAAAAAAAAAFA6B/db/w9lZf0/lJf1/1Be+fr/AwXXA+g81/hArLOSv+X6/3WPAgAAAAAAAAAAAAC209zC1QuTMzPTV2y8+WhUo5MbtVrtWvpX8KjUZ/s3kmyGekcKzafCd/5Mezdygvlav4395OLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BQAA//8wviV5") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 3m22.389170316s ago: executing program 0 (id=1115): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x11, &(0x7f0000000780)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1fc0a0869fd0e76753a00000400", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m21.084624572s ago: executing program 0 (id=1124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./sys\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRESDEC=r0, @ANYRESOCT=r0], 0x1, 0x564, &(0x7f00000003c0)="$eJzs3V1v01gawPHHpV2irNRdLSuEqgKHsisVqQQngaCIK69zkhoSO7Id1F6hiqaoIoUVZaVtb5jeMDPSzIdgLudDzDdC8xEY+djpa16AvjHV/xeV49jHPs9JIz+cJj4WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAglluz7aIlTc/vLKnh3FoYtPaeZnsfWSF3DhQj2hWxkh/J5eRauuraP/c2X03+mZPZ9Nms5JIiJ9t/vfr3R1cmJ/r7jwj4i/zylUfa3Np+udLrdd+MrJU7sTjPw/XLw7c1tO9FgddyGlp5UaCqlYp9b7EeqbrX1NFyFOuWckPtxEGo5t07qlitlpUuLAcdv1Fzmrq/8uHdkm1X1ONCWzthFPj3Hhcid9FrNj2/Yeokm5M6D5M34hMvVrF2Wkqtrfe65XEdSCoVP6dSaVylkl0qFYulUrHyoPrgoW1PHllhHyJHapzcmxZ/Tid49gaOZyLL/9IUT3zpyJKogQ9XahJKIK0h2zP9/P/ve3pku/vzfz/LX9vbPCMm/99In90Ylv+HxHJ2j03Zkm15KSvSk5505c25R3S2j4Zo8cWTSALxpCWOWaOyNUqqUpGK2PJMFqU+lfwS6+JJU7REsiyRxKLNO8qVULQ4EksgoSiZF1fuiJKiVKUqZVGipSDLEkhHfGlITRxzlDVZN697WZQ1LMbdSsWh3cj333ddKY3oLfkfx3eSp2/gWD718z8AAAAAALiwLPPX9ynzc908r3tNbZ93WAAAAAAA4ASZT/5nk8J8O+u6WIz/AQAAAAC4aCxzjZ0lInm5mS6tiWUul+KPAAAAAAAAXBDm8/8bSWHmQLkp1u50KYz/AQAAAAC4IH4YO8d+1L5s/fa7hOGUtdNe+pe1YebmdTYupftdOnzEuD5jTWcHMUUlLSYnXT1r5dJKu5NgfsyKtXFxWHsBOLsBfPclAVyZlJ/kVlrn1mparmZb/pa2kq97TV1wg+ajojjO9ESsl+L/vVr/v5ju/+i3pq2crPe6heeve6smlp3kKDsb2QSKR+ZRHBHLWzPfgrnmYmCPp8yFGFm7eUvW1ntdu710OTuyszGRLkwcbPHd9Ig238tcWmsum/E239+StplL2iwWhvU+i6J4zJ6/l9tpndvzt9NiQBSlcVGU9kcx+LU4fhTlIVHk+lGUjxkFAJyXtTFZyJIjefcrznKHsnty2vuM7C5fmN3fy3xaZ37GnFgnZwac0e1xecU+Znb79cg9kIbl2KTdnw9l1Q/JDh+Gths1S1byEl56u/Ffubq5tX13fWPlRfdF91WpVK7Y9237QUmmTDeygtwDABhg/z12rIH5f9RdeD59SnL3/WxUvXN4VJ1lvH/sfqWgIM/ltfRkVRbM1QbmGwcD/9+R3/c1hIUxo9a8SZPpHV4WRozq/mKucugftzSy7sEYymfxqwAA4MzMjcnDo/N/OnZfGDPuPpjLR4+O8/vu1gYAAE6HDj9a+fh7Kwy99rNitVp04kWtwsB9okKv1tDK82MduouO39CqHQZx4AbNZOGpV9ORijrtdhDGqh6Eqh1E3pKZPlBlt36PdMvxY8+N2k3tRFq5gR87bqxqXuSqduc/TS9a1KHZOWpr16t7rhN7ga+ioBO6uqBUpPW+il5N+7FX95JFX7VDr+WEOfU0aHZaWtV05IZeOw7SA/bb8vx6ELbMYQvn/WIDAPCN2NzafrnS63XfnOLCwIZzZ95VAACQGZOlAQAAAAAAAAAAAAAAAAAAAADAN+Asrv9j4YIv9KeC/lbiYeEEFsaeOt6d+skJwKn6IwAA//8AA0/q") 3m20.591824012s ago: executing program 32 (id=1124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./sys\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRESDEC=r0, @ANYRESOCT=r0], 0x1, 0x564, &(0x7f00000003c0)="$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") 2m1.45364668s ago: executing program 5 (id=1751): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b704000000000000850000001c00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m0.985534663s ago: executing program 5 (id=1753): syz_usb_connect(0x2, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102400000070584", @ANYRES8], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) 1m58.592540501s ago: executing program 5 (id=1780): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266"], 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m58.34520261s ago: executing program 5 (id=1771): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu1Mv2jnEu7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe11qknbrx/oeDn0289d03/ySj3/82kcSJeCV74fLz2C5DMVT/P0lWZw2Mb3dhBenK/k5qtVotT0u6i60TG5f//noi4skYjK548MsbjE9fLbRywI6qJY33bqCMEvEPJZX3A/Jr+5XXwZVCeiVAJ9w72RgAWB3/3Y2xweirjw3svp/E8mGdJCK2NjLXbE9E3Lk9cePs7YkbsUPjcEBri9cj4qlW8Z/U478afVGtx3+lKf7TfsHp7DlNf22L5a8cKhb/0DmN+O9bM/6jTfy/kz5fa8Twu1ssv/pg873+pvjv3+opAQAAAAAAQGndOhkRL7T6/L+yNP8nWsz/GYiIE9tQ/tCK/dWf/1fubkMxQAv3Tka83HL+byWf/VvtWraEtRo9ydnzM9NHIuJ/EXEoenal+6NrlHH4831ft8sbyub/5Y+0/DvZXMCsHne7dzUfMzU5P/kQpwxk7l2PeLrl/N9kqf1PWrT/6TvD7AbL2PfczdPt8taPf2Cn1L6NONiy/X9w14pk7ftzjNT7AyN5r2C1Zz7+4od25W81/t1iAh5e2v7vXjv+q8ny+/XMbb6MowvdtXZ5W+3/9yZv1O8q1JulfTQ5P39lNKI3OdWVpjalj22+zvA4yuMhj5c0/g89u/b4X6v+f39ELK742clfzWuKc0/8O/B7u/ro/0Nx0vif2lT7v/mNsZvVH9uVv7H2/1i9rT+UpRj/g4av8jDtbU5vEY7drbI6XV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBxUImJPJJXhpe1KZXg4YiAi/h+7KzOX5+afP3v5g0tTaV79+/8r+Tf9Djb2k/z7/6vL9sdW7B+NiL0R8WVXf31/+MzlmamiTx4AAAAAAAAAAAAAAAAAAAAeEQNt1v+n/ugqunbAjusuugJAYVrE/y9F1APoPO0/lJf4h/IS/1Be4h/KS/xDea0d/2+Pd6wiQMdp/6G8xD8AAAAAADxW9h649WsSEYsv9dcfqd4sr6fQmgE7rVJ0BYDCuMUPlJepP1BervGBZJ38vrYHrXfkWmbPPMTBAAAAAAAAAAAAAFA6B/db/w9lZf0/lJf1/1Be+fr/AwXXA+g81/hArLOSv+X6/3WPAgAAAAAAAAAAAAC209zC1QuTMzPTV2y8+WhUo5MbtVrtWvpX8KjUZ/s3kmyGekcKzafCd/5Mezdygvlav4395OLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BQAA//8wviV5") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1m57.709257728s ago: executing program 5 (id=1777): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16, @ANYRES16], 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc}) 1m56.729017341s ago: executing program 5 (id=1783): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8408001a}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) 1m56.116237431s ago: executing program 33 (id=1783): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8408001a}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) 3.25720849s ago: executing program 4 (id=2748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)=0x1) 2.989519512s ago: executing program 4 (id=2844): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./file1\x00', 0xa00004, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid_ignore}, {@dmode}, {}, {@nostrict}, {@utf8}, {@uid_ignore}, {}, {}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@undelete}, {@nostrict}, {@adinicb}, {@uid_ignore}]}, 0x5, 0xc87, &(0x7f0000000780)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./bus/file0\x00') 2.486603455s ago: executing program 4 (id=2849): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x1, {0x7a, 0x0, 0x0, r1, 0x9c12}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.193809519s ago: executing program 4 (id=2852): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) 2.111710811s ago: executing program 3 (id=2854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "17b741c05e9d86db38a68ca89c2c7e46"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}}, 0x22044804) 2.036935346s ago: executing program 2 (id=2855): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000002c0)={0x0, 0x1}, 0x8) 1.877823382s ago: executing program 3 (id=2856): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)=' / ew_domain\n', 0x15) 1.876447846s ago: executing program 4 (id=2857): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3d2de2d5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d6c3f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40dfc4e1c24ecafb84f531cbc4b2ee41cbda0dbf2"], 0x1, 0x5548, &(0x7f0000006040)="$eJzs3EtvG1UbAODjpEmvX78IsWDXkSqkRKqtOr0IdgVacRGtKi4LVtSxp5Zb2xPFrmOyYsESseCfIJBYseQ3sGDNDrEAsUMq8pwT1HCpgDg2SZ5Hmrxzzpx555xRlOidsRyAY2sl+/nHSjgfTocQFkMI50Io9ytpK92I4bkQwoUQwsITWyX1/9axHEI4E0I4P0kec1bSoU8vjS5e++GNn7765uSJs599+e38Vg3M2/MhhN5m3N/uxVi0Y3yQ+hujThl7V0cpxgO9h6ldxLidb5QZthu74xplvNKO44vNR4NJvN9tNCex3blf9m/24wUHo/ZunvKEB42tst3KN8rYGRRlbO/EeY134t+2ncEw5mmlfB+U6cNwuBtjfz7O43o2H5ax2Y/n5cvpZrTy8SSMUkyXC82i2yoPb/z7+/xf92an/2icjfKtQafoZ9dq9Rdq9evV+lbRyof51Wqj17p+NVttdyfDqsO80bvRLop2N681i95attpuNqv1erZ6M9/oNPpZvV67UrtcvbaW9i5lr955N+u2stVJfLnTfzTsdAfZ/WIri2esZeu1Ky+uZRfr2du372Z337p16/bdd96/+d6dl26//koa9IdpZavrl9fXq/XL1fX62uFd/+R//T9a/0dp0lNcP+xL5WkH781uHgCHiPofmIeZ1v9LYer1f5hG/T+OeQv1v/r/+K3/cbK/G8jx9tT6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAo+y7pc9fK3dWYvts6v9f6nomtSshhIUQwuM/sRiW9+RcTHmW/mL80u/m8HUllBkm1ziZtjMhhBtp++X/B30XAAAA4Oj64sMLn8RqPf5YmfeEmKX40Gbh3L0p5auEEJZWvp9ClpAeNoVn9z+raPL7fSKMp5StfIB1akrJ4iO3E9PK9rcs7gmnngiVGBZ2Ry7PdF4AAMBB2lsJzLYKAQAAYJY+nvcEmI/yTWv6LH56zXcyhvRC8PSeFgAAAHAIVeY9AQAAAODAlfW/7/8DAACAoy1+/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKzt3k6Q0EAUA+CUQQfGHstx7FXdwDI/g0qXFVTgCXsELcAbcuXVn0RZJa4niMEx+mJn6vqqk6ST1eKHI4nW6GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+vS12iw/f3o7bRtnn9rp5m4AAACAU3bVZll/mDf9WT7+Ih96nftFRJQR8U/hPk5pFE+OYo5ynOrU9Sml6q8cvkTUEQ7fMcnbs4h4l7cfr/r+FQAAAODx2q7Wi6Zab3bzayfEkJpBm/L5+47iFRFRzb91FK087N7c6tJ0fnzo8P8ex8f/nC0uS60e2IrWU2Z+qYfcxl1FO2+UH/ffzfSPpmiacrh0AACAoRxXAgNWIQAAAAzsw7UT4Drqt555Ln6ewD9pmvxC8OlRDwAAAHiALp31DAAAANxHsxvP1vV/6/X/Uu/r/738bv0/AAAAuLNm/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6tKs2y+1qvWgbZ5/a6eZuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjJ/ryjMAyDQRjcJMqrE7qA739Ls2C3bt3MgODj30oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJXH8fI849WYyTZ6nUnePa8kn06Nb6fGr3Pjn2Ssu38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwM7+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzR7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/fu2UcUBAP/aZ7u0gAgBZQhCVGKAhaZuaenKAIoY+BOQotQtAZcfbQZaVaAsbChzFwQjQkigsPV/6NxKXcrWwUORmBiM7nyXvJogDFXu3Obzkd69750u977vIln+3rsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDJ6ey/O8s3CJG6Xx24/uL6e93em+tzN7bvLecvj1j9c/6uDSnyOjMfj8T6HX053Wkv15QMAAMDhlVX1fUQvujuredBeKOr/bnVOXvN/9+wkrur56bq/6qvaP2+//nL/xd2BFibj5Be9sDEcnPx7Kp3sAOc5z5771zM6xZ0vnr1kxS+k/d7WC6NucT9b39y69U6vCI/UkS0A8H+cqPoyqL4P5X2/ycQAODQ6ZcvdK+v/bKHZnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq0NuKp6u4FRHLnb04d+fB9fWin9q/uX13uWpnb9zYTq+ZX6IbERc2hoOTdU3kMXDl6rWP14bDweX6g1ciornRy+CDGc6JaDJDwaMG7fKzY7afOh4RzefcfND0JxMAAE+abtny7+b3ujur+bHWYsT4+4fr/9eSONL6f6pP6//7H569nY6V1v/92mY4/1Y2L322cuXqtTc2Lq1dHFwcfPLmqf5b/dPnzpw5t1I8K1nxxAQAAIBH0ytbWv+3FyNGU+v/x5I4Zqz/P/+2/2U6Vqb+39feol/TmQAAABxuzx//4/fWPsdbvV58sba5ebk/2e7un5psG0j1PztStrT+zxabzgoAAACow2ir9dD6//kkjhnX/5/54aWf0mtmEXG0XP8/sf7p8Hx902nInzOdVcefEx/4VAEAAJhrR8uWrv93i/f/27uvPLQj4vVXJ3H5bwBnqv+zd7/+MR0rff//dH1TnEvtpcn9KPqliM5S0xkBAADwJHuqbHmx/1t3Z/Wjn4+93/P+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/goAAP//2ahGYw==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141842, 0x8c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x4, 0x4}) 1.796332144s ago: executing program 2 (id=2859): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000005d40)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@anchor={'anchor', 0x3d, 0x7}}, {@noadinicb}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@uid_ignore}, {@mode={'mode', 0x3d, 0x8009}}, {@longad}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@undelete}, {@uid_forget}, {@umask={'umask', 0x3d, 0x7fffffff}}]}, 0x1, 0xc6d, &(0x7f0000001980)="$eJzs3U9sHNd9B/DfG5LiSm4rJk4VJ42DTVuksmK5+hdTtgp3VdNsA8iyEIq5BeBKpNSFKZIgqUY23JbppYceAhRFDzkRaIUCKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAAVq4G8zsW3FFkZYsiiIlfz429d2deW/mvZnVDEXwzQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOJ3Xjl77HjaZEXfLjQGAHgozo999diJze7/AMBj6+JW//4HAAAAAAAAAAAAAAD2ihRFPBkp5s6vpYnqfUftXGvg+o3xkdHNq+1PVc2+qnz5VTt+4uSpLz8/fLqb51ozH1L/QftsvDZ28Wz95dlrc/NTCwtTk/Xxmdbl2cmpe97CdutvdKQ6APVrr1+fvHJloX7iuZO3rb4x9P7gE4eGzgw/c/TpbtnxkdHRsfUitd7y/ffdkI6tRnjsiyKORopnv/uT1IyIIrZ/LGoP99xvtL/qxJGqE+Mjo1VHplvNmcVy5YXugSgi6j2VGt1jtPm5iP6Bh9qHrTUilsrmlw0+UnZvbK4537w0PVW/0JxfbC22ZmcupE5ry/7Uo4jTKWI5IlYH79zcQBTRHym+fXAtXcpP/aiOw5eqgcFbt6PYwT7eg7Kd9YGI5eIROGd72GAU8Wqk+Ok7h+Nyvs5U15ovRrxa5vcjbpb5UkQqPxinIt7b5HPEo6k/iviz8vyfWUuT1fWge10597X6V2auzPaU7V5XPuL94Y4rxS7dH/ZvyIdjj1+balFEs7rir6X7/2YHAAAAAAAAAAAAAAAAgAdtfxTxmUjxyr/+QTWuOKpx6QfPDP/u0C/2jhl/6i7bKcs+FxFLxb2Nyd2XBwZeSBdS2uWxxB9ntSjiD/P4v2/udmMAAAAAAAAAAAAAAAAAAAA+1or4caR48d3DaTl65xRvzVytX2xemu7MCtud+7c7Z3q73W7XUycbOSdyLuVczrmSczVnFLl+zkbOiZxLOZdzruRczRl9uX7ORs6JnEs5l3Ou5FzNGf25fs5GzomcSzmXc67kXM0Ze2TuXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0kRRXwQKb71jbUUKSIaERPRyZXB3W4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAaTEV8L1LUf69xa1l/RKTq/47D5R+norGvzE9GY7jMl6JxNmezyv7GN3eh/WzPQCriR5FisPb2rROez/9A592tj0HcfGv93Wf7O9nXXTn0/uAThw6eGR79/FNbvU6bNeDIudbM9Rv18ZHR0bGexf1575/sWTaU91s8mK4TEQtvvPl6c3p6av7+X5Qfgfus3j2T29j7w3yR+ne5qf+/Bw7Cx+lF9O/e3nf778Xt14naLlyb2Hnl/f+9SPGb7/5b94bfuf/X4hc6727d4eNnf7R+/39x44bu8f7fv7Fevv+Xd4LN7v9P9ix7MX83MtAfUVu8NjdwKKK28MabR1vXmlenrk7NnDp27IXh4RdOHhvYF1G70pqe6nn1QA4XAAAAAAAAAAAAAAAAwMOTivjtSNH80VqqR8SNarzW0JnhZ44+3Rd91Xir28ZtvzZ28Wz95dlrc/NTCwtTk/Xxmdbl2cmpe91drRruNT4yuiOduav9O9z+/bWXZ+femG9d/f3FTdcfqJ29tLA437y8+erYH0VEo3fJkarB4yOjVaOnW82ZquqFTQfTf3QDqYh/jxSXT9XTF/KyPP5/4wj/uPnWC7c+C0sbN/QAx/9//sD6+L9P9BQt95lSET+LFL/x50/FF6p2Hog7jlku99eR4sjpz+Vysa8s121D57kCnZGBZdn/jhR//8HtZbvjIZ9cL3v8Ix3cR0B5/g9Giu/96XfiV/Oy25//0Hv+14/fgY0b2qHnP3yqZ9mB255XsO2uk8//0Ujx0pNvx69VS/73Q5//0X1iw+FO4fXnc+zQ+f/lnmVDeb+//qA6DwAAAAAAAAAA8AgbSEX8TaT4wWh/ej4vu5ff/5vcuKEd+v2vT/csm3ww8xXd9cW2DyoAAAAA7BEDqYgfR4qri2/fGkN9+/jvnvGfv7U+/nMkbVhb/Zzvl6rnBjzIn//1Gsr7ndh+twEAAAAAAAAAAAAAAAAAAGBPSamI5/N86hPVeP7JLedTX4kUr/zns7lcOlSW684DP1T9WTs/O3P07PT0bC0Wm5emp+pjc83LU2XdT0WKtb/6XK5bVPOrd+eb78zxvj4X+3ykGP3bbtnOXOzduck784HX2u2I42XZT0SK//i728vmqanz3NHVdk+UZf8yUnz9Hzcve2i97Mmy7HcixQ+/Xu+WPVCW7T4f9dPrZZ+7PFvswFkBAAAAAAAAAAAAAAAAAADg42YgFfEnkeK/ri3fGsuf5/8f6HlbuflWz3z/G9yo5vkfqub/3+r1/cz/Xz1XYGmrvQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOMpRRFvRoq582tpZbB831E715q5fmN8ZHTzavtTVbOvKl9+1Y6fOHnqy88Pn+7mh9d/0D4Tr41dPFt/efba3PzUwsLUZH18pnV5dnLqnrew3fobHakOQP3a69cnr1xZqJ947uRtq28MvT/4xKGhM8PPHH26W3Z8ZHR0rKdM/8B97/0OaYvl+6KIv4gUz373J+kHgxFFbP9Y3OWzs9P2V504UnVifGS06sh0qzmzWK680D0QRUS9p1Kje4zuei7+r91uP6yubKIRsVQ2v2zwkbJ7Y3PN+eal6an6heb8YmuxNTtzIXVaW/anHkWcThHLEbE6eOfmBqKI1yPFtw+upX8ajOjrHocvnR/76rETW7ej2ME+3oOynfWBiOXiXs4ZWxmMIv4hUvz0ncPxz4MR/dH5ii9GvFrm9yNuRud8p/KDcSrivU0+Rzya+qOI/ynP/5m19M5geT3oXlfOfa3+lZkrsz1lu9eVbd4f2u32H5e5e/eHh2mPX5tqUcQPqyv+WvoXf68BAAAAAAAAAAAAAAAA9pAifiVSvPju4VSND741prg1c7V+sXlpujOsrzv2rztmut1ut+upk42cEzmXci7nXMm5mjOKXD9no8xauz2R3y/lXM65knM1Z/Tl+n3VcMV2I7+fyLmUcznnSs7VnNGf6+ds5JzIuZRzOedKztWcsUfG7gEAAAAAAAAAAAAAAAAAAI+Xovovxbe+sZbag535pSeikyvmA33s/TwAAP//9xz3UA==") socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 1.610471888s ago: executing program 3 (id=2861): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000003dc0)={[{@utf8}, {@fat=@dos1xfloppy}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@dmask={'dmask', 0x3d, 0x7f}}, {@fat=@check_normal}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@numtail}, {@uni_xlate}, {@numtail}, {}, {@utf8no}, {@utf8}]}, 0xfd, 0x2bd, &(0x7f0000000600)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 1.428563495s ago: executing program 2 (id=2863): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') 1.357603317s ago: executing program 3 (id=2865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000c00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x6c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x10, 0x0, 0x0, 0xe7, {[@mptcp=@remove_addr={0x1e, 0x41, 0x4, 0x0, "4cd4432f7a3118d5d6a1241faebe56a203fdcfcc346616c08900e250b510e3c387fb50f27e6fee86a0e949674dfce2f9e6382ab763c6bec2fb8a4672facc"}]}}}}}}}, 0x0) 1.299837051s ago: executing program 6 (id=2866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c00028005000100000000000800074000000004080003400065c53c"], 0x90}, 0x1, 0xbb1414ac}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) 1.216415918s ago: executing program 1 (id=2867): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000000180)) 1.113508139s ago: executing program 2 (id=2868): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x80, 0x2, 0x5, 0x828e, 0x3}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x1a9140, 0x0) 1.097619933s ago: executing program 6 (id=2869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x72bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xe, 0x1c6, 0x71, 0x4e, 0xc57, 0x7, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000855}, 0x1000) 1.018081527s ago: executing program 1 (id=2870): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1}) 902.58807ms ago: executing program 6 (id=2871): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e65", 0x4, 0x2) 861.638108ms ago: executing program 1 (id=2872): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x1000000, &(0x7f0000000300)=ANY=[], 0x3, 0x2e1, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file3\x00', 0x109000, 0x101) 828.913816ms ago: executing program 2 (id=2873): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) close_range(r0, 0xffffffffffffffff, 0x0) 614.713447ms ago: executing program 1 (id=2874): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@newtaction={0x14, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000280), 0x227, 0x1) 516.795738ms ago: executing program 6 (id=2875): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='ns/user\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/61, 0x3d) 515.476002ms ago: executing program 2 (id=2876): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) 353.944938ms ago: executing program 1 (id=2877): bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x8000, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0xffffff51) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 340.261854ms ago: executing program 3 (id=2878): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/4096, 0x1000) 195.417654ms ago: executing program 6 (id=2879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 138.561606ms ago: executing program 1 (id=2880): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 110.953671ms ago: executing program 4 (id=2881): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) 108.867308ms ago: executing program 3 (id=2882): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write$P9_RREADDIR(r0, &(0x7f00000005c0)={0x66, 0x29, 0x2, {0x2, [{{0x80, 0x0, 0x7}, 0x7ff, 0x80, 0x21, './debug/ieee80211/phy0/aql_enable'}]}}, 0x44) 0s ago: executing program 6 (id=2883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) kernel console output (not intermixed with test programs): device found: idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 307.628801][ T5705] usb 2-1: config 2 has an invalid interface number: 97 but max is 0 [ 307.628817][ T5705] usb 2-1: config 2 has an invalid descriptor of length 97, skipping remainder of the config [ 307.628829][ T5705] usb 2-1: config 2 has no interface number 0 [ 307.628846][ T5705] usb 2-1: too many endpoints for config 2 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 307.628869][ T5705] usb 2-1: config 2 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 307.628885][ T5705] usb 2-1: config 2 interface 97 has no altsetting 0 [ 307.633574][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 307.633590][ T5705] usb 2-1: Product: syz [ 307.633600][ T5705] usb 2-1: Manufacturer: syz [ 307.633609][ T5705] usb 2-1: SerialNumber: syz [ 307.931858][ T5705] asix 2-1:2.97: probe with driver asix failed with error -22 [ 307.955566][ T5705] usb 2-1: USB disconnect, device number 11 [ 308.276650][T11441] loop6: detected capacity change from 0 to 32768 [ 308.285983][T11441] xfs: Deprecated parameter 'noikeep' [ 308.285995][T11441] XFS: noikeep mount option is deprecated. [ 308.319004][T11441] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 308.425271][T11441] XFS (loop6): Ending clean mount [ 308.451116][T11441] XFS (loop6): Quotacheck needed: Please wait. [ 308.706858][T11441] XFS (loop6): Quotacheck: Done. [ 308.863567][T10588] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 308.975029][T11468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2102'. [ 309.432530][T11477] loop6: detected capacity change from 0 to 512 [ 309.446447][T11477] EXT4-fs (loop6): Test dummy encryption mode enabled [ 309.476463][T11477] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.2104: bg 0: block 7: invalid block bitmap [ 309.476483][T11477] loop6: lost filesystem error report for type 5 error -117 [ 309.489037][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 309.489049][ C0] EXT4-fs (loop6): initial error at time 1790194310: ext4_validate_block_bitmap:436 [ 309.489064][ C0] EXT4-fs (loop6): last error at time 1790194310: ext4_validate_block_bitmap:436 [ 309.528734][T11477] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 309.528749][T11477] loop6: lost filesystem error report for type 5 error -117 [ 309.540959][T11477] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2933: inode #11: comm syz.6.2104: corrupted xattr block 95: invalid header [ 309.540981][T11477] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 309.563035][T11477] EXT4-fs warning (device loop6): ext4_evict_inode:288: xattr delete (err -117) [ 309.563092][T11477] EXT4-fs (loop6): 1 orphan inode deleted [ 309.564200][T11477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.758903][T10588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.049882][ T32] kauditd_printk_skb: 20 callbacks suppressed [ 310.049895][ T32] audit: type=1800 audit(1790194310.782:1981): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 310.147957][ T32] audit: type=1800 audit(1790194310.882:1982): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31555 res=0 errno=0 [ 310.155881][ T32] audit: type=1800 audit(1790194310.882:1983): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31578 res=0 errno=0 [ 310.448375][ T5706] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 310.597650][ T5706] usb 7-1: Using ep0 maxpacket: 8 [ 310.598091][ T5706] usb 7-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 310.605619][ T5706] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 310.605636][ T5706] usb 7-1: config 179 has no interface number 0 [ 310.605661][ T5706] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 310.605677][ T5706] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 310.605694][ T5706] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.605710][ T5706] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 310.605726][ T5706] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 310.605752][ T5706] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.665295][T11491] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 310.714465][ T32] audit: type=1800 audit(1790194311.452:1984): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151288 res=0 errno=0 [ 310.757878][ T32] audit: type=1800 audit(1790194311.492:1985): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=151317 res=0 errno=0 [ 310.764049][ T32] audit: type=1800 audit(1790194311.492:1986): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=151295 res=0 errno=0 [ 310.821130][ T32] audit: type=1800 audit(1790194311.552:1987): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=151296 res=0 errno=0 [ 310.855702][ T32] audit: type=1800 audit(1790194311.582:1988): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=151297 res=0 errno=0 [ 310.905735][ T32] audit: type=1800 audit(1790194311.632:1989): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151337 res=0 errno=0 [ 311.224111][ T5705] usb 7-1: USB disconnect, device number 2 [ 311.224206][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 311.224236][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 311.328640][ T32] audit: type=1800 audit(1790194312.062:1990): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 312.169280][ T192] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 312.318638][ T192] usb 5-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 312.319667][ T192] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 312.319687][ T192] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 312.320582][ T192] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 312.320603][ T192] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 312.322333][ T192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.322350][ T192] usb 5-1: Product: syz [ 312.322361][ T192] usb 5-1: Manufacturer: syz [ 312.322371][ T192] usb 5-1: SerialNumber: syz [ 312.411108][ T5706] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 312.434294][ T192] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 312.474280][ T192] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 312.490576][ T192] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 312.567749][ T5706] usb 7-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 312.568615][ T5706] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.568635][ T5706] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 312.568661][ T5706] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.620170][ T5706] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 312.642466][T11522] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 312.668664][ T5706] usb 5-1: USB disconnect, device number 15 [ 312.710432][ T5706] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 312.735611][ T5706] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 312.775718][ T5706] ti_usb_3410_5052 5-1:2.0: device disconnected [ 313.118713][T11532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2130'. [ 313.373634][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 313.495267][T11547] sg_write: data in/out 372224/136 bytes for SCSI command 0x0-- guessing data in; [ 313.495267][T11547] program syz.1.2137 not setting count and/or reply_len properly [ 313.672566][T11541] netlink: 'syz.2.2134': attribute type 1 has an invalid length. [ 313.686215][ T970] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.686242][ T970] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.696786][ T970] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.697170][ T970] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.889122][T11551] netlink: 'syz.1.2148': attribute type 1 has an invalid length. [ 314.230419][ T192] usb 7-1: USB disconnect, device number 3 [ 314.234420][ T192] idmouse 7-1:1.0: disconnected [ 314.617412][ T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 314.768014][ T9] usb 2-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 314.769022][ T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 314.769039][ T9] usb 2-1: config 0 has no interface number 0 [ 314.769065][ T9] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 314.769083][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 314.769101][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 314.770560][ T9] usb 2-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 314.770576][ T9] usb 2-1: Product: syz [ 314.770586][ T9] usb 2-1: SerialNumber: syz [ 314.772831][ T9] usb 2-1: config 0 descriptor?? [ 314.864153][ T9] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 314.866732][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input19 [ 315.207813][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 315.208037][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 315.208214][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 315.208227][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 315.208245][ T5705] usb 2-1: USB disconnect, device number 12 [ 315.261254][ T5705] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 315.288413][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 315.440030][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 315.440545][ T9] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 315.452547][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.452584][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.485135][ T9] usb 4-1: config 0 descriptor?? [ 315.486327][ T32] kauditd_printk_skb: 50 callbacks suppressed [ 315.486337][ T32] audit: type=1800 audit(1790194316.212:2041): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151996 res=0 errno=0 [ 315.532571][ T32] audit: type=1800 audit(1790194316.262:2042): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=152025 res=0 errno=0 [ 315.537056][ T32] audit: type=1800 audit(1790194316.262:2043): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=152003 res=0 errno=0 [ 315.583007][ T32] audit: type=1800 audit(1790194316.312:2044): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=152004 res=0 errno=0 [ 315.612071][ T32] audit: type=1800 audit(1790194316.342:2045): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=152005 res=0 errno=0 [ 315.647758][ T32] audit: type=1800 audit(1790194316.382:2046): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152045 res=0 errno=0 [ 315.707777][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 315.710461][ T32] audit: type=1800 audit(1790194316.442:2047): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152062 res=0 errno=0 [ 315.947596][ T9] usb 4-1: USB disconnect, device number 16 [ 316.082705][ T32] audit: type=1800 audit(1790194316.812:2048): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 316.303508][T11573] loop6: detected capacity change from 0 to 40427 [ 316.326088][T11573] F2FS-fs (loop6): build fault injection rate: 174 [ 316.326102][T11573] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 316.344803][T11573] F2FS-fs (loop6): invalid crc value [ 316.368507][ T32] audit: type=1800 audit(1790194317.102:2049): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 316.602872][T11573] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 316.693222][T11573] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 316.858877][T10588] syz-executor: attempt to access beyond end of device [ 316.858877][T10588] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 316.893024][T10588] CPU: 0 UID: 0 PID: 10588 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 316.893052][T10588] Tainted: [L]=SOFTLOCKUP [ 316.893059][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 316.893069][T10588] Call Trace: [ 316.893074][T10588] [ 316.893080][T10588] dump_stack_lvl+0xe8/0x150 [ 316.893107][T10588] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 316.893133][T10588] f2fs_write_end_bio+0x112c/0x15f0 [ 316.893164][T10588] __submit_merged_bio+0x258/0x6a0 [ 316.893184][T10588] ? rcu_is_watching+0x16/0xb0 [ 316.893208][T10588] __submit_merged_write_cond+0x426/0x550 [ 316.893235][T10588] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 316.893271][T10588] f2fs_write_data_pages+0x2a1d/0x36f0 [ 316.893309][T10588] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 316.893323][T10588] ? is_bpf_text_address+0x26/0x2b0 [ 316.893352][T10588] ? arch_stack_walk+0xfb/0x150 [ 316.893386][T10588] ? add_lock_to_list+0xc7/0x100 [ 316.893407][T10588] ? lockdep_unlock+0x5c/0xd0 [ 316.893429][T10588] ? __lock_acquire+0x1511/0x2de0 [ 316.893463][T10588] ? do_raw_spin_lock+0x12b/0x2f0 [ 316.893483][T10588] ? do_raw_spin_unlock+0xf5/0x200 [ 316.893497][T10588] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 316.893512][T10588] do_writepages+0x338/0x560 [ 316.893539][T10588] ? do_raw_spin_unlock+0xf5/0x200 [ 316.893555][T10588] filemap_fdatawrite+0x1e9/0x2f0 [ 316.893578][T10588] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 316.893597][T10588] ? add_lock_to_list+0xc7/0x100 [ 316.893647][T10588] ? do_raw_spin_unlock+0xf5/0x200 [ 316.893663][T10588] f2fs_sync_dirty_inodes+0x471/0x970 [ 316.893689][T10588] f2fs_write_checkpoint+0xa07/0x2840 [ 316.893729][T10588] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 316.893780][T10588] kill_f2fs_super+0x2dd/0x700 [ 316.893798][T10588] ? rcu_do_enqueue+0x616/0x870 [ 316.893814][T10588] ? lockdep_hardirqs_on+0x7b/0x110 [ 316.893834][T10588] ? __pfx_kill_f2fs_super+0x10/0x10 [ 316.893860][T10588] ? __pfx_call_rcu+0x10/0x10 [ 316.893883][T10588] ? shrinker_free+0x2a7/0x3b0 [ 316.893906][T10588] deactivate_locked_super+0xbe/0x110 [ 316.893928][T10588] cleanup_mnt+0x3d3/0x460 [ 316.893947][T10588] task_work_run+0x1d9/0x260 [ 316.893966][T10588] ? __pfx_task_work_run+0x10/0x10 [ 316.893989][T10588] exit_to_user_mode_loop+0x204/0x770 [ 316.894007][T10588] ? rcu_is_watching+0x16/0xb0 [ 316.894029][T10588] do_syscall_64+0x328/0x520 [ 316.894047][T10588] ? trace_irq_disable+0x3b/0x140 [ 316.894064][T10588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.894078][T10588] ? clear_bhb_loop+0x70/0xc0 [ 316.894095][T10588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.894108][T10588] RIP: 0033:0x7feb5799f397 [ 316.894121][T10588] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 316.894132][T10588] RSP: 002b:00007fffd5448928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 316.894146][T10588] RAX: 0000000000000000 RBX: 00007feb57a344bb RCX: 00007feb5799f397 [ 316.894155][T10588] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd54489e0 [ 316.894163][T10588] RBP: 00007fffd54489e0 R08: 00007fffd54499e0 R09: 00000000ffffffff [ 316.894172][T10588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd5449a70 [ 316.894180][T10588] R13: 00007feb57a344bb R14: 000000000004d56b R15: 00007fffd5449ab0 [ 316.894202][T10588] [ 316.896365][T10588] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 316.950635][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.070785][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 317.292042][ T9] usb 2-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 317.293151][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.293168][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 317.293191][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.339742][ T32] audit: type=1800 audit(1790194318.072:2050): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152335 res=0 errno=0 [ 317.424814][ T9] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 317.483837][T11583] loop4: detected capacity change from 0 to 32768 [ 317.501625][T11583] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2153 (11583) [ 317.525389][T11583] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 317.525408][T11583] BTRFS info (device loop4): using blake2b checksum algorithm [ 317.612817][T11583] BTRFS info (device loop4): enabling ssd optimizations [ 317.612833][T11583] BTRFS info (device loop4): turning on async discard [ 317.612843][T11583] BTRFS info (device loop4): enabling free space tree [ 317.612855][T11583] BTRFS info (device loop4): use zlib compression, level 3 [ 317.782890][ T5625] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 317.840218][T11618] profile_transition: 1 callbacks suppressed [ 317.840231][T11618] profile_transition: unconfined exec no attachment [ 318.664313][T11640] loop6: detected capacity change from 0 to 2048 [ 318.711363][T11640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.050125][ T9] usb 2-1: USB disconnect, device number 13 [ 319.080449][ T9] idmouse 2-1:1.0: disconnected [ 319.568551][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 319.697599][ T1050] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.697678][ T1050] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.697700][ T1050] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.697721][ T1050] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.736866][ T9] usb 7-1: New USB device found: idVendor=1e7d, idProduct=3232, bcdDevice=0.00 [ 319.746970][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 319.746993][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.778846][ T9] usb 7-1: config 0 descriptor?? [ 320.217141][ T9] hid_parser_main: 49 callbacks suppressed [ 320.217165][ T9] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 320.217184][ T9] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 320.240378][ T9] ryos 0003:1E7D:3232.000A: unknown main item tag 0x3 [ 320.240400][ T9] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 320.240417][ T9] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 320.240432][ T9] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 320.240447][ T9] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 320.240462][ T9] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 320.240477][ T9] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 320.240493][ T9] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 320.240526][ T9] ryos 0003:1E7D:3232.000A: item fetching failed at offset 14/44 [ 320.296536][ T9] ryos 0003:1E7D:3232.000A: parse failed [ 320.296582][ T9] ryos 0003:1E7D:3232.000A: probe with driver ryos failed with error -22 [ 320.416006][ T9] usb 7-1: USB disconnect, device number 4 [ 320.505320][ T32] kauditd_printk_skb: 22 callbacks suppressed [ 320.505332][ T32] audit: type=1800 audit(1790194321.232:2073): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 320.745450][ T32] audit: type=1800 audit(1790194321.472:2074): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 320.976267][ T32] audit: type=1800 audit(1790194321.702:2075): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 321.119819][ T32] audit: type=1800 audit(1790194321.852:2076): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 321.225014][ T32] audit: type=1800 audit(1790194321.952:2077): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 321.373648][ T32] audit: type=1800 audit(1790194322.102:2078): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 321.481656][ T32] audit: type=1800 audit(1790194322.212:2079): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 321.653216][ T32] audit: type=1800 audit(1790194322.382:2080): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 321.744096][ T32] audit: type=1800 audit(1790194322.472:2081): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 321.867936][T11714] loop6: detected capacity change from 0 to 4096 [ 321.924007][ T32] audit: type=1800 audit(1790194322.652:2082): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 321.971974][T11722] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.358560][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 322.508017][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 322.508463][ T9] usb 5-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 322.509288][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.509306][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.509328][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.513891][ T9] usb 5-1: config 0 descriptor?? [ 322.575179][ T9] hub 5-1:0.0: USB hub found [ 322.760789][ T9] hub 5-1:0.0: 1 port detected [ 322.986676][ T9] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 323.015604][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 323.015666][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 323.049335][ T9] usb 5-1: USB disconnect, device number 16 [ 323.251486][T11757] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2226'. [ 323.876858][T11778] kAFS: Invalid Command on /proc/fs/afs/cells file [ 324.112030][T11788] profile_transition: unconfined exec no attachment [ 324.579659][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 324.738231][ T9] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 324.739177][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 324.739195][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 324.740786][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 324.740802][ T9] usb 3-1: Product: syz [ 324.740811][ T9] usb 3-1: Manufacturer: syz [ 324.740820][ T9] usb 3-1: SerialNumber: syz [ 324.742617][ T9] usb 3-1: config 0 descriptor?? [ 324.812952][ T9] usb 3-1: selecting invalid altsetting 0 [ 325.214726][ T9] usb 3-1: USB disconnect, device number 15 [ 325.406426][T11814] netlink: 'syz.1.2250': attribute type 1 has an invalid length. [ 325.406441][T11814] netlink: 'syz.1.2250': attribute type 7 has an invalid length. [ 325.406449][T11814] netlink: 'syz.1.2250': attribute type 8 has an invalid length. [ 325.406457][T11814] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2250'. [ 325.406485][T11814] NCSI netlink: No device for ifindex 1073545264 [ 325.560179][ T32] kauditd_printk_skb: 31 callbacks suppressed [ 325.560191][ T32] audit: type=1800 audit(1790194326.292:2114): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 325.614813][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.760387][T11822] pimreg1: tun_chr_ioctl cmd 1074025677 [ 325.760450][T11822] pimreg1: linktype set to 779 [ 325.761037][ T32] audit: type=1800 audit(1790194326.492:2115): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 325.939855][ T32] audit: type=1800 audit(1790194326.672:2116): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 326.045044][T11834] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 326.152536][ T32] audit: type=1800 audit(1790194326.882:2117): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 326.208190][ T32] audit: type=1800 audit(1790194326.942:2118): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 326.430664][ T32] audit: type=1800 audit(1790194327.162:2119): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 326.504779][ T32] audit: type=1800 audit(1790194327.232:2120): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 326.634005][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 326.634024][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 326.634034][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 326.705809][ T32] audit: type=1800 audit(1790194327.432:2121): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 326.786607][ T32] audit: type=1800 audit(1790194327.512:2122): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 326.862478][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 326.977011][ T32] audit: type=1800 audit(1790194327.702:2123): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 327.103546][T11870] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 327.133365][T11871] pimreg: tun_chr_ioctl cmd 2147767520 [ 327.330835][T11879] sctp: [Deprecated]: syz.6.2281 (pid 11879) Use of int in max_burst socket option. [ 327.330835][T11879] Use struct sctp_assoc_value instead [ 327.357388][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 327.507688][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 327.508465][ T9] usb 2-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 327.509325][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.533888][ T9] usb 2-1: config 0 descriptor?? [ 327.773969][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 327.840309][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 327.852492][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 327.852524][ T9] usb 2-1: media controller created [ 327.914754][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 328.038579][ T9] az6027: usb out operation failed. (-71) [ 328.080172][ T9] az6027: usb out operation failed. (-71) [ 328.080184][ T9] stb0899_attach: Driver disabled by Kconfig [ 328.080191][ T9] az6027: no front-end attached [ 328.080191][ T9] [ 328.135436][ T9] az6027: usb out operation failed. (-71) [ 328.135447][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 328.143758][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 328.170056][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 328.170069][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 328.232971][ T9] usb 2-1: USB disconnect, device number 14 [ 328.359247][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 328.477674][ T5807] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 328.629414][ T5807] usb 3-1: New USB device found: idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 328.630250][ T5807] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 328.630269][ T5807] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 328.633754][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.633769][ T5807] usb 3-1: Product: syz [ 328.633778][ T5807] usb 3-1: Manufacturer: syz [ 328.633787][ T5807] usb 3-1: SerialNumber: syz [ 328.634710][T11914] loop4: detected capacity change from 0 to 4096 [ 328.698965][ T5807] usb 3-1: config 0 descriptor?? [ 328.699705][T11905] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 328.699783][T11905] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 328.925913][T11905] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 328.926000][T11905] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 328.994936][T11923] loop6: detected capacity change from 0 to 2048 [ 329.046032][T11923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.187969][T10588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.341874][ T5807] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 329.542724][ T5807] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 329.567295][ T5807] usb 3-1: USB disconnect, device number 16 [ 330.032940][T11956] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 330.244005][T11964] loop4: detected capacity change from 0 to 1024 [ 330.695402][ T32] kauditd_printk_skb: 57 callbacks suppressed [ 330.695416][ T32] audit: type=1800 audit(1790194331.422:2181): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 330.783267][ T32] audit: type=1800 audit(1790194331.512:2182): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 330.862236][ T32] audit: type=1800 audit(1790194331.592:2183): pid=11982 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.2.2329" name="delete_device" dev="sysfs" ino=44064 res=0 errno=0 [ 330.890487][T11982] i2c i2c-0: delete_device: Can't find device in list [ 330.961797][T11986] jffs2: notice: (11986) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 331.004842][ T32] audit: type=1800 audit(1790194331.732:2184): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 331.070222][ T32] audit: type=1800 audit(1790194331.802:2185): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 331.155261][T11991] loop6: detected capacity change from 0 to 256 [ 331.196710][T11991] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 331.219311][ T32] audit: type=1800 audit(1790194331.952:2186): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 331.385576][ T32] audit: type=1800 audit(1790194332.112:2187): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 331.531638][T12002] loop6: detected capacity change from 0 to 8 [ 331.553911][T12004] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 331.553911][T12004] The task syz.4.2337 (12004) triggered the difference, watch for misbehavior. [ 331.592250][ T32] audit: type=1800 audit(1790194332.322:2188): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 331.798344][ T32] audit: type=1800 audit(1790194332.532:2189): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 331.922511][ T32] audit: type=1800 audit(1790194332.652:2190): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 331.990865][T12014] loop6: detected capacity change from 0 to 64 [ 332.209051][T12020] profile_transition: unconfined exec no attachment [ 332.711275][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2354'. [ 332.887372][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 332.948693][ T5705] kernel write not supported for file /input/mice (pid: 5705 comm: kworker/0:3) [ 333.038477][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 333.043055][ T9] usb 4-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 333.046040][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 333.046056][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.046068][ T9] usb 4-1: config 0 has no interface number 0 [ 333.097687][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.097704][ T9] usb 4-1: Product: syz [ 333.097713][ T9] usb 4-1: Manufacturer: syz [ 333.097722][ T9] usb 4-1: SerialNumber: syz [ 333.103243][ T9] usb 4-1: config 0 descriptor?? [ 333.133079][ T9] f81534 4-1:0.12: required endpoints missing [ 333.372819][ T5807] usb 4-1: USB disconnect, device number 17 [ 333.495566][T12055] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2362'. [ 333.495581][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2362'. [ 333.718417][T12059] loop6: detected capacity change from 0 to 128 [ 333.754316][T12059] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.760189][T12059] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.843201][T12066] loop4: detected capacity change from 0 to 1024 [ 333.881820][T12066] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 333.881958][T12066] System zones: 0-1, 3-8 [ 333.908613][T12066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 333.908670][T12066] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.009955][T10588] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.114674][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 334.549698][T12084] loop4: detected capacity change from 0 to 2048 [ 334.567651][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 334.591751][T12084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.626196][T12084] EXT4-fs (loop4): shut down requested (1) [ 334.700757][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.722792][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 334.735112][ T9] usb 2-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 334.752840][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 334.752860][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 334.758473][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.758489][ T9] usb 2-1: Product: syz [ 334.758499][ T9] usb 2-1: Manufacturer: syz [ 334.758508][ T9] usb 2-1: SerialNumber: syz [ 334.797418][ T9] usb 2-1: config 0 descriptor?? [ 334.825836][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 334.825859][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 334.972709][T12093] loop4: detected capacity change from 0 to 2048 [ 335.029439][T12093] NILFS (loop4): bad btree root (ino=6): level = 5, flags = 0xbd, nchildren = 0 [ 335.029457][T12093] NILFS (loop4): ifile inode (checkpoint number=2) corrupted [ 335.029957][T12093] NILFS (loop4): error -5 while loading last checkpoint (checkpoint number=2) [ 335.321143][T12102] profile_transition: unconfined exec no attachment [ 335.338694][T12101] loop6: detected capacity change from 0 to 764 [ 335.432774][ T9] em28xx 2-1:0.0: chip ID is em2874 [ 335.638297][ T9] usb 2-1: USB disconnect, device number 15 [ 335.642485][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 335.859370][ T32] kauditd_printk_skb: 44 callbacks suppressed [ 335.859382][ T32] audit: type=1800 audit(1790194336.592:2235): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 335.899879][ T9] em28xx: Freeing device [ 335.925681][ T32] audit: type=1800 audit(1790194336.652:2236): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 335.950930][ T32] audit: type=1800 audit(1790194336.682:2237): pid=12116 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.2386" name="quirks" dev="sysfs" ino=59864 res=0 errno=0 [ 336.014354][T12119] loop4: detected capacity change from 0 to 256 [ 336.014941][T12119] exfat: Deprecated parameter 'utf8' [ 336.060992][ T32] audit: type=1800 audit(1790194336.792:2238): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 336.093450][T12119] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 336.221162][T12126] profile_transition: unconfined exec no attachment [ 336.225375][T12124] overlayfs: upper fs does not support file handles, falling back to index=off. [ 336.225389][T12124] overlayfs: fs on './bus' does not support file handles, falling back to xino=off. [ 336.225408][T12124] overlayfs: conflicting lowerdir path [ 336.244549][ T5807] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 336.400554][ T5807] usb 7-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 336.403992][ T5807] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.404006][ T5807] usb 7-1: config 0 has no interfaces? [ 336.405612][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.405627][ T5807] usb 7-1: Product: syz [ 336.405636][ T5807] usb 7-1: Manufacturer: syz [ 336.405645][ T5807] usb 7-1: SerialNumber: syz [ 336.464572][ T5807] usb 7-1: config 0 descriptor?? [ 336.476410][ T32] audit: type=1800 audit(1790194337.202:2239): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154214 res=0 errno=0 [ 336.503227][ T32] audit: type=1800 audit(1790194337.232:2240): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=154246 res=0 errno=0 [ 336.503257][ T32] audit: type=1800 audit(1790194337.232:2241): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=154221 res=0 errno=0 [ 336.506093][ T32] audit: type=1800 audit(1790194337.232:2242): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=154222 res=0 errno=0 [ 336.606690][ T32] audit: type=1800 audit(1790194337.332:2243): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=154243 res=0 errno=0 [ 336.633331][ T32] audit: type=1800 audit(1790194337.362:2244): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=154244 res=0 errno=0 [ 336.712146][ T5807] usb 7-1: USB disconnect, device number 5 [ 336.786423][T12133] loop4: detected capacity change from 0 to 256 [ 336.965349][T12136] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 336.991100][T12136] rtrs_client L2106: : Failed to resolve address, err: -ENODEV [ 336.991171][T12136] rtrs_client L2651: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 337.470498][ T5807] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 337.619350][ T5807] usb 5-1: New USB device found: idVendor=1044, idProduct=7a4d, bcdDevice=0.00 [ 337.620507][ T5807] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 337.620528][ T5807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 337.620547][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.682490][ T5807] usb 5-1: config 0 descriptor?? [ 337.684333][T12146] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 338.099250][ T5705] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 338.143725][ T5807] hid (null): unknown global tag 0xfd [ 338.172365][ T5807] waterforce 0003:1044:7A4D.000B: unexpected long global item [ 338.185255][ T5807] waterforce 0003:1044:7A4D.000B: hid parse failed with -22 [ 338.185320][ T5807] waterforce 0003:1044:7A4D.000B: probe with driver waterforce failed with error -22 [ 338.249609][ T5705] usb 2-1: New USB device found: idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 338.250575][ T5705] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 338.250591][ T5705] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 338.250604][ T5705] usb 2-1: config 150 has no interface number 0 [ 338.250627][ T5705] usb 2-1: config 150 interface 204 has no altsetting 0 [ 338.256451][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.256466][ T5705] usb 2-1: Product: syz [ 338.256475][ T5705] usb 2-1: Manufacturer: syz [ 338.256484][ T5705] usb 2-1: SerialNumber: syz [ 338.349356][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2414'. [ 338.349576][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2414'. [ 338.371953][ T5807] usb 5-1: USB disconnect, device number 17 [ 338.524528][T12179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2417'. [ 338.549683][T12180] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2418'. [ 338.549700][T12180] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2418'. [ 338.552859][ T5705] xr_serial 2-1:150.204: skipping garbage [ 338.552892][ T5705] xr_serial 2-1:150.204: xr_serial converter detected [ 339.166678][ T5705] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 339.166718][ T5705] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 339.224130][ T5705] usb 2-1: USB disconnect, device number 16 [ 339.240235][ T5705] xr_serial 2-1:150.204: device disconnected [ 339.287532][ T5807] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 339.398770][T12208] profile_transition: unconfined exec no attachment [ 339.439594][ T5807] usb 3-1: Using ep0 maxpacket: 16 [ 339.440034][ T5807] usb 3-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 339.440973][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.441002][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.441018][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 339.441032][ T5807] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 339.441046][ T5807] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.524652][ T5807] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 339.524668][ T5807] usb 3-1: Manufacturer: syz [ 339.528398][ T5807] usb 3-1: config 0 descriptor?? [ 339.617334][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 339.767618][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 339.778689][ T9] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 339.779727][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.779743][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.783253][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.783275][ T9] usb 4-1: Product: syz [ 339.783285][ T9] usb 4-1: Manufacturer: syz [ 339.783295][ T9] usb 4-1: SerialNumber: syz [ 339.868738][ T9] usb 4-1: 0:2 : does not exist [ 339.910351][T12217] profile_transition: unconfined exec no attachment [ 340.004278][T12219] profile_transition: unconfined exec no attachment [ 340.047508][ T5807] rc_core: IR keymap rc-hauppauge not found [ 340.047519][ T5807] Registered IR keymap rc-empty [ 340.047637][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 340.070807][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 340.093078][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 340.093939][ T5807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 340.124122][ T5807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 340.152483][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 340.169326][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 340.189415][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 340.211542][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 340.228671][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 340.249131][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 340.268420][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 340.287346][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 340.307624][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 340.327312][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 340.349920][ T5807] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 340.349933][ T5807] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 340.426425][ T9] usb 4-1: USB disconnect, device number 18 [ 340.441435][ T5807] usb 3-1: USB disconnect, device number 17 [ 340.527191][ T5612] Bluetooth: hci1: link tx timeout [ 340.535305][ T5612] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.558916][ T5612] Bluetooth: hci1: link tx timeout [ 340.558927][ T5612] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.568136][ T5612] Bluetooth: hci1: link tx timeout [ 340.568146][ T5612] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.611233][ T5612] Bluetooth: hci1: link tx timeout [ 340.611243][ T5612] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.634339][ T5612] Bluetooth: hci1: link tx timeout [ 340.634349][ T5612] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.661117][ T5612] Bluetooth: hci1: link tx timeout [ 340.661128][ T5612] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.662284][ T5612] Bluetooth: hci1: link tx timeout [ 340.662292][ T5612] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.711372][ T5612] Bluetooth: hci1: link tx timeout [ 340.711383][ T5612] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 340.811562][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.949924][ T32] kauditd_printk_skb: 64 callbacks suppressed [ 340.949936][ T32] audit: type=1800 audit(1790194341.682:2309): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 341.034366][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'. [ 341.056290][T12237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.183485][ T32] audit: type=1800 audit(1790194341.912:2310): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 341.246436][T12241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2446'. [ 341.360105][ T32] audit: type=1800 audit(1790194342.092:2311): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 341.523563][ T32] audit: type=1800 audit(1790194342.252:2312): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 341.594365][ T32] audit: type=1800 audit(1790194342.322:2313): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 341.680126][T12258] nfsd: exp_rootfh path not found ./export_dir [ 341.783153][ T32] audit: type=1800 audit(1790194342.512:2314): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 341.989502][ T32] audit: type=1800 audit(1790194342.722:2315): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 342.197154][ T32] audit: type=1800 audit(1790194342.922:2316): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 342.297660][T12278] loop6: detected capacity change from 0 to 512 [ 342.305977][T12278] EXT4-fs: Ignoring removed nobh option [ 342.305991][T12278] EXT4-fs: Ignoring removed oldalloc option [ 342.329475][T12278] EXT4-fs: old and new quota format mixing [ 342.382893][ T32] audit: type=1800 audit(1790194343.112:2317): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 342.453892][T12280] program syz.1.2464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.578694][T12260] loop4: detected capacity change from 0 to 32768 [ 342.628356][ T4928] Bluetooth: hci1: command 0x0406 tx timeout [ 342.652817][ T32] audit: type=1800 audit(1790194343.382:2318): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 342.730993][T12260] JBD2: Ignoring recovery information on journal [ 342.836294][T12260] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 343.093590][ T5625] ocfs2: Unmounting device (7,4) on (node local) [ 343.110961][T12295] SQUASHFS error: Failed to read block 0x0: -5 [ 343.228136][T12299] loop4: detected capacity change from 0 to 512 [ 343.257975][T12299] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.2471: bg 0: block 5: invalid block bitmap [ 343.257995][T12299] loop4: lost filesystem error report for type 5 error -117 [ 343.270482][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 343.270495][ C0] EXT4-fs (loop4): initial error at time 1790194343: ext4_validate_block_bitmap:436 [ 343.270509][ C0] EXT4-fs (loop4): last error at time 1790194343: ext4_validate_block_bitmap:436 [ 343.297401][T12299] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 343.297416][T12299] loop4: lost filesystem error report for type 5 error -117 [ 343.317808][T12299] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2471: invalid indirect mapped block 3 (level 2) [ 343.317833][T12299] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 343.340047][T12299] EXT4-fs (loop4): 1 orphan inode deleted [ 343.340060][T12299] EXT4-fs (loop4): 1 truncate cleaned up [ 343.341143][T12299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.495282][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.712511][T12311] loop4: detected capacity change from 0 to 1024 [ 343.775430][T12311] hfsplus: bad catalog entry type [ 344.001526][T12322] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2481'. [ 344.624740][T12342] tap0: tun_chr_ioctl cmd 2147767506 [ 345.272537][T12362] bridge_slave_0: default FDB implementation only supports local addresses [ 345.364747][ T9] kernel read not supported for file /sysvipc/msg (pid: 9 comm: kworker/0:0) [ 345.496343][T12369] program syz.3.2503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.931058][T12388] program syz.3.2513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.994460][ T32] kauditd_printk_skb: 22 callbacks suppressed [ 345.994472][ T32] audit: type=1800 audit(1790194346.722:2341): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 346.079542][ T32] audit: type=1800 audit(1790194346.792:2342): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 346.269026][T12400] aa_policy_admin_capable: cap_mac_admin? 1 [ 346.269039][T12400] aa_policy_admin_capable: policy locked? 0 [ 346.269115][T12400] unpack_pdb: unpacking tags [ 346.269121][T12400] unpack_pdb: done unpacking tags [ 346.269197][T12400] aa_free_profile: aa_free_profile(ffff888022b28400) [ 346.269292][ T32] audit: type=1400 audit(1790194347.002:2343): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=12396 comm="syz.1.2519" name="foo" offset=35 [ 346.290723][T12394] loop4: detected capacity change from 0 to 4096 [ 346.347298][T12394] EXT4-fs (loop4): Test dummy encryption mode enabled [ 346.361004][T12394] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec028, mo2=0002] [ 346.361076][T12394] System zones: 0-5 [ 346.434494][T12394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.705563][T12408] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 346.716892][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.817677][ T32] audit: type=1800 audit(1790194347.552:2344): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 347.022530][ T32] audit: type=1800 audit(1790194347.752:2345): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155196 res=0 errno=0 [ 347.126687][ T32] audit: type=1800 audit(1790194347.852:2346): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 347.212484][ T32] audit: type=1800 audit(1790194347.942:2347): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 347.393324][ T32] audit: type=1800 audit(1790194348.122:2348): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 347.582535][ T32] audit: type=1800 audit(1790194348.312:2349): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 347.665476][T12433] loop6: detected capacity change from 0 to 128 [ 347.722727][ T32] audit: type=1800 audit(1790194348.452:2350): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 347.953691][T12440] profile_transition: unconfined exec no attachment [ 348.004320][T12441] Cannot find set identified by id 4 to match [ 348.100455][T12446] profile_transition: unconfined exec no attachment [ 348.727783][ T5807] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 348.755424][T12464] profile_transition: unconfined exec no attachment [ 348.833133][T12467] profile_transition: unconfined exec no attachment [ 348.877602][ T5807] usb 4-1: Using ep0 maxpacket: 8 [ 348.889992][ T5807] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 348.901701][ T5807] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 348.901732][ T5807] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.901746][ T5807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.901760][ T5807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.901775][ T5807] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.901799][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.064202][T12462] netdevsim netdevsim6 netdevsim0: IPsec offload requires 128 bit authentication [ 349.203205][ T5807] usb 4-1: GET_CAPABILITIES returned 0 [ 349.203284][ T5807] usbtmc 4-1:16.0: can't read capabilities [ 349.237290][ T5705] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 349.389631][ T5705] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 349.389660][ T5705] usb 5-1: too many configurations: 21, using maximum allowed: 8 [ 349.390718][ T5705] usb 5-1: config index 0 descriptor too short (expected 45, got 28) [ 349.390735][ T5705] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 349.390762][ T5705] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.392091][ T5705] usb 5-1: config index 1 descriptor too short (expected 45, got 28) [ 349.392107][ T5705] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 349.392132][ T5705] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.394631][ T5705] usb 5-1: config index 2 descriptor too short (expected 45, got 28) [ 349.394646][ T5705] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 349.394674][ T5705] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.427108][ T5705] usb 5-1: config index 3 descriptor too short (expected 45, got 28) [ 349.427126][ T5705] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 349.427152][ T5705] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.467765][ T5705] usb 5-1: config index 4 descriptor too short (expected 45, got 28) [ 349.467783][ T5705] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 349.467810][ T5705] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.579048][ T5705] usb 5-1: config index 5 descriptor too short (expected 45, got 28) [ 349.579067][ T5705] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 349.579093][ T5705] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.579971][ T5705] usb 5-1: config index 6 descriptor too short (expected 45, got 28) [ 349.579986][ T5705] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 349.580010][ T5705] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.580778][ T5705] usb 5-1: config index 7 descriptor too short (expected 45, got 28) [ 349.580793][ T5705] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 349.580817][ T5705] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.585761][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.585776][ T5705] usb 5-1: Product: syz [ 349.585785][ T5705] usb 5-1: Manufacturer: syz [ 349.585794][ T5705] usb 5-1: SerialNumber: syz [ 349.714519][ T9] usb 4-1: USB disconnect, device number 19 [ 349.747108][ T5705] rtl8150 5-1:1.0: couldn't find required endpoints [ 349.761115][ T5705] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 349.935948][T12486] ipvlan0: entered promiscuous mode [ 349.945175][T12486] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 349.945647][T12486] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 349.968887][ T9] usb 5-1: USB disconnect, device number 18 [ 350.332810][T12499] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 351.034636][ T32] kauditd_printk_skb: 32 callbacks suppressed [ 351.034648][ T32] audit: type=1800 audit(1790194351.762:2383): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 351.250663][ T5807] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 351.401039][ T5807] usb 5-1: New USB device found: idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 351.404166][ T5807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.404196][ T5807] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 351.404213][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 351.404230][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 188, setting to 64 [ 351.404247][ T5807] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 351.481212][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 351.481230][ T5807] usb 5-1: Product: syz [ 351.481240][ T5807] usb 5-1: Manufacturer: syz [ 351.481250][ T5807] usb 5-1: SerialNumber: syz [ 351.500432][ T5807] usb 5-1: config 0 descriptor?? [ 351.505399][T12519] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 351.518099][ T32] audit: type=1800 audit(1790194352.252:2384): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155635 res=0 errno=0 [ 351.560656][ T32] audit: type=1800 audit(1790194352.292:2385): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=155667 res=0 errno=0 [ 351.560687][ T32] audit: type=1800 audit(1790194352.292:2386): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=155642 res=0 errno=0 [ 351.610605][ T32] audit: type=1800 audit(1790194352.342:2387): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=155643 res=0 errno=0 [ 351.692677][T12537] profile_transition: unconfined exec no attachment [ 351.759150][ T5807] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 351.759167][ T5807] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 351.958710][ T5807] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 351.958746][ T5807] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 351.958759][ T5807] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 352.159813][ T5807] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 352.160054][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 352.160255][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 352.160429][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 352.160602][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 352.160784][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 352.160889][ T5807] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 352.161187][ T5807] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 352.224949][ T32] audit: type=1800 audit(1790194352.962:2388): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=155664 res=0 errno=0 [ 352.258406][ T32] audit: type=1800 audit(1790194352.992:2389): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=155665 res=0 errno=0 [ 352.260634][ T5807] usb 5-1: USB disconnect, device number 19 [ 352.302876][ T32] audit: type=1800 audit(1790194353.032:2390): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=155644 res=0 errno=0 [ 352.605848][ T32] audit: type=1800 audit(1790194353.332:2391): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 352.683643][T12564] syz.6.2591 uses obsolete (PF_INET,SOCK_PACKET) [ 352.781431][ T32] audit: type=1800 audit(1790194353.512:2392): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 353.197681][ T5807] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 353.348429][ T5807] usb 3-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 353.349297][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.351107][ T5807] usb 3-1: config 0 descriptor?? [ 353.383047][ T5807] cp210x 3-1:0.0: cp210x converter detected [ 353.433755][ T5705] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 353.578432][ T5705] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 353.579287][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.579307][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.579320][ T5705] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 353.579354][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.585546][ T5705] usb 5-1: config 0 descriptor?? [ 353.783384][ T5807] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 353.984611][ T5807] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 353.984646][ T5807] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 354.012785][ T5807] usb 3-1: cp210x converter now attached to ttyUSB0 [ 354.033271][ T5807] usb 3-1: USB disconnect, device number 18 [ 354.046994][ T5705] hid_parser_main: 3 callbacks suppressed [ 354.047008][ T5705] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 354.047028][ T5705] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 354.047044][ T5705] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 354.047060][ T5705] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 354.047075][ T5705] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 354.047091][ T5705] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 354.047111][ T5705] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 354.047127][ T5705] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 354.047143][ T5705] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 354.047158][ T5705] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 354.144035][ T5807] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 354.144351][ T5807] cp210x 3-1:0.0: device disconnected [ 354.412062][ T5705] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 354.437973][ T5705] usb 5-1: USB disconnect, device number 20 [ 354.440677][T12603] profile_transition: unconfined exec no attachment [ 354.443528][T12603] udevd[12603]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 354.649973][ T5807] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 354.808745][ T5807] usb 7-1: Using ep0 maxpacket: 8 [ 354.810797][ T5807] usb 7-1: New USB device found: idVendor=0e41, idProduct=4249, bcdDevice=0.40 [ 354.814325][ T5807] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.814341][ T5807] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.854196][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.854212][ T5807] usb 7-1: Product: syz [ 354.854221][ T5807] usb 7-1: Manufacturer: syz [ 354.854231][ T5807] usb 7-1: SerialNumber: syz [ 355.134952][ T5807] usb 7-1: unit 6 not found! [ 355.278054][ T5807] usb 7-1: USB disconnect, device number 6 [ 355.388154][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.704442][T12636] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 355.705203][T12635] loop7: detected capacity change from 0 to 7 [ 355.902171][T12635] Dev loop7: unable to read RDB block 7 [ 355.902201][T12635] loop7: unable to read partition table [ 355.902329][T12635] loop7: partition table beyond EOD, truncated [ 355.913663][T12635] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 355.969828][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 355.969977][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 356.115231][ T32] kauditd_printk_skb: 40 callbacks suppressed [ 356.115242][ T32] audit: type=1800 audit(1790194356.842:2433): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 356.254204][ T32] audit: type=1800 audit(1790194356.982:2434): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 356.535429][T12630] batman_adv: batadv0: Interface deactivated: macsec1 [ 356.551353][T12636] netlink: 'syz.3.2624': attribute type 12 has an invalid length. [ 356.562905][ T5705] s`z1: Port: 1 Link DOWN [ 356.563274][T12646] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2629'. [ 356.563305][T12646] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2629'. [ 356.592670][ T1050] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.592752][ T1050] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.592774][ T1050] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.592795][ T1050] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.725431][ T32] audit: type=1800 audit(1790194357.452:2435): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 356.897287][ T32] audit: type=1800 audit(1790194357.622:2436): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 357.124923][ T32] audit: type=1800 audit(1790194357.852:2437): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 357.230950][ T32] audit: type=1800 audit(1790194357.962:2438): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 357.278090][T12674] dlm: non-version read from control device 4096 [ 357.308152][T12677] aa_policy_admin_capable: cap_mac_admin? 1 [ 357.308164][T12677] aa_policy_admin_capable: policy locked? 0 [ 357.308238][T12677] unpack_pdb: unpacking tags [ 357.308244][T12677] unpack_pdb: done unpacking tags [ 357.308263][T12677] unpack_pdb: unpacking tags [ 357.308269][T12677] unpack_pdb: done unpacking tags [ 357.308521][ T32] audit: type=1400 audit(1790194358.042:2439): apparmor="STATUS" operation="profile_load" info="failed to create" error=-2 profile="unconfined" name="//o" pid=12675 comm="syz.1.2644" [ 357.461592][ T32] audit: type=1800 audit(1790194358.192:2440): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 357.561061][ T32] audit: type=1800 audit(1790194358.292:2441): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 357.591020][T12685] aa_policy_admin_capable: cap_mac_admin? 1 [ 357.591032][T12685] aa_policy_admin_capable: policy locked? 0 [ 357.591122][T12685] aa_free_profile: aa_free_profile(0000000000000000) [ 357.591198][ T32] audit: type=1400 audit(1790194358.322:2442): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=12682 comm="syz.3.2648" name="unknown" offset=16 [ 357.929855][T12697] loop6: detected capacity change from 0 to 256 [ 357.950860][T12697] exfat: Deprecated parameter 'utf8' [ 357.950941][T12697] exfat: Deprecated parameter 'namecase' [ 358.017318][T12697] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 358.186034][T12704] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 358.412071][T12710] bond0: entered promiscuous mode [ 358.412089][T12710] bond_slave_0: entered promiscuous mode [ 358.412239][T12710] bond_slave_1: entered promiscuous mode [ 358.622603][T12716] loop4: detected capacity change from 0 to 2048 [ 358.666311][T12716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.740896][T12715] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 359.075031][T12710] bond0: left promiscuous mode [ 359.075048][T12710] bond_slave_0: left promiscuous mode [ 359.075255][T12710] bond_slave_1: left promiscuous mode [ 359.119589][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.362871][T12727] i2c i2c-0: new_device: Can't parse I2C address [ 359.592549][T12733] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2669'. [ 360.199464][T12753] loop4: detected capacity change from 0 to 764 [ 361.085171][T12761] profile_transition: unconfined exec no attachment [ 361.352061][ T32] kauditd_printk_skb: 22 callbacks suppressed [ 361.352075][ T32] audit: type=1800 audit(1790194362.082:2465): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 361.440309][T12767] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.440679][T12767] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.593749][ T32] audit: type=1800 audit(1790194362.322:2466): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 361.673221][ T32] audit: type=1800 audit(1790194362.402:2467): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156453 res=0 errno=0 [ 361.675791][ T32] audit: type=1800 audit(1790194362.402:2468): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156464 res=0 errno=0 [ 361.768559][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.785976][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.787509][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.803945][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.812635][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.860998][ T32] audit: type=1800 audit(1790194362.592:2469): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156494 res=0 errno=0 [ 361.861509][ T32] audit: type=1800 audit(1790194362.592:2470): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156483 res=0 errno=0 [ 361.925874][T12784] profile_transition: unconfined exec no attachment [ 361.936713][T12767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.966192][T12767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.025982][ T32] audit: type=1800 audit(1790194362.752:2471): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 362.088968][T12788] profile_transition: unconfined exec no attachment [ 362.259342][T12767] gretap0: left allmulticast mode [ 362.259437][T12767] macvlan2: left allmulticast mode [ 362.265245][T12792] profile_transition: unconfined exec no attachment [ 362.268157][ T970] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.268817][ T970] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.268838][ T970] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.268859][ T970] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.339078][ T5705] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 362.453176][T12793] profile_transition: unconfined exec no attachment [ 362.458023][ T32] audit: type=1800 audit(1790194363.182:2472): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 362.507817][ T5705] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 362.508646][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.508674][ T5705] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 362.508689][ T5705] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 362.508703][ T5705] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 362.508727][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.512141][T12789] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 362.512207][T12789] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 362.605993][ T32] audit: type=1800 audit(1790194363.332:2473): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156513 res=0 errno=0 [ 362.631777][ T32] audit: type=1800 audit(1790194363.362:2474): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=156542 res=0 errno=0 [ 362.670772][ T5705] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 362.675389][ T5705] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 362.675442][ T5705] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 362.706737][T12799] loop6: detected capacity change from 0 to 256 [ 362.730610][ T5705] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 362.731660][ T5705] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 362.731710][ T5705] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 362.769722][ T5705] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 362.814625][T12800] profile_transition: unconfined exec no attachment [ 363.033143][T12803] profile_transition: unconfined exec no attachment [ 363.241673][T12810] profile_transition: unconfined exec no attachment [ 363.351081][T12811] profile_transition: unconfined exec no attachment [ 363.428317][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 363.486165][ T192] usb 5-1: USB disconnect, device number 21 [ 363.514897][ T192] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 363.548949][ T192] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 363.549530][ T192] keyspan 5-1:1.0: device disconnected [ 363.588089][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 363.590472][ T9] usb 7-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 363.591726][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.621607][T12814] profile_transition: unconfined exec no attachment [ 363.629046][ T9] usb 7-1: config 0 descriptor?? [ 363.655442][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 363.687334][ T1050] bridge_slave_1: left allmulticast mode [ 363.687349][ T1050] bridge_slave_1: left promiscuous mode [ 363.687501][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.721741][ T1050] bridge_slave_0: left allmulticast mode [ 363.721756][ T1050] bridge_slave_0: left promiscuous mode [ 363.721902][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.908613][ T5612] Bluetooth: hci3: command tx timeout [ 364.205395][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.220487][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.240967][ T1050] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 364.258929][ T1050] bond0 (unregistering): Released all slaves [ 364.479885][ T9] gspca_vc032x: reg_w err -71 [ 364.479936][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.479944][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.479950][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.479956][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.479962][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.479967][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.479972][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.479978][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.479983][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.479989][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.479994][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.480000][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.480005][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.480011][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.480016][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.480021][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.480027][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.480032][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.480052][ T9] gspca_vc032x: Unknown sensor... [ 364.480096][ T9] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 364.521323][ T9] usb 7-1: USB disconnect, device number 7 [ 365.255920][ T1050] hsr_slave_0: left promiscuous mode [ 365.276093][ T1050] hsr_slave_1: left promiscuous mode [ 365.276629][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.295566][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.987657][ T5612] Bluetooth: hci3: command tx timeout [ 366.087799][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 366.142125][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 366.145975][T12870] profile_transition: 7 callbacks suppressed [ 366.145986][T12870] profile_transition: unconfined exec no attachment [ 366.208170][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 366.255490][ T9] usb 7-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 366.255516][ T9] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 366.267801][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.267830][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.267847][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 366.318116][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.318146][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.318163][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 366.321896][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.321925][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.321942][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 366.335868][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.335897][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.335913][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 366.355206][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.355235][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.355250][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 366.411029][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.411061][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.411078][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 366.430187][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.430216][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.430232][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 366.466848][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.466895][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.466912][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 366.549711][ T9] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 366.549736][ T9] usb 7-1: Product: syz [ 366.549748][ T9] usb 7-1: Manufacturer: syz [ 366.549758][ T9] usb 7-1: SerialNumber: syz [ 366.576087][ T9] usb 7-1: config 0 descriptor?? [ 366.589184][ T9] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 366.627091][ T32] kauditd_printk_skb: 55 callbacks suppressed [ 366.627103][ T32] audit: type=1800 audit(1790194367.352:2530): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158212 res=0 errno=0 [ 366.627133][ T32] audit: type=1800 audit(1790194367.352:2531): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=158244 res=0 errno=0 [ 366.627158][ T32] audit: type=1800 audit(1790194367.352:2532): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=158219 res=0 errno=0 [ 366.627253][ T32] audit: type=1800 audit(1790194367.352:2533): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=158220 res=0 errno=0 [ 366.749107][ T32] audit: type=1800 audit(1790194367.472:2534): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=158241 res=0 errno=0 [ 366.749138][ T32] audit: type=1800 audit(1790194367.472:2535): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=158242 res=0 errno=0 [ 366.749164][ T32] audit: type=1800 audit(1790194367.472:2536): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=158221 res=0 errno=0 [ 366.749204][ T32] audit: type=1800 audit(1790194367.472:2537): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=158243 res=0 errno=0 [ 366.865031][ T32] audit: type=1800 audit(1790194367.592:2538): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158264 res=0 errno=0 [ 366.866328][ T32] audit: type=1800 audit(1790194367.592:2539): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158283 res=0 errno=0 [ 366.914193][T12874] loop4: detected capacity change from 0 to 4096 [ 366.976696][T12874] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 367.051173][T12874] ntfs3(loop4): ino=1a, mi_enum_attr [ 367.051344][T12874] ntfs3(loop4): ino=1a, mi_enum_attr [ 367.051359][T12874] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 367.057296][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 367.072980][ T9] usb 7-1: USB disconnect, device number 8 [ 367.193764][ T9] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 367.275716][T12871] ntfs3(loop4): ino=1e, "file1" attr_set_size_ex [ 367.636537][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 367.703543][T12884] profile_transition: unconfined exec no attachment [ 367.844370][T12885] profile_transition: unconfined exec no attachment [ 367.926987][T12890] profile_transition: unconfined exec no attachment [ 367.942993][T12889] loop6: detected capacity change from 0 to 512 [ 368.005330][T12889] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.2729: bg 0: block 7: invalid block bitmap [ 368.005351][T12889] loop6: lost filesystem error report for type 5 error -117 [ 368.017903][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 368.017917][ C0] EXT4-fs (loop6): initial error at time 1790194368: ext4_validate_block_bitmap:436 [ 368.017933][ C0] EXT4-fs (loop6): last error at time 1790194368: ext4_validate_block_bitmap:436 [ 368.019940][ T1050] IPVS: stop unused estimator thread 0... [ 368.047693][T12889] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 368.047710][T12889] loop6: lost filesystem error report for type 5 error -117 [ 368.073317][ T5612] Bluetooth: hci3: command tx timeout [ 368.104898][T12889] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2933: inode #11: comm syz.6.2729: corrupted xattr block 95: invalid header [ 368.104920][T12889] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 368.120033][T12889] EXT4-fs warning (device loop6): ext4_evict_inode:288: xattr delete (err -117) [ 368.120090][T12889] EXT4-fs (loop6): 1 orphan inode deleted [ 368.121365][T12889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.261086][T12893] profile_transition: unconfined exec no attachment [ 368.460692][T10588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.581599][T12899] syz.1.2731 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 368.650003][T12903] profile_transition: unconfined exec no attachment [ 368.839200][T12777] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.839265][T12777] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.839342][T12777] bridge_slave_0: entered allmulticast mode [ 368.882969][T12777] bridge_slave_0: entered promiscuous mode [ 368.892341][T12909] i2c i2c-0: delete_device: Extra parameters [ 368.904729][T12777] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.909661][T12777] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.909745][T12777] bridge_slave_1: entered allmulticast mode [ 368.925752][T12777] bridge_slave_1: entered promiscuous mode [ 368.979126][T12911] profile_transition: unconfined exec no attachment [ 369.092099][T12777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.117090][T12777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.294228][T12777] team0: Port device team_slave_0 added [ 369.309278][T12777] team0: Port device team_slave_1 added [ 369.327582][T12922] profile_transition: unconfined exec no attachment [ 369.459415][T12777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.459434][T12777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.459452][T12777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.523234][T12777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.523245][T12777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.523262][T12777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.713557][T12931] profile_transition: unconfined exec no attachment [ 369.796243][T12777] hsr_slave_0: entered promiscuous mode [ 369.818069][T12777] hsr_slave_1: entered promiscuous mode [ 369.818555][T12777] debugfs: 'hsr0' already exists in 'hsr' [ 369.818567][T12777] Cannot create hsr debugfs directory [ 369.934983][T12932] profile_transition: unconfined exec no attachment [ 370.148359][ T5612] Bluetooth: hci3: command tx timeout [ 370.343763][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 370.605742][T12926] loop6: detected capacity change from 0 to 32768 [ 370.653001][T12926] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 370.738141][T12926] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 370.773693][T12926] XFS (loop6): Starting recovery (logdev: internal) [ 370.874241][T12926] XFS (loop6): Ending recovery (logdev: internal) [ 371.204954][T10588] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 371.269366][T12965] profile_transition: 3 callbacks suppressed [ 371.269378][T12965] profile_transition: unconfined exec no attachment [ 371.540069][T12967] profile_transition: unconfined exec no attachment [ 371.702280][T12968] profile_transition: unconfined exec no attachment [ 371.791246][T12974] profile_transition: unconfined exec no attachment [ 371.846396][ T32] kauditd_printk_skb: 23 callbacks suppressed [ 371.846409][ T32] audit: type=1804 audit(1790194372.572:2563): pid=12977 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2751" name="/newroot/proc/asound/seq/clients" dev="proc" ino=4026532317 res=1 errno=0 [ 372.078515][T12984] profile_transition: unconfined exec no attachment [ 372.084730][ T32] audit: type=1800 audit(1790194372.812:2564): pid=12983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.2753" name="cur_state" dev="sysfs" ino=5812 res=0 errno=0 [ 372.123839][T12980] pimreg1: tun_chr_ioctl cmd 1074025681 [ 372.182471][ T32] audit: type=1800 audit(1790194372.912:2565): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163044 res=0 errno=0 [ 372.245525][ T32] audit: type=1800 audit(1790194372.972:2566): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163055 res=0 errno=0 [ 372.272369][ T4928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.289778][ T4928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.290603][ T4928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.291121][ T4928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.291473][ T4928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.353005][ T32] audit: type=1800 audit(1790194373.082:2567): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163085 res=0 errno=0 [ 372.377710][ T32] audit: type=1800 audit(1790194373.112:2568): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163074 res=0 errno=0 [ 372.428196][T12989] profile_transition: unconfined exec no attachment [ 372.456953][T12991] profile_transition: unconfined exec no attachment [ 372.494501][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2755'. [ 372.556986][T12995] profile_transition: unconfined exec no attachment [ 372.601825][T12997] profile_transition: unconfined exec no attachment [ 372.690686][ T32] audit: type=1800 audit(1790194373.412:2569): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 372.755147][T12992] ipvlan2: entered allmulticast mode [ 372.866216][T13002] profile_transition: unconfined exec no attachment [ 373.023805][ T32] audit: type=1800 audit(1790194373.752:2570): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24626 res=0 errno=0 [ 373.066434][ T32] audit: type=1800 audit(1790194373.792:2571): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 373.200337][ T32] audit: type=1800 audit(1790194373.932:2572): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163172 res=0 errno=0 [ 373.893114][T13024] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 374.391238][ T4928] Bluetooth: hci4: command tx timeout [ 374.638185][ T1135] bond0 (unregistering): Released all slaves [ 375.104483][T12777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 375.170942][T12777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.172845][T12777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 375.204325][T12777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.245886][T12777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.271119][T12777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 375.275326][T12777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.312283][T12777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.473022][ T1135] hsr_slave_0: left promiscuous mode [ 375.475034][ T1135] hsr_slave_1: left promiscuous mode [ 375.475556][ T1135] batman_adv: batadv0: Removing interface: macvtap1 [ 376.029830][T13086] program syz.6.2780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.349799][T13091] profile_transition: 19 callbacks suppressed [ 376.349815][T13091] profile_transition: unconfined exec no attachment [ 376.467693][ T4928] Bluetooth: hci4: command tx timeout [ 376.504964][T13094] profile_transition: unconfined exec no attachment [ 376.515692][T13095] profile_transition: unconfined exec no attachment [ 376.686957][T13098] profile_transition: unconfined exec no attachment [ 376.943947][T13104] profile_transition: unconfined exec no attachment [ 377.152032][ T1135] IPVS: stop unused estimator thread 0... [ 377.219237][T13110] profile_transition: unconfined exec no attachment [ 377.422971][T13117] profile_transition: unconfined exec no attachment [ 377.460794][T12777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.511164][T13119] profile_transition: unconfined exec no attachment [ 377.525765][T12777] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.569345][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.569407][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.594080][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.594142][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.615979][T13096] loop6: detected capacity change from 0 to 32768 [ 377.616544][T13096] ocfs2: Unknown parameter 'cohesency' [ 377.689807][ T32] kauditd_printk_skb: 30 callbacks suppressed [ 377.689818][ T32] audit: type=1800 audit(1790194378.422:2603): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 377.734367][T13122] profile_transition: unconfined exec no attachment [ 377.939937][T13126] profile_transition: unconfined exec no attachment [ 378.372162][T12987] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.373902][T12987] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.373990][T12987] bridge_slave_0: entered allmulticast mode [ 378.395077][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.421844][T12987] bridge_slave_0: entered promiscuous mode [ 378.436481][T12987] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.438698][T12987] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.438783][T12987] bridge_slave_1: entered allmulticast mode [ 378.474530][T12987] bridge_slave_1: entered promiscuous mode [ 378.547680][ T4928] Bluetooth: hci4: command tx timeout [ 378.614700][ T32] audit: type=1800 audit(1790194379.342:2604): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 378.656075][T12987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.690620][T12987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.810350][T12987] team0: Port device team_slave_0 added [ 378.831199][T12987] team0: Port device team_slave_1 added [ 378.886821][ T32] audit: type=1800 audit(1790194379.612:2605): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 379.033754][T12987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.033766][T12987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.033783][T12987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.037999][T13155] loop6: detected capacity change from 0 to 512 [ 379.096523][T12987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.096534][T12987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.096551][T12987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.155925][T13155] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 379.204737][ T32] audit: type=1800 audit(1790194379.932:2606): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 379.295100][T13155] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.2797: invalid indirect mapped block 32768 (level 2) [ 379.295123][T13155] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 379.309022][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 379.309036][ C0] EXT4-fs (loop6): initial error at time 1790194380: ext4_free_branches:1023: inode 16 [ 379.309056][ C0] EXT4-fs (loop6): last error at time 1790194380: ext4_free_branches:1023: inode 16 [ 379.349724][T13155] EXT4-fs (loop6): Remounting filesystem read-only [ 379.349941][T13155] EXT4-fs (loop6): 1 orphan inode deleted [ 379.349953][T13155] EXT4-fs (loop6): 1 truncate cleaned up [ 379.351101][T13155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.532123][T12987] hsr_slave_0: entered promiscuous mode [ 379.532744][T12987] hsr_slave_1: entered promiscuous mode [ 379.553278][T12987] debugfs: 'hsr0' already exists in 'hsr' [ 379.553293][T12987] Cannot create hsr debugfs directory [ 379.574542][T13155] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.715995][ T32] audit: type=1800 audit(1790194380.442:2607): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 380.228738][ T32] audit: type=1800 audit(1790194380.952:2608): pid=12987 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24627 res=0 errno=0 [ 380.306682][T12777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.573641][T12777] veth0_vlan: entered promiscuous mode [ 380.607480][ T5705] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 380.619757][T12777] veth1_vlan: entered promiscuous mode [ 380.627591][ T4928] Bluetooth: hci4: command tx timeout [ 380.757596][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 380.759710][ T5705] usb 4-1: New USB device found: idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 380.767131][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.824558][ T5705] usb 4-1: config 0 descriptor?? [ 380.837111][ T32] audit: type=1800 audit(1790194381.562:2609): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169621 res=0 errno=0 [ 380.869627][ T32] audit: type=1800 audit(1790194381.602:2610): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=169650 res=0 errno=0 [ 380.872074][ T32] audit: type=1800 audit(1790194381.602:2611): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=169628 res=0 errno=0 [ 380.872233][ T5705] gspca_main: sq930x-2.14.0 probing 041e:403c [ 380.876149][ T32] audit: type=1800 audit(1790194381.602:2612): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=169629 res=0 errno=0 [ 380.957126][T13170] loop6: detected capacity change from 0 to 32768 [ 380.980766][T13170] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2800 (13170) [ 381.003137][T12777] veth0_macvtap: entered promiscuous mode [ 381.021970][T13170] BTRFS info (device loop6): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 381.022043][T13170] BTRFS info (device loop6): using xxhash64 checksum algorithm [ 381.127210][T12777] veth1_macvtap: entered promiscuous mode [ 381.202105][T13170] BTRFS info (device loop6): enabling ssd optimizations [ 381.202135][T13170] BTRFS info (device loop6): turning on async discard [ 381.202145][T13170] BTRFS info (device loop6): enabling free space tree [ 381.266879][T12777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.312461][T12777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.377337][ T1050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.377365][ T1050] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.377386][ T1050] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.468541][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.631553][T10588] BTRFS info (device loop6): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 381.757892][ T5705] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 381.817939][ T5705] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 381.830391][ T5705] usb 4-1: USB disconnect, device number 20 [ 382.073285][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.073300][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.102293][T12987] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 382.118783][T12987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.130306][T12987] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 382.174083][T12987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.207847][T12987] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 382.223141][T12987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.225240][T12987] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 382.256157][T12987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.328764][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.328777][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.470927][T13216] profile_transition: 20 callbacks suppressed [ 382.470941][T13216] profile_transition: unconfined exec no attachment [ 382.712066][T12987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.731219][ T32] kauditd_printk_skb: 9 callbacks suppressed [ 382.731229][ T32] audit: type=1800 audit(1790194383.442:2622): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 382.834841][T12987] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.851189][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.851252][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.888531][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.888592][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.024077][ T32] audit: type=1800 audit(1790194383.752:2623): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 383.111718][T13229] profile_transition: unconfined exec no attachment [ 383.235131][T13234] profile_transition: unconfined exec no attachment [ 383.372040][T13237] profile_transition: unconfined exec no attachment [ 383.421697][ T32] audit: type=1800 audit(1790194384.152:2624): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 383.544702][T13242] profile_transition: unconfined exec no attachment [ 383.688446][T13245] profile_transition: unconfined exec no attachment [ 383.805074][T13248] profile_transition: unconfined exec no attachment [ 383.925402][T13249] profile_transition: unconfined exec no attachment [ 384.055324][T13250] profile_transition: unconfined exec no attachment [ 384.175000][T13253] profile_transition: unconfined exec no attachment [ 384.312639][T13241] loop6: detected capacity change from 0 to 32768 [ 384.351226][T13256] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.395827][T13241] ERROR: (device loop6): xtSearch: xt_getpage: xtree page corrupt [ 384.395827][T13241] [ 384.424750][T13241] ERROR: (device loop6): remounting filesystem as read-only [ 384.424762][T13241] xtLookup: xtSearch returned -5 [ 384.424769][T13241] free_index: error reading directory table [ 384.488603][T12987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.706157][ T32] audit: type=1800 audit(1790194385.432:2625): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 385.282858][ T32] audit: type=1800 audit(1790194386.012:2626): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 385.357943][T13274] kvm: user requested TSC rate below hardware speed [ 385.463016][T12987] veth0_vlan: entered promiscuous mode [ 385.492766][T12987] veth1_vlan: entered promiscuous mode [ 385.591258][ T32] audit: type=1800 audit(1790194386.322:2627): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 385.621815][T12987] veth0_macvtap: entered promiscuous mode [ 385.650787][T12987] veth1_macvtap: entered promiscuous mode [ 385.701691][T12987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.728358][T12987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.884006][ T970] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.884204][ T970] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.884227][ T970] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.884248][ T970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.952149][ T32] audit: type=1800 audit(1790194386.682:2628): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 385.992321][ T32] audit: type=1800 audit(1790194386.722:2629): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170439 res=0 errno=0 [ 386.083800][ T32] audit: type=1800 audit(1790194386.812:2630): pid=13287 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.1.2832" name="file1" dev="tmpfs" ino=3105 res=0 errno=0 [ 386.132632][ T32] audit: type=1800 audit(1790194386.862:2631): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170565 res=0 errno=0 [ 386.135321][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.135333][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.290955][ T970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.290969][ T970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.002492][T13318] loop4: detected capacity change from 0 to 2048 [ 387.030354][T13318] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.513162][T13320] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 387.745947][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 387.745961][ T32] audit: type=1800 audit(1790194388.472:2642): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 388.011461][ T32] audit: type=1800 audit(1790194388.742:2643): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15475 res=0 errno=0 [ 388.087007][ T32] audit: type=1800 audit(1790194388.812:2644): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 388.355378][ T32] audit: type=1800 audit(1790194389.082:2645): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 388.584415][ T32] audit: type=1800 audit(1790194389.312:2646): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 388.670069][T13365] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2866'. [ 388.776358][ T32] audit: type=1800 audit(1790194389.502:2647): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 388.975509][ T32] audit: type=1800 audit(1790194389.702:2648): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 389.115319][T13345] loop4: detected capacity change from 0 to 40427 [ 389.146340][T13345] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 389.146356][T13345] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 389.166854][T13345] F2FS-fs (loop4): invalid crc value [ 389.369703][ T32] audit: type=1800 audit(1790194390.102:2649): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 389.451796][T13345] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 389.516126][T13345] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 389.516143][T13345] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 389.614729][ T32] audit: type=1800 audit(1790194390.342:2650): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 389.807469][T12987] syz-executor: attempt to access beyond end of device [ 389.807469][T12987] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 389.818925][ T32] audit: type=1800 audit(1790194390.552:2651): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0 [ 389.873053][T12987] CPU: 0 UID: 0 PID: 12987 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 389.873074][T12987] Tainted: [L]=SOFTLOCKUP [ 389.873078][T12987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 389.873090][T12987] Call Trace: [ 389.873095][T12987] [ 389.873103][T12987] dump_stack_lvl+0xe8/0x150 [ 389.873127][T12987] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 389.873212][T12987] f2fs_write_end_bio+0x112c/0x15f0 [ 389.873281][T12987] __submit_merged_bio+0x258/0x6a0 [ 389.873315][T12987] ? rcu_is_watching+0x16/0xb0 [ 389.873345][T12987] __submit_merged_write_cond+0x426/0x550 [ 389.873372][T12987] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 389.873408][T12987] f2fs_write_data_pages+0x2a1d/0x36f0 [ 389.873422][T12987] ? is_bpf_text_address+0x292/0x2b0 [ 389.873481][T12987] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 389.873525][T12987] ? __bfs+0x153/0x290 [ 389.873547][T12987] ? __pfx_hlock_conflict+0x10/0x10 [ 389.873577][T12987] ? lockdep_unlock+0x5c/0xd0 [ 389.873590][T12987] ? __lock_acquire+0x1511/0x2de0 [ 389.873623][T12987] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 389.873639][T12987] do_writepages+0x338/0x560 [ 389.873672][T12987] ? do_raw_spin_unlock+0xf5/0x200 [ 389.873688][T12987] filemap_fdatawrite+0x1e9/0x2f0 [ 389.873712][T12987] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 389.873731][T12987] ? add_lock_to_list+0xc7/0x100 [ 389.873779][T12987] ? do_raw_spin_unlock+0xf5/0x200 [ 389.873796][T12987] f2fs_sync_dirty_inodes+0x471/0x970 [ 389.873821][T12987] f2fs_write_checkpoint+0xa07/0x2840 [ 389.873861][T12987] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 389.873911][T12987] kill_f2fs_super+0x2dd/0x700 [ 389.873930][T12987] ? rcu_do_enqueue+0x616/0x870 [ 389.873949][T12987] ? lockdep_hardirqs_on+0x7b/0x110 [ 389.873987][T12987] ? __pfx_kill_f2fs_super+0x10/0x10 [ 389.874013][T12987] ? __pfx_call_rcu+0x10/0x10 [ 389.874036][T12987] ? shrinker_free+0x2a7/0x3b0 [ 389.874073][T12987] deactivate_locked_super+0xbe/0x110 [ 389.874102][T12987] cleanup_mnt+0x3d3/0x460 [ 389.874126][T12987] task_work_run+0x1d9/0x260 [ 389.874145][T12987] ? __pfx_task_work_run+0x10/0x10 [ 389.874168][T12987] exit_to_user_mode_loop+0x204/0x770 [ 389.874185][T12987] ? rcu_is_watching+0x16/0xb0 [ 389.874207][T12987] do_syscall_64+0x328/0x520 [ 389.874240][T12987] ? trace_irq_disable+0x3b/0x140 [ 389.874260][T12987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.874286][T12987] ? clear_bhb_loop+0x70/0xc0 [ 389.874302][T12987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.874316][T12987] RIP: 0033:0x7ff4e8b9f397 [ 389.874328][T12987] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 389.874340][T12987] RSP: 002b:00007fffc8db11e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 389.874354][T12987] RAX: 0000000000000000 RBX: 00007ff4e8c344bb RCX: 00007ff4e8b9f397 [ 389.874363][T12987] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc8db12a0 [ 389.874371][T12987] RBP: 00007fffc8db12a0 R08: 00007fffc8db22a0 R09: 00000000ffffffff [ 389.874380][T12987] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc8db2330 [ 389.874388][T12987] R13: 00007ff4e8c344bb R14: 000000000005f1f5 R15: 00007fffc8db2370 [ 389.874410][T12987] [ 389.998390][T12987] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 439.829261][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 467.514051][ T4928] Bluetooth: hci1: command 0x0406 tx timeout [ 487.991721][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 501.272062][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 539.027407][ T33] INFO: task syz-executor:5598 blocked in I/O wait for more than 143 seconds. [ 539.027431][ T33] Tainted: G L syzkaller #0 [ 539.027438][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.027445][ T33] task:syz-executor state:D stack:22152 pid:5598 tgid:5598 ppid:5597 task_flags:0x440100 flags:0x00080000 [ 539.027484][ T33] Call Trace: [ 539.027489][ T33] [ 539.027498][ T33] __schedule+0x1b47/0x5c60 [ 539.027533][ T33] ? lock_acquire+0x115/0x350 [ 539.027561][ T33] ? __pfx___schedule+0x10/0x10 [ 539.027586][ T33] ? schedule+0x90/0x2b0 [ 539.027606][ T33] schedule+0x164/0x2b0 [ 539.027625][ T33] io_schedule+0x7f/0xd0 [ 539.027644][ T33] bit_wait_io+0x13/0x110 [ 539.027665][ T33] __wait_on_bit+0xac/0x300 [ 539.027684][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 539.027706][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 539.027726][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 539.027746][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 539.027768][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 539.027795][ T33] do_get_write_access+0x658/0x10c0 [ 539.027894][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 539.027911][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 539.027940][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 539.027955][ T33] ? trace_kmem_cache_alloc+0x29/0xe0 [ 539.027982][ T33] ? jbd2__journal_start+0x145/0x5d0 [ 539.028002][ T33] ext4_reserve_inode_write+0x294/0x360 [ 539.028023][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 539.028049][ T33] ext4_dirty_inode+0xd0/0x110 [ 539.028064][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 539.028078][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 539.028104][ T33] file_update_time_flags+0x399/0x440 [ 539.028124][ T33] ext4_page_mkwrite+0x21f/0x12c0 [ 539.028140][ T33] ? reacquire_held_locks+0x117/0x1a0 [ 539.028167][ T33] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 539.028181][ T33] ? __lock_acquire+0x747/0x2de0 [ 539.028208][ T33] do_page_mkwrite+0x147/0x310 [ 539.028225][ T33] do_wp_page+0x1a85/0x4b60 [ 539.028259][ T33] ? __pfx_do_wp_page+0x10/0x10 [ 539.028275][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 539.028290][ T33] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 539.028314][ T33] handle_mm_fault+0x15d7/0x3750 [ 539.028340][ T33] ? handle_mm_fault+0xf1/0x3750 [ 539.028365][ T33] ? __pfx_handle_mm_fault+0x10/0x10 [ 539.028382][ T33] ? lock_vma_under_rcu+0x45a/0x500 [ 539.028400][ T33] ? __pfx_set_user_sigmask+0x10/0x10 [ 539.028435][ T33] do_user_addr_fault+0xb35/0x1480 [ 539.028461][ T33] ? trace_page_fault_user+0x84/0x1e0 [ 539.028477][ T33] exc_page_fault+0x6a/0xc0 [ 539.028498][ T33] asm_exc_page_fault+0x26/0x30 [ 539.028512][ T33] RIP: 0033:0x7fc0fda7c6e2 [ 539.028524][ T33] RSP: 002b:00007ffd01168460 EFLAGS: 00010202 [ 539.028536][ T33] RAX: 00007fc0fbc04000 RBX: 000055557f6d66e0 RCX: 0000000000000006 [ 539.028546][ T33] RDX: 00000000000028cc RSI: 000055557f746308 RDI: 0000000000000040 [ 539.028555][ T33] RBP: 00007ffd01168960 R08: 000055557f7464b8 R09: 00000000000000a1 [ 539.028563][ T33] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd011687a0 [ 539.028572][ T33] R13: 00007ffd01168590 R14: 585858582e7a7973 R15: 00007ffd011684e0 [ 539.028593][ T33] [ 539.028622][ T33] INFO: task syz.2.2876:13387 blocked in I/O wait for more than 143 seconds. [ 539.028633][ T33] Tainted: G L syzkaller #0 [ 539.028640][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.028645][ T33] task:syz.2.2876 state:D stack:25000 pid:13387 tgid:13387 ppid:12777 task_flags:0x440040 flags:0x00080002 [ 539.028684][ T33] Call Trace: [ 539.028688][ T33] [ 539.028696][ T33] __schedule+0x1b47/0x5c60 [ 539.028722][ T33] ? lock_acquire+0x115/0x350 [ 539.030638][ T33] ? __pfx___schedule+0x10/0x10 [ 539.030680][ T33] ? schedule+0x90/0x2b0 [ 539.030700][ T33] schedule+0x164/0x2b0 [ 539.030720][ T33] io_schedule+0x7f/0xd0 [ 539.030739][ T33] bit_wait_io+0x13/0x110 [ 539.030759][ T33] __wait_on_bit+0xac/0x300 [ 539.030778][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 539.030799][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 539.030819][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 539.030838][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 539.030859][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 539.030887][ T33] do_get_write_access+0x658/0x10c0 [ 539.030914][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 539.030931][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 539.030951][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 539.030965][ T33] ? trace_kmem_cache_alloc+0x29/0xe0 [ 539.030985][ T33] ? jbd2__journal_start+0x145/0x5d0 [ 539.031004][ T33] ext4_reserve_inode_write+0x294/0x360 [ 539.031025][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 539.031051][ T33] ext4_dirty_inode+0xd0/0x110 [ 539.031065][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 539.031080][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 539.031102][ T33] file_update_time_flags+0x399/0x440 [ 539.031121][ T33] ext4_page_mkwrite+0x21f/0x12c0 [ 539.031142][ T33] ? __pfx_filemap_fault+0x10/0x10 [ 539.031163][ T33] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 539.031184][ T33] do_page_mkwrite+0x147/0x310 [ 539.031201][ T33] do_pte_missing+0x70f/0x3570 [ 539.031229][ T33] ? handle_mm_fault+0xf1/0x3750 [ 539.031250][ T33] handle_mm_fault+0x1a53/0x3750 [ 539.031275][ T33] ? handle_mm_fault+0xf1/0x3750 [ 539.031304][ T33] ? __pfx_handle_mm_fault+0x10/0x10 [ 539.031321][ T33] ? lock_vma_under_rcu+0x45a/0x500 [ 539.031355][ T33] do_user_addr_fault+0xb35/0x1480 [ 539.031378][ T33] ? trace_page_fault_user+0x84/0x1e0 [ 539.031394][ T33] exc_page_fault+0x6a/0xc0 [ 539.031413][ T33] asm_exc_page_fault+0x26/0x30 [ 539.031427][ T33] RIP: 0033:0x7faa31a727a9 [ 539.031438][ T33] RSP: 002b:00007fff17d662d0 EFLAGS: 00010202 [ 539.031450][ T33] RAX: 0000001b32b1e000 RBX: ffffffff8adc0e69 RCX: 0000001b32b1dff8 [ 539.031460][ T33] RDX: 0000001b3252421c RSI: 0000000000000008 RDI: 00007faa32955720 [ 539.031469][ T33] RBP: 000000000000005d R08: 00007faa31e10000 R09: 00007faa31e12000 [ 539.031478][ T33] R10: 000000008adc0e6d R11: 0000000000000001 R12: 00007faa31e26038 [ 539.031487][ T33] R13: 000000000000005c R14: ffffffff8adc0be1 R15: 00007faa32955720 [ 539.031497][ T33] ? hci_connect_acl+0x101/0x580 [ 539.031547][ T33] ? hci_connect_acl+0x389/0x580 [ 539.031574][ T33] [ 539.031580][ T33] INFO: task syz.3.2882:13400 blocked in I/O wait for more than 143 seconds. [ 539.031592][ T33] Tainted: G L syzkaller #0 [ 539.031600][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.031606][ T33] task:syz.3.2882 state:D stack:26152 pid:13400 tgid:13400 ppid:5619 task_flags:0x440040 flags:0x00080002 [ 539.031645][ T33] Call Trace: [ 539.031651][ T33] [ 539.031659][ T33] __schedule+0x1b47/0x5c60 [ 539.031695][ T33] ? __pfx___schedule+0x10/0x10 [ 539.031720][ T33] ? schedule+0x90/0x2b0 [ 539.031739][ T33] schedule+0x164/0x2b0 [ 539.031758][ T33] io_schedule+0x7f/0xd0 [ 539.031777][ T33] bit_wait_io+0x13/0x110 [ 539.031797][ T33] __wait_on_bit+0xac/0x300 [ 539.031816][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 539.031837][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 539.031857][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 539.031875][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 539.031896][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 539.031923][ T33] do_get_write_access+0x658/0x10c0 [ 539.031949][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 539.031966][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 539.031986][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 539.032008][ T33] ext4_reserve_inode_write+0x294/0x360 [ 539.032028][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 539.032054][ T33] ext4_dirty_inode+0xd0/0x110 [ 539.032069][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 539.032083][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 539.032100][ T33] ? mnt_get_write_access+0x216/0x280 [ 539.032117][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 539.032138][ T33] touch_atime+0x568/0x670 [ 539.032153][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 539.032177][ T33] ext4_file_mmap_prepare+0x277/0x450 [ 539.032201][ T33] mmap_region+0xf0b/0x2c60 [ 539.032228][ T33] ? lock_acquire+0x115/0x350 [ 539.032245][ T33] ? __page_table_check_zero+0x6c/0x430 [ 539.032269][ T33] ? __pfx_mmap_region+0x10/0x10 [ 539.032286][ T33] ? __page_table_check_zero+0x6c/0x430 [ 539.032309][ T33] ? __page_table_check_zero+0x6c/0x430 [ 539.032325][ T33] ? __page_table_check_zero+0x3c3/0x430 [ 539.032341][ T33] ? __page_table_check_zero+0x6c/0x430 [ 539.032375][ T33] ? lock_acquire+0x115/0x350 [ 539.032437][ T33] ? mt_find+0x186/0x630 [ 539.032475][ T33] ? mt_find+0x5ff/0x630 [ 539.032489][ T33] ? mt_find+0x186/0x630 [ 539.032501][ T33] ? __pfx_mt_find+0x10/0x10 [ 539.032518][ T33] ? bpf_lsm_mmap_addr+0x9/0x50 [ 539.032539][ T33] ? security_mmap_addr+0x71/0x240 [ 539.032600][ T33] ? shmem_mapping+0xd/0x50 [ 539.032620][ T33] ? memfd_check_seals_mmap+0xc5/0x220 [ 539.032642][ T33] do_mmap+0xe0a/0x1300 [ 539.032665][ T33] ? __pfx_do_mmap+0x10/0x10 [ 539.032690][ T33] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 539.032703][ T33] ? down_write_killable+0x179/0x230 [ 539.032719][ T33] ? __pfx_down_write_killable+0x10/0x10 [ 539.032733][ T33] ? apparmor_mmap_file+0x2e7/0x390 [ 539.032770][ T33] vm_mmap_pgoff+0x272/0x4e0 [ 539.032785][ T33] ? lock_acquire+0x115/0x350 [ 539.032804][ T33] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 539.032819][ T33] ? __fget_files+0x2a/0x420 [ 539.032835][ T33] ? __fget_files+0x3a2/0x420 [ 539.032848][ T33] ? __fget_files+0x2a/0x420 [ 539.032863][ T33] ksys_mmap_pgoff+0x4dc/0x760 [ 539.032886][ T33] do_syscall_64+0x166/0x520 [ 539.032906][ T33] ? trace_irq_disable+0x3b/0x140 [ 539.032925][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.032939][ T33] ? clear_bhb_loop+0x70/0xc0 [ 539.032956][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.032970][ T33] RIP: 0033:0x7faca7f9dec2 [ 539.032981][ T33] RSP: 002b:00007fff9a89c098 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 539.032994][ T33] RAX: ffffffffffffffda RBX: 0000001b33464000 RCX: 00007faca7f9dec2 [ 539.033004][ T33] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b33464000 [ 539.033013][ T33] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 539.033022][ T33] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000270 [ 539.033031][ T33] R13: 00000000000927c0 R14: 000000000005f1f5 R15: 00007fff9a89c370 [ 539.033052][ T33] [ 539.033057][ T33] INFO: task syz.6.2883:13401 blocked in I/O wait for more than 143 seconds. [ 539.033069][ T33] Tainted: G L syzkaller #0 [ 539.033076][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.033082][ T33] task:syz.6.2883 state:D stack:26016 pid:13401 tgid:13401 ppid:10588 task_flags:0x440040 flags:0x00080002 [ 539.033120][ T33] Call Trace: [ 539.033125][ T33] [ 539.033133][ T33] __schedule+0x1b47/0x5c60 [ 539.033162][ T33] ? irqentry_exit+0x218/0x910 [ 539.033181][ T33] ? trace_irq_disable+0x3b/0x140 [ 539.033203][ T33] ? __pfx___schedule+0x10/0x10 [ 539.033221][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 539.033246][ T33] ? schedule+0x90/0x2b0 [ 539.033265][ T33] schedule+0x164/0x2b0 [ 539.033284][ T33] io_schedule+0x7f/0xd0 [ 539.033308][ T33] bit_wait_io+0x13/0x110 [ 539.033328][ T33] __wait_on_bit+0xac/0x300 [ 539.033347][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 539.033369][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 539.033390][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 539.033409][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 539.033431][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 539.033458][ T33] do_get_write_access+0x658/0x10c0 [ 539.033484][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 539.033502][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 539.033521][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 539.033543][ T33] ext4_reserve_inode_write+0x294/0x360 [ 539.033564][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 539.033590][ T33] ext4_dirty_inode+0xd0/0x110 [ 539.033608][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 539.033623][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 539.033640][ T33] ? mnt_get_write_access+0x216/0x280 [ 539.033657][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 539.033678][ T33] touch_atime+0x568/0x670 [ 539.033693][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 539.033717][ T33] ext4_file_mmap_prepare+0x277/0x450 [ 539.033742][ T33] mmap_region+0xf0b/0x2c60 [ 539.033768][ T33] ? lock_acquire+0x115/0x350 [ 539.033785][ T33] ? __page_table_check_zero+0x6c/0x430 [ 539.033803][ T33] ? __pfx_mmap_region+0x10/0x10 [ 539.033821][ T33] ? __page_table_check_zero+0x6c/0x430 [ 539.033840][ T33] ? __page_table_check_zero+0x6c/0x430 [ 539.033856][ T33] ? __page_table_check_zero+0x3c3/0x430 [ 539.033871][ T33] ? __page_table_check_zero+0x6c/0x430 [ 539.033906][ T33] ? lock_acquire+0x115/0x350 [ 539.033968][ T33] ? mt_find+0x186/0x630 [ 539.033983][ T33] ? mt_find+0x5ff/0x630 [ 539.033997][ T33] ? mt_find+0x186/0x630 [ 539.034010][ T33] ? __pfx_mt_find+0x10/0x10 [ 539.034027][ T33] ? bpf_lsm_mmap_addr+0x9/0x50 [ 539.034042][ T33] ? security_mmap_addr+0x71/0x240 [ 539.034060][ T33] ? shmem_mapping+0xd/0x50 [ 539.034079][ T33] ? memfd_check_seals_mmap+0xc5/0x220 [ 539.034101][ T33] do_mmap+0xe0a/0x1300 [ 539.034125][ T33] ? __pfx_do_mmap+0x10/0x10 [ 539.034150][ T33] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 539.034163][ T33] ? down_write_killable+0x179/0x230 [ 539.034179][ T33] ? __pfx_down_write_killable+0x10/0x10 [ 539.034192][ T33] ? apparmor_mmap_file+0x2e7/0x390 [ 539.034212][ T33] vm_mmap_pgoff+0x272/0x4e0 [ 539.034227][ T33] ? lock_acquire+0x115/0x350 [ 539.034246][ T33] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 539.034262][ T33] ? __fget_files+0x2a/0x420 [ 539.034278][ T33] ? __fget_files+0x3a2/0x420 [ 539.034290][ T33] ? __fget_files+0x2a/0x420 [ 539.034310][ T33] ksys_mmap_pgoff+0x4dc/0x760 [ 539.034332][ T33] do_syscall_64+0x166/0x520 [ 539.034351][ T33] ? trace_irq_disable+0x3b/0x140 [ 539.034369][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.034382][ T33] ? clear_bhb_loop+0x70/0xc0 [ 539.034399][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.034413][ T33] RIP: 0033:0x7feb5799dec2 [ 539.034424][ T33] RSP: 002b:00007fffd54497d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 539.034437][ T33] RAX: ffffffffffffffda RBX: 0000001b31864000 RCX: 00007feb5799dec2 [ 539.034447][ T33] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b31864000 [ 539.034457][ T33] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 539.034466][ T33] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000d5 [ 539.034474][ T33] R13: 00000000000927c0 R14: 000000000005f23a R15: 00007fffd5449ab0 [ 539.034495][ T33] [ 539.034501][ T33] INFO: task syz.4.2881:13402 blocked in I/O wait for more than 143 seconds. [ 539.034513][ T33] Tainted: G L syzkaller #0 [ 539.034520][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.034526][ T33] task:syz.4.2881 state:D stack:26152 pid:13402 tgid:13402 ppid:12987 task_flags:0x440040 flags:0x00080002 [ 539.034564][ T33] Call Trace: [ 539.034568][ T33] [ 539.034576][ T33] __schedule+0x1b47/0x5c60 [ 539.034612][ T33] ? __pfx___schedule+0x10/0x10 [ 539.034637][ T33] ? schedule+0x90/0x2b0 [ 539.034657][ T33] schedule+0x164/0x2b0 [ 539.034676][ T33] io_schedule+0x7f/0xd0 [ 539.034696][ T33] bit_wait_io+0x13/0x110 [ 539.034716][ T33] __wait_on_bit+0xac/0x300 [ 539.034735][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 539.034757][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 539.034777][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 539.034796][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 539.034817][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 539.034844][ T33] do_get_write_access+0x658/0x10c0 [ 539.034870][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 539.034888][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 539.034907][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 539.034929][ T33] ext4_reserve_inode_write+0x294/0x360 [ 539.034950][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 539.034976][ T33] ext4_dirty_inode+0xd0/0x110 [ 539.034990][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 539.035005][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 539.035021][ T33] ? mnt_get_write_access+0x216/0x280 [ 539.035038][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 539.035060][ T33] touch_atime+0x568/0x670 [ 539.035074][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 539.035098][ T33] ext4_file_mmap_prepare+0x277/0x450 [ 539.035122][ T33] mmap_region+0xf0b/0x2c60 [ 539.035148][ T33] ? lock_acquire+0x115/0x350 [ 539.035165][ T33] ? __page_table_check_zero+0x6c/0x430 [ 539.035182][ T33] ? __pfx_mmap_region+0x10/0x10 [ 539.035200][ T33] ? __page_table_check_zero+0x6c/0x430 [ 539.035218][ T33] ? __page_table_check_zero+0x6c/0x430 [ 539.035234][ T33] ? __page_table_check_zero+0x3c3/0x430 [ 539.035250][ T33] ? __page_table_check_zero+0x6c/0x430 [ 539.035284][ T33] ? lock_acquire+0x115/0x350 [ 539.035350][ T33] ? mt_find+0x186/0x630 [ 539.035365][ T33] ? mt_find+0x5ff/0x630 [ 539.035379][ T33] ? mt_find+0x186/0x630 [ 539.035395][ T33] ? __pfx_mt_find+0x10/0x10 [ 539.035412][ T33] ? bpf_lsm_mmap_addr+0x9/0x50 [ 539.035427][ T33] ? security_mmap_addr+0x71/0x240 [ 539.035445][ T33] ? shmem_mapping+0xd/0x50 [ 539.035464][ T33] ? memfd_check_seals_mmap+0xc5/0x220 [ 539.035485][ T33] do_mmap+0xe0a/0x1300 [ 539.035508][ T33] ? __pfx_do_mmap+0x10/0x10 [ 539.035533][ T33] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 539.035545][ T33] ? down_write_killable+0x179/0x230 [ 539.035561][ T33] ? __pfx_down_write_killable+0x10/0x10 [ 539.035575][ T33] ? apparmor_mmap_file+0x2e7/0x390 [ 539.035594][ T33] vm_mmap_pgoff+0x272/0x4e0 [ 539.035609][ T33] ? lock_acquire+0x115/0x350 [ 539.035627][ T33] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 539.035643][ T33] ? __fget_files+0x2a/0x420 [ 539.035658][ T33] ? __fget_files+0x3a2/0x420 [ 539.035671][ T33] ? __fget_files+0x2a/0x420 [ 539.035686][ T33] ksys_mmap_pgoff+0x4dc/0x760 [ 539.035709][ T33] do_syscall_64+0x166/0x520 [ 539.035727][ T33] ? trace_irq_disable+0x3b/0x140 [ 539.035744][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.035758][ T33] ? clear_bhb_loop+0x70/0xc0 [ 539.035775][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.035788][ T33] RIP: 0033:0x7ff4e8b9dec2 [ 539.035799][ T33] RSP: 002b:00007fffc8db2098 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 539.035812][ T33] RAX: ffffffffffffffda RBX: 0000001b2f464000 RCX: 00007ff4e8b9dec2 [ 539.035821][ T33] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b2f464000 [ 539.035830][ T33] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 539.035839][ T33] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000005 [ 539.035847][ T33] R13: 00000000000927c0 R14: 000000000005f1f5 R15: 00007fffc8db2370 [ 539.035868][ T33] [ 539.035878][ T33] [ 539.035878][ T33] Showing all locks held in the system: [ 539.035887][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 539.035897][ T33] #0: ffffffff8ed5e2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 539.035953][ T33] locks held by kworker/u8:8/1050: 6, on CPU#0: [ 539.035963][ T33] #0: ffff88801eed2148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 539.036002][ T33] #1: ffffc90004fffc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 539.036040][ T33] #2: ffff888035f080e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 539.036086][ T33] #3: ffff888035f16c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 539.036120][ T33] #4: ffff888035f14938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 539.036152][ T33] #5: ffff888078cc4a98 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0 [ 539.036205][ T33] locks held by getty/5366: 2, on CPU#1: [ 539.036214][ T33] #0: ffff8880328b40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 539.036290][ T33] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 539.036335][ T33] locks held by syz-executor/5598: 3, on CPU#0: [ 539.036344][ T33] #0: ffff888021f711c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 539.036381][ T33] #1: ffff888035f08558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 539.036414][ T33] #2: ffff888035f14938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 539.036446][ T33] locks held by kworker/0:4/5706: 2, last CPU#0: [ 539.036456][ T33] #0: ffff88801b069d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 539.036495][ T33] #1: ffffc90004a77c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 539.036538][ T33] locks held by syz.2.2876/13387: 3, on CPU#0: [ 539.036548][ T33] #0: ffff888025789e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 539.036584][ T33] #1: ffff888035f08558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 539.036616][ T33] #2: ffff888035f14938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 539.036647][ T33] locks held by syz.3.2882/13400: 3, on CPU#0: [ 539.036657][ T33] #0: ffff88807ee65038 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 539.036689][ T33] #1: ffff888035f08460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 539.036730][ T33] #2: ffff888035f14938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 539.036761][ T33] locks held by syz.6.2883/13401: 3, on CPU#0: [ 539.036771][ T33] #0: ffff88807ee629f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 539.036802][ T33] #1: ffff888035f08460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 539.036843][ T33] #2: ffff888035f14938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 539.036877][ T33] locks held by syz.4.2881/13402: 3, on CPU#0: [ 539.036886][ T33] #0: ffff88807ee636b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 539.036917][ T33] #1: ffff888035f08460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 539.036957][ T33] #2: ffff888035f14938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 539.036988][ T33] [ 539.036992][ T33] ============================================= [ 539.036992][ T33] [ 539.036999][ T33] NMI backtrace for cpu 0 [ 539.037011][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 539.037031][ T33] Tainted: [L]=SOFTLOCKUP [ 539.037037][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 539.037048][ T33] Call Trace: [ 539.037055][ T33] [ 539.037062][ T33] dump_stack_lvl+0xe8/0x150 [ 539.037083][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 539.037099][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 539.037117][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 539.037135][ T33] sys_info+0x135/0x170 [ 539.037149][ T33] watchdog+0x1058/0x10d0 [ 539.037171][ T33] ? watchdog+0x209/0x10d0 [ 539.037193][ T33] kthread+0x38b/0x480 [ 539.037209][ T33] ? __pfx_watchdog+0x10/0x10 [ 539.037225][ T33] ? __pfx_kthread+0x10/0x10 [ 539.037242][ T33] ret_from_fork+0x514/0xb70 [ 539.037257][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 539.037270][ T33] ? __switch_to+0xc78/0x1410 [ 539.037306][ T33] ? __pfx_kthread+0x10/0x10 [ 539.037323][ T33] ret_from_fork_asm+0x1a/0x30 [ 539.037355][ T33] [ 539.408670][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 541.346480][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 541.357239][ T33] Tainted: [L]=SOFTLOCKUP [ 541.361555][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 541.371617][ T33] Call Trace: [ 541.374895][ T33] [ 541.377827][ T33] vpanic+0x26f/0x710 [ 541.381831][ T33] panic+0xc5/0xd0 [ 541.385554][ T33] ? __pfx_panic+0x10/0x10 [ 541.389987][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 541.395447][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 541.400821][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 541.406975][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 541.413127][ T33] watchdog+0x10cc/0x10d0 [ 541.417461][ T33] ? watchdog+0x209/0x10d0 [ 541.421881][ T33] kthread+0x38b/0x480 [ 541.425945][ T33] ? __pfx_watchdog+0x10/0x10 [ 541.430635][ T33] ? __pfx_kthread+0x10/0x10 [ 541.435228][ T33] ret_from_fork+0x514/0xb70 [ 541.439815][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 541.444919][ T33] ? __switch_to+0xc78/0x1410 [ 541.449612][ T33] ? __pfx_kthread+0x10/0x10 [ 541.454204][ T33] ret_from_fork_asm+0x1a/0x30 [ 541.458980][ T33] [ 541.462058][ T33] Kernel Offset: disabled [ 541.466390][ T33] Rebooting in 86400 seconds..