last executing test programs: 11m29.393479454s ago: executing program 2 (id=12): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usbip_server_init(0x0) r4 = socket$inet6(0xa, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0x0, &(0x7f0000000280)) sendmsg$inet(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000065c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xffff}}}, 0x24}}, 0xc080) 11m26.998361798s ago: executing program 2 (id=17): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) rt_sigaction(0x9, &(0x7f0000000700)={0x0, 0x0, 0x0, {[0xa2]}}, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{}], 0x144, 0x1, 0x0, 0x2, 0x0, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x3}, @free_buffer], 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0xc11d15b68094f7d1, 0x0, 0x0, {0x2, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0xb000) 11m24.98195034s ago: executing program 2 (id=21): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002200)={0x2020}, 0xffffffac) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x15, 0x4, 0x20100) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r6) write$FUSE_INIT(r6, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x7fff, 0x4503230, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x4000000000003, 0x0, 0x0, {0x4000, 0x9, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x5, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) listen(r0, 0x3) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x5) chdir(&(0x7f0000000240)='./file0\x00') open$dir(0x0, 0x80040, 0x0) 11m22.471019843s ago: executing program 2 (id=26): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000629f84540000000000000061122c00000000009500000000000000d1bcba0fabe35e6460208f539acfc796c688646968e0188860a2061ab460aeac0e59fffd5c407e5a0a82f3b2171fa9f95bec3746362df16efe3f0d61312dcf8dc1feb68723213469fe210dd78c5a471ef3e0f07a7f942115fe302db6a0aaa943842e1ea94359e67438c1c5fa518f7ebb9f4ea8c366fa08a8111412411b6117dfbc0c78d3218a64e5f33a496b35d50c3d585b1932"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(r1, 0x84, 0x14, &(0x7f0000000040)="020000000980", 0x6) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000240000664dc2650375a001f5456e2773d55a00000005000000000000000000000300000000010000000200000009000000040000000000000700000000002e000000"], &(0x7f0000000380)=""/161, 0x41, 0xa1, 0x1, 0x5, 0x10000, @value=r4}, 0x28) syz_open_dev$evdev(0x0, 0x0, 0x2002) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}}, 0x20}, 0x1, 0x0, 0x0, 0x200448d0}, 0x4004004) io_uring_enter(r2, 0x2412, 0x0, 0x36, 0x0, 0x0) r6 = epoll_create1(0x80000) r7 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 11m19.339852355s ago: executing program 2 (id=30): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000500)={[{0x5, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x2, 0x1}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, 0x0, 0x0, 0x0, 0x800000000000000}, {0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000300)=ANY=[], 0x1, 0x1cf, &(0x7f0000000780)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oh4LIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUerAyaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//tkmYwA==") syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6572726f72139c7fa3bc733d7265f05f6c6173745f646f7473", @ANYRESHEX=0x0, @ANYRESDEC=r4, @ANYRES16=r0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c646d61736b3d30303030303030303030303030303030303030303030302c696f636861727365743d69736f383835592d392c646973636172642c756d9856ae04035d8955b8c8c761736b3d3030303030303030303030303030", @ANYRESOCT=r2, @ANYRES8=r0, @ANYRESHEX=r0], 0x2, 0x1529, &(0x7f0000003000)="$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") mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) chdir(0x0) truncate(&(0x7f00000001c0)='./file2\x00', 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) syz_genetlink_get_family_id$nl802154(0x0, r0) truncate(&(0x7f00000000c0)='./file1\x00', 0x5) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES8], 0x20}, 0x1, 0x0, 0x0, 0x200c051}, 0x2) clock_gettime(0xe5c08115d66224b7, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) 11m15.56210941s ago: executing program 2 (id=35): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x80002, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x2, 0x8, 0x1}, 0x18) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000180)=0x1) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x800000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003000000000000000f8ff00851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r7 = msgget$private(0x0, 0xef) msgctl$IPC_RMID(r7, 0x0) msgsnd(r7, &(0x7f0000000580)={0x3, "eae2254a711b33a783267efc920d52a3a13a771d10244c33744ffddef964e89b61e9da34e2a4f059097f16057f1d11f0c2c72607b129cb88ec274d210c43fdab"}, 0x48, 0x0) 10m59.277613833s ago: executing program 32 (id=35): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x80002, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x2, 0x8, 0x1}, 0x18) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000180)=0x1) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x800000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003000000000000000f8ff00851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r7 = msgget$private(0x0, 0xef) msgctl$IPC_RMID(r7, 0x0) msgsnd(r7, &(0x7f0000000580)={0x3, "eae2254a711b33a783267efc920d52a3a13a771d10244c33744ffddef964e89b61e9da34e2a4f059097f16057f1d11f0c2c72607b129cb88ec274d210c43fdab"}, 0x48, 0x0) 2m6.925065733s ago: executing program 3 (id=1439): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x0, 0xfe, 0xfffffffffffffffe}) 2m4.133825798s ago: executing program 3 (id=1451): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 2m1.295216457s ago: executing program 3 (id=1464): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000629f84540000000000000061122c00000000009500000000000000d1bcba0fabe35e6460208f539acfc796c688646968e0188860a2061ab460aeac0e59fffd5c407e5a0a82f3b2171fa9f95bec3746362df16efe3f0d61312dcf8dc1feb68723213469fe210dd78c5a471ef3e0f07a7f942115fe302db6a0aaa943842e1ea94359e67438c1c5fa518f7ebb9f4ea8c366fa08a8111412411b6117dfbc0c78d3218a64e5f33a496b35d50c3d585b1932"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}], 0x1, 0x4004851) setsockopt(r1, 0x84, 0x14, &(0x7f0000000040)="020000000980", 0x6) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000240000664dc2650375a001f5456e2773d55a00000005000000000000000000000300000000010000000200000009000000040000000000000700000000002e000000"], &(0x7f0000000380)=""/161, 0x41, 0xa1, 0x1, 0x5, 0x10000, @value=r4}, 0x28) syz_open_dev$evdev(0x0, 0x0, 0x2002) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}}, 0x20}, 0x1, 0x0, 0x0, 0x200448d0}, 0x4004004) io_uring_enter(r2, 0x2412, 0x0, 0x36, 0x0, 0x0) r7 = epoll_create1(0x80000) r8 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1m59.366519283s ago: executing program 3 (id=1469): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m58.006111533s ago: executing program 3 (id=1475): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140), 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r3], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[r4, r4], &(0x7f0000000580)}) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff6}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x4, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x17ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r5, &(0x7f0000000240)={0x27, r8, 0x1, 0x4}, 0x10) 1m57.495670704s ago: executing program 3 (id=1480): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0x10000, 0x0, "4ae23ae17df2e98cd88f00", 0x0, 0xfffffffc}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 1m57.219299326s ago: executing program 33 (id=1480): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0x10000, 0x0, "4ae23ae17df2e98cd88f00", 0x0, 0xfffffffc}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 54.073583239s ago: executing program 5 (id=1776): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x4004662b, &(0x7f0000000580)={@desc={0x1, 0x0, @auto="697bb55abf8e23d7"}, 0x21, 0x0, '\x00', @c}) 53.756721764s ago: executing program 5 (id=1778): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 51.319587521s ago: executing program 5 (id=1795): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x100c2, &(0x7f00000002c0)={[{@discard_size={'discard', 0x3d, 0x5}}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@errors_continue}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@discard}, {@uid}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}]}, 0x24, 0x623a, &(0x7f0000002780)="$eJzs3c1vHGcdB/Df7JtfQtOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqAXXQ2M/jzE53vXYS76wzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6I7eZ4PiKGSxHV9tv/PBvxekR8fDzi/oM769Xi8/vsx/f//I8//OTYj/7+p+GZ//7lVv+Naevdvv3b//z17qPvLwAAAHRRWZZlkT7mn4yIQfpsDwA8/fLrf5nk5eqFqzcXrD9qtVqtPoJ1XTnZ3XoREZv1bar3DE7HA8ARsxmftN0FWiT/ThtExLG2OwEstKLtDnAo7j+4s16kfIv668HaTnu+FmQs/81i9/6OadNZmteYzOv5tRX9eG5Kf1bm1IdFkvPvNfO/stM+Susddv7zMi3/0c6tT52T8+838294evLvTcy/q3L+gwPl35c/AAAAAAAssPz7/xMtn/9devxd2Ze9zv+uzakPAAAAAAAAAPCkHXT8v0Fj/L9dxv8DAACAhVV9Vq/87vjDZdP+Flu1/HIR8UxjfaBj0s0yq233AwAAAAAAAAAAAAC6ZLBzDe/lImIYEc+srpZlWX3VNeuDetztj7qu7z90Wds/5AEAYMfHxxv38hcRyxFxOf2tv+Hq6mpZLq+slqvlylJ+PztaWi5Xap9r87RatjTaxxviwaisvtlybbu6WZ+XZ7U3v1/1WKOyv4+OzUeLgQNAROy8Gt2f9or0P69XR1NZPhstv8nhiNjj+OeIcvyzH20/TwEAAIDDV5ZlWaQ/530ynfPvtd0pAGAu8ut/87yAWq1Wq9Xqp6+uKye7Wy8iYrO+TfWewXD8AHDEbMYnbXeBFsm/0wYR8ULbnQAWWtF2BzgU9x/cWS9SvkX99SCN756vBRnLf7PY3i5vP2k6S/Mak3k9v7aiH89N6c/zc+rDIsn595r5X9lpH6X1Hj//cuzXhG1dYzQt/2o/T7TQn7bl/PvN/BsO+/ifl63oTcy/q3L+gwPl35c/AAAAAAAssPz7/xMLdf539Ki7M9Ne53/XJm5xeH0BAAAAAAAAgCfl/oM76/m+13z+/wsT1nP/59Mp51/Iv5Ny/r1G/l9trNevzd97+2H+/35wZ/2Pt/71+Tzdb/5LeaZIz6wiPSOK9EjFIE0fZ+8+a2vYH1WPNCx6/UG65qccvhvX4npsxNmxdXvp/+Nh+7mx9qqnw+32sr/Tfn6sfbDbnre/MNY+TFcXlSu5/XSsx8/jeryz3V61Lc3Y/+UZ7eWM9px/3/HfSTn/Qe2ryn81tReNaeXeR73PHPf16aTHeevaF39z9vB3Z6at6O/uW121fy+10J/t/5Njo/jlzY0bp29fvXXrxrlIk7Gl5yNNnrCc/zB97f78f3mnPf/crx+v9z4aHTj/RbEVg6n5v1ybr/b3lTn3rQ05/1H6yvm/k9onH/9HOf/px/+rLfQHAAAAAAAAAAAAAAAA9lKW5fYtom9FxMV0/09b92YCAPOVX//LJC+fV92f8+Op1YdWF8U8Hq9YmP1tof60nPPjD8YXtL3/avWTqOvKyd6sFxHxt/o21XuGX0/6ZgDAIvs0Iv7Zdidojfw7LP+9v2p6qu3OAHN184MPf3r1+vWNGzfb7gkAAAAAAAAA8Kjy+J9rtfGfT5Vlebex3tj4r2/H2uOO/5lvp3k4wOiUgar7B9+nvWz1Rv1ebbjxF2Pa+N/D3bm9xv8ezHi84Yz20Yz2pRntyzPaJ97oUZPzf7E23vmpiDjZGH69C+O/Nse874Kc/0u153OV/1ca69XzL39/lPPvjeV/5tb7vzhz84MPX7v2/tX3Nt7b+NmFc+fOXrh48dKlS2fevXZ94+zOvy32+HDl/PPY164D7Zacf85c/t2S8/9SquXfLTn/L6da/t2S88/v9+TfLTn//NlH/t2S838l1fLvlpz/11It/27J+b+aavl3S87/66mWf7fk/F9Ltfy7Jed/OtXy75ac/5lU7zP/lcPuF/OR889nuBz/3ZLzz1c2yL9bcv7nUy3/bsn5X0i1/Lsl5/96quXfLTn/b6Ra/t2S87+Yavl3S87/m6mWf7fk/C+lWv7dkvP/Vqrl3y05/2+nWv7dkvN/I9Xy75ac/3dSLf9uyfl/N9Xy75ac//dSLf9uyfm/mWr5d8vDv/9vxowZM3mm7Z9MAAAAAAAAAAAAAEDTPC4nbnsfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgp7dxcj11neAfzsp9cOJAZC6qQGNo4JIdlk13biD9oUEz4bvkogFPqB7XrXZsGxjdcugUayaaBEwqioom24aAsItbmp8AUXtAKUC9QKqRK0F/QGUaFyEaGAAlIlWgFbzTnv++7M7Hzs2uP1mXN+P8l+vDNn5n3nzDtn59n1fw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS79bULnxzJsqzxJ/9ra5Y9r/HvzdNb88teda1nCAAAAFypX+Z/P3dDuuDgGm7UtM2/vvTbX1leXl7O3jP2lxOfXV5OV0xn2cSmLMuviy794L0jzdsEj2dTI6NNX4/2GX6sz/Xjfa6f6HP9ZJ/rN/W5fqrP9at2wCqbi5/H5He2M//n1mKXZjdmE/l1Ozvc6vGRTaOj8Wc5uZH8NssTx7LF7ES2kM21bF9sO5Jv/7VbG2O9KYtjjTaNtb2xQn762NE4h5Gwj3e2jLVyn9GPX5NN/+ynjx39+7PP3typ9t0NLfdXzPOOHY15fjxcUsx1JNuU9kmc52jTPLd3eE7GWuY5kt+u8e/2eT63xnmOrUxzQ7U/51PZaP7v7+T7abz5x3ppP20Pl/38tizLLqxMu32bVWNlo9mWlktGV56fqWJFNu6jsZRemI2va53euoZ12qjzO1vXaftrIj7/t4bbjXeZQ/PT9OOPTTY9779Yvpx1GjUedbfXSvsaHPRrpSxrMK6L7+QP+omOa3BnePyP3d59DXZcOx3WYHrcTWtwR781ODo5ls85PQkj+W1W1uCulu3H8pFG8vrM7b3X4OzZR07PLn3ko3cvPnLk+MLxhZN7du2a27N37/79+2ePLZ5YmCv+vsy9XX5bstH0GtgR9l18Dbyibdvmpbr8hclVx9/LfR1O9Xgdbm3bdtCvw/H2BzeyMS/I1Wu6eG28q7HTpy6OZl1eY/nzc+eVvw7T4256HY43vQ47fk/p8DocX8PrsLHN6TvX9p5lvOlPpzl0/15wZWtwa9MabH8/0r4GB/1+pCxrcCqsi+/d2f17wfYw3ydm1vt+ZGzVGkwPNxx7Gpek9/tT+/PSaV3e0rjiusns3NLCmXsePXL27JldWSgb4kVNa6V9vW5pekzZqvU6uu71enDxpU/c0uHyrWFfTd3d+Guq63PV2Obee3o/V/l3t877s+XS3VkoA7bR+7PTd/PG/pzMss9982MPff2xz7226/5s9Jsfn73y9+KpL206/k50Of7Gvv9XxXjprh4fmxgvXr9jae9MtByPW5+q8fzYNZKP/dzs2o7HE+HPRh+Pb+xxPN7Wtu2gj8cT7Q8uHo9H+v2048q0P59TYZ2cmOt9PG5ss233etfkeM/j8W2hjoT9/8rQKaS+qGntdFu3aazx8YnwuMbjCK3rdE/L9hOhN2uM9dTu8KYwzXJt6/SO24rtx5puF23UOp1u23bQ6zT97KvbOh3p99O3y9P+fE6FdXHjnt7rtLHN0/de+bFzc/xn07Fzst8anBibbMx5Ii3C/HifLW+Oa/Ce7Gh2KjuRzefXTubraSQfa+a+tR0rJ8OfjT5WbuuxBu9o23bQazB9H+u29kbGVz/4AWh/PqfCunjyvt5rsLHN6/YN9r3rHeGStE3Te9f2n691+5nXLW276WqtlfEwz2/u6/2z2cY2J/avt8/svZ/uCpdc12E/tb9+u72m5rON2U/bwjyf3d99PzXm09jmswfWuJ4OZll2/kMP5D/vDb9fOX/uu19p+b1Lp9/pnP/QAz95/rF/Wc/8ARh+vyrKluJ7XdNvptby+38AAABgKMS+fzTURP8PAAAAlRH7/vi/whP9PwAAAFRG7PvHQ02q0P//af9Ntr3u2cVfnc9SMn85iNen3fBgsV3MuM6Fr6eXVzQuf+BLC//zz+fXNr3RLMt+8eCfdNx+24NxXoXpMM9Lr2+9fJWv3L2msQ8/fD6N25xf/3y4//h41roMOkVw57Is+9oNn87HmX7vxbw+/eDhvD504YnHG9s8d6D4Ot7+mRcV2/9NCP8ePHak5fbPhP3ww1Dn3tx5f8TbffniK7fve/fKePF2Izuuzx/2k+8r7jd+Ts5nHi+2j/u52/y//qmnvtzY/tGXd57/+dHO838q3O+XQv3flxTbNz8Hja/j7T4R5h/Hi7e754vf6Dj/S58stj/9hmK7w6HG8e8IX+98w7OLzfvr0ZEjLY8re2OxXRx/7rt/nl8f7y/ef/v8pw5dbNkf7evj6f8o7me2bft4eRwn+qe28Rv307w+4/hP/dnhlv3cb/xLDz3zksb9to9/V9t2pz90Zz7+yv21fmLT337i0x3Hi/M5+I+nWx7PwXeE13EY/8n3hfUYrv+/S8X9tX+6wuF3tB5/4vaf33q+5fFEb/pZMf6lVx/P66apzVuue97zr7/wssa+y7LvbCrur9/4x//uVMv8v3BTsT/i9TGj3z5+N3H8Mx+eOXlq6dzifNqrj92Qf3bOW4r5xPneEI6t7V8fOnX2/Qtnpuem57JsurofoXfZvhjqT4pyoffWy6uOoHc+HJ7PW/76a1tu//dPxcv/813F5RffXHzfekXY7jPh8q3h+Vvf+Ks9eetN+et75Okww+XVnxd8Jbbv/NH+NW0YHn/7+4K43k+/+P35fmhcl3/fiK/rK5z/9+eL+/lq2K/L4ZOZd9y0Ml7z9vGzES6+s3i9X/H+C4e5+Lz+Q3i+3/rD4v7jvOLj/X54H/ONba3Hu7g+vnp+tP3+80/xuBCOJ9mF4vq4VdzfF5+7qeP04ueQZBduzr/+i3Q/N6/rYXaz9JGl2ROLJ889Ont2Yens7NJHPnrokVPnTp49lH+W56EP9Lv9yvFpS358ml/Ye2+WH61OFeUqu9bzP/3w0fl9c7fPLxw7cu7Y2YdPL5w5fnRp6ejC/NLtR44dW/hwv9svzt+/a/eBPft2zxxfnL9//4EDew7MLJ481ZhGMak+9s59cObkmUP5TZbuv/fArvvuu3du5pFT8wv375ubmznX7/b596aZxq3/eObMwokjZxcfWZhZWvzowv27Duzdu7vvpwE+cvrY0vTsmXMnZ88tLZyZLR7L9Nn84sb3vn63p5qW/qt4P9tupPggvuztd+1Nn8/a8KWPdb2rYpO2DxB9NnwWzbdecHr/Wr6Off9EqEkV+n8AAAAgF/v+yVAT/T8AAABURuz7N4Wa6P8BAACgMmLfPxVq+i8BNen/K5f/33Z+TePL/8v/N+8v+f+a5f/fWbb8f3G8kP8fjCvN38v/B/L/8v/y//L/8v8MQNny/7Hv35xlfv8PAAAAFRX7/i2hJvp/AAAAqIzY918XaqL/BwAAgMqIff/zQk1q0v/L/8v/y//L/8v/dx5f/n84yf/3Jv/fTfGJ0PL/S7NZvfL/FwY5/2uQ/9/c/IX8P2VUtvx/7PufH2pSk/4fAAAA6iD2/deHmuj/AQAAoDJi339DqIn+HwAAACoj9v1bQ01q0v/L/19R/j9lruT/W+cv/99K/j+sB/l/+f8NIP/fm/x/H/L/zv8/XPn/FvL/lFHZ8v+x739BqElN+n8AAACorImVf8a+/4WhJvp/AAAAKJ/xy7tZ7PtfFGqyqv+/zAEAAACAay72/TdmbUHwmvz+X/7f+f/l/+X/5f87j7/2/P9YJv9fHvL/vcn/9yH/L/9f3/z/VCb/z1VQtvx/3vdnU9mLQ01q0v8DAABAHcS+/6ZQE/0/AAAAVEbs+38t1ET/DwAAAJUR+/5toSY16f/l/yuT//9581Mn/y//32t8+X/n/68y+f/e5P/7kP+X/69v/t/5/7kqypb/j33/zaEmNen/AQAAoA5i339LqIn+HwAAACoj9v2/Hmqi/wcAAIDKiH3/9lCTmvT/8v8lz//H5Kjz/8v/y/+XMv8/Jf9fOvL/vcn/9yH/L/8v/y//z0CVLf8f+/6XhJrUpP8HAACAOoh9/0tDTfT/AAAAUBmx739ZqIn+HwAAACoj9v3ToSY16f/Xk/8fuSD/381VPv//5BrO/99C/l/+v9f48v/O/19l8v+9yf/3If8v/y//L//PQJUt/x/7/ltDTWrS/wMAAEAdxL5/R6iJ/h8AAAAqI/b9t4Wa6P8BAACgMmLfvzPUpCb9v/P/D0X+P5P/l/+X/5f/l/9fG/n/3uT/+5D/l/+X/5f/Z6AGnP8fbb9wvfn/2Pe/PNSkJv0/AAAA1EHs+28PNdH/AwAAQGXEvv8VoSb6fwAAAKiM2PffEWpSk/5f/l/+X/5f/l/+v/P48v/DSf6/N/n/PuT/5f/l/+X/Gaiynf8/9v2vDDWpSf8PAAAAdRD7/jtDTfT/AAAAUBmx778r1ET/DwAAAJUR+/6ZUJOa9P/y//L/8v/y//L/nceX/x9O8v+9yf/3If8v/y//L//PQJUt/x/7/rtDTWrS/wMAAEAdxL7/nlAT/T8AAABURuz7Z0NN9P8AAABQGbHvnws1qUn/L/8v/y//L/+/rvz/y1buV/6/IP9fLvL/vcn/9yH/L/9/zfP/E/L/VErZ8v+x798ValKT/h8AAADqIPb9u0NN9P8AAABQGbHv3xNqov8HAACAyoh9/72hJjXp/+X/5f/l/+X/nf+/8/jy/8NJ/r+3wef/40OU/5f/l/93/n/5f1YrW/4/9v33hZrUpP8HAACAOoh9/95QE/0/AAAAVEbs+/eFmuj/AQAAoDJi378/1KQm/b/8v/y//L/8v/x/5/Hl/4eT/H9vzv/fh/y//P8Q5/8ba0v+n7IpW/4/9v0HQk1q0v8DAABAHcS+/1WhJvp/AAAAqIzY9/9GqIn+HwAAACoj9v2/GWpSk/5f/l/+X/5f/r/s+f9J+X/5/3WQ/+9N/r8P+X/5/yHO/zv/P2VUtvx/7PvvDzWpSf8PAAAAdRD7/t8KNdH/AwAAQGXEvv/VoSb6fwAAAKiM2PcfDDWpSf8v/79B+f94ofy//L/8v/P/y/9fVfL/vcn/9yH/L/8v/y//z0CVLf8f+/7XhJrUpP8HAACAOoh9/wOhJvp/AAAAqIzY97821ET/DwAAAJUR+/7XhZrUpP+X/3f+/2uf/59ombv8/8rt5P8L8v/y/+sh/9+b/H8f8v/y//L/8v8MVNny/7Hvf32oSU36fwAAAKiD2Pe/IdRE/w8AAACVEfv+N4aa6P8BAACgMmLf/6ZQk5r0//L/8v/XPv/v/P/y/wX5f/n/QZD/72048/+N3Sj/n8n/l37+8v/y/6xWtvx/7Pt/O9SkJv0/AAAA1EHs+x8MNdH/AwAAQGXEvv/NoSb6fwAAAKiM2Pe/JdSkJv2//L/8v/y//L/8f+fx5f+Hk/x/b0OW///l9eFy5/8vyP+Xe/7rzf+Pt319VfL/P+iW/1/e1H57+X+uhrLl/2Pf/9ZQk5r0/wAAAFAHse9/W6iJ/h8AAAAqI/b9bw810f8DAABAZcS+/3dCTWrS/8v/N+axkl6W/5f/zy+Q/5f/l/8fWvL/vQ1Z/j+c/1/+P5L/L/f8nf9f/p/Vypb/j33/O0JNatL/AwAAQB3Evv+hUBP9PwAAAFRG7PvfGWqi/wcAAIDKiH3/u0JNatL/y/87/7/8v/y//H/n8eX/h9Ng8v9j8v/y//L/8v/lyP//t/w/w61s+f/Y9z8calKT/h8AAADqIPb97w410f8DAABAZcS+/3dDTfT/AAAAUBmx739PqElN+n/5/2HJ/0/L/68z/z8ZLpP/l/+X/68X5//vbfvOH3VPVjaT/5f/l/8vR/7f+f8ZcmXL/8e+/72hJmvv/6fWvCUAAABwTcS+//dCTWry+38AAACog9j3/36oif4fAAAAKiP2/X8QalKT/l/+f1jy/87/nzn/v/x/2+OR/5f/72Tj8v/xyDN0+X/n/+9F/l/+X/6/a/5/tM/t5f/ppGz5/9j3/2GoSU36fwAAAKiD2Pe/L9RE/w8AAABDodP/yW4X+/5DoSb6fwAAAKiM2PcfDjWpSf8v/y//L/9f0vz/X+34t+99+22Hd8n/y//L/6/Lhp7/v/HiH77z/8v/9yL/L/8v/+/8/wxU2fL/se8/Emqy0vi9xQn+AQAAYLjFvv+PQk1q8vt/AAAAqIPY9x8NNdH/AwAAQGXEvn8+1KQm/b/8v/y//H9J8/9DfP7/uD+GKf8/s2mI8v/xoCv/39GG5v/fvZITl/9fb/5/suOl7fn/Efn/FvL/657/t7Isk/+X/+caKlv+P/b9C6EmNen/AQAAoA5C3z96rKgrV+j/AQAAoDJi33881ET/DwAAAJUR+/73h5rUpP+X/5f/l/+X/3f+/87jlzb/7/z/Pcn/91ae/H9nzv8v/z/M85f/l/9ntbLl/2PfvxhqUpP+HwAAAOog9v0fCDXR/wMAAEBlxL7/g6Em+n8AAACojNj3nwg1qUn/L/8v/y//L/8v/995fPn/4ST/35v8fx/y//L/8v/y/wxU2fL//8/efTxZVpd/HL/NrylmivpVuXPhAvf+CSxkrX+ACzYutMqySlAxJwZzxJwDKgYMGEARE+YEJhSzqJiziBm1xprp53lmuvv0ud0z9/Y99/t9vRY+TENzL9oFfuh5z8nd/7C4pZP9DwAAAD3I3X9J3GL/AwAAQDNy918at9j/AAAA0Izc/Q+PW9Zy/2/cedBKUP+v/2+2/7+v/n+v19f/6/9bpv8fp/+fQ/+v/9f/6/9ZqKn1/7n7HxG3rOX+BwAAAIbk7n9k3GL/AwAAQDNy918Wt9j/AAAA0Izc/Y+KWzrZ/zv6/41Zn/1/Zrz6/5b6f8//3/P19f/6/5Ydbv9/xYm/8+n/9f/6/6D/1//r/9lpav1/7v5Hxy2d7H8AAADoQe7+x8Qt9j8AAAA0I3f/Y+MW+x8AAACakbv/cXFLJ/t/gs//P/k/guf/b/1Y/6//1//r//X/B+P5/+N66v8vu+38S+664V43HuT19f/6f/2//p/Fmlr/n7v/8XFLJ/sfAAAAepC7/wlxi/0PAAAAzcjd/8S4xf4HAACANXR08KO5+58Ut3Sy/yfY/2+9L/3/Sfr/Q+z/j+j/9f/6/xbo/8f11P+fyevr//X/J9//1TP9v/6fBZla/5+7/8lxSyf7HwAAAHqQu/8pcYv9DwAAANM19BOxR+Tuvzxusf8BAACgGbn7j8Utnex//f/y+///6v/Xo//3/H/9v/6/Cfr/cfr/OfT/+n/P/9f/s1BT6/9z918Rt3Sy/wEAAKAHufufGrfY/wAAANCM3P1Pi1vsfwAAAGhG7v6nxy2d7H/9v+f/6//1//r/4dfX/68n/f84/f8c+v+z7efP1f/r//X/nO6A/f/dI3/bXkj/n7v/GXFLJ/sfAAAAepC7/5lxi/0PAAAAzcjd/6y4xf4HAACAZuTuf3bc0sn+1//r//X/+v8z7v93f+mdpP8fpv8/HPr/cZPp/zc2Bz+s/1/7/t/z//X/+n+2mdrz/3P3Pydu6WT/AwAAQA9y9z83bhnZ/wf+l/kAAADASuXuf17c4vv/AAAAsPayOsvd//y4pZP9r//X/+v/9f+e/z/8+mP9/42nvT/9/7To/8dNpv/fg/5f/7/O71//r/9nt6n1/7n7XxC3dLL/AQAAoAe5+6+MW+x/AAAAaEbu/hfGLfY/AAAANCN3/4vilk72/3D/f+r36//3R/+//f3r/4e/PhbV/+efUf8/2v9f5Pn/fdL/j9P/z6H/1//r//fq/4/O+3z9P0Om1v/n7n9x3NLJ/gcAAIAe5O5/Sdxi/wMAAEAzcve/NG6x/wEAAKAZuftfFrd0sv89/1//r/9fv/7f8/+3rPL5/7ND7/839f/7pP8fp/+fQ/+v/9f/jz//f+RXAdD/M2Rq/X/u/pfHLZ3sfwAAAOhB7v5XxC32PwAAAKyH03/uwM6fUBpy978ybrH/AQAAoBm5+18Vt7Sz/0ef1an/1//r//X/+v/h159W/+/5//ul/x+n/59D/7+Mfn6zsf7/qr0+fwr9/+XL7v9H6P8Zsq3/v+nUx1fV/+fuf3Xc0s7+BwAAgO7l7n9N3GL/AwAAQDNy9782brH/AQAAoBm5+18Xt3Sy/5fe/4/86gP6f/2//l//r//X/y+a/n+c/n8O/b/n/3v+v/6fhdrW/59mVf1/7v7Xxy2d7H8AAADoQe7+N8Qt9j8AAAA0I3f/VXGL/Q8AAADNyN3/xrilk/3v+f/6f/2//l//P/z6+v/1dFb9/Tn6/6L/1//r//X/+n8WYGr9f+7+N8Utnex/AAAA6EHu/jfHLfY/AAAANCN3/9Vxi/0PAAAAzcjd/5a4pZP9r/9fbv+fH9f/6/9n+n/9v/7/UHT7/P+NoX8S7bZH/3/LQ47df/tH9P/6f/2//l//zz7dY+T3TaL/P37q/13m7n9r3NLJ/gcAAIAe5O5/W9xi/wMAAEAzcve/PW6x/wEAAKAZufuviVsOuP/Hmodhd15w4E9ZAv2/5//r//X/+v/h19f/r6du+/998vz/OfT/+n/9v/6fhZpE/3/aj3P3vyNu8f1/AAAAaEbu/nfGLfY/AAAANCN3/7viFvsfAAAAmpG7/91xSyf7X/+v/9f/6//1/8Ovr/9fT/r/cfr/Odap/7/mLPr/zeEPr7qfP1urfv/6f/0/u02t/8/df23c0sn+BwAAgB7k7n9P3GL/AwAAQDNy9783brH/AQAAoBm5+98Xt3Sy//X/+n/9v/5f/z/8+vr/9aT/H6f/n81m1428gaH+//h50+z/Pf9/cu9f/6//Z7ep9f+5+98ft3Sy/wEAAKAHufuvi1vsfwAAAGhG7v7r4xb7HwAAAJqRu/8DcUsn+1//r//X/+v/F9D/b+tr9f/D9P+HQ/8/Tv8/xzo9/1//P7n3r//X/7Pb1Pr/3P0fjFs62f8AAADQg9z9N8Qt9j8AAAA0I3f/h+IW+x8AAACakbv/xrilk/2v/9f/6//1/57/P/z6+v/1tLz+f6b/1//r/+fQ/+v/9f/sNLX+P3f/h+OWTvY/AAAA9CB3/0fiFvsfAAAAmpG7/6Nxi/0PAAAAzcjd/7G4pZP9r//X/+v/9f/6/+HX1/+vJ8//H6f/n0P/r//X/+v/Wajh/v/ylfX/ufs/Hrd0sv8BAACgB7n7b4pb7H8AAABoRu7+T8Qt9j8AAAA0I3f/J+OWTva//l//v73/n830//p//f+WQ+j/j8z0/wun/x+n/59D/99m/3/OrKH+/+ien6//Z4qm9vz/3P2fils62f8AAADQg9z9n45b7H8AAABoRu7+z8Qt9j8AAAA0I3f/Z+OWTva//l//7/n/+n/9//Dre/7/etL/j9P/z6H/b7P/9/x//T8rM7X+P3f/5+KWTvY/AAAA9CB3/+fjFvsfAAAAmpG7/wtxi/0PAAAAzcjd/8W4pZP9r//X/+v/9f/6/+HX1/+vJ/3/OP3/HPp//b/+X//PQk2t/8/d/6W4pZP9DwAAAD3I3X9z3GL/AwAAQDNy998St9j/AAAA0Izc/V+OWzrZ//p//b/+fz37/yP6f/2//n/QVPr/Cy+83636f/2//l//r//X//duav1/7v6vxC2d7H8AAADoQe7+r8Yt9j8AAAA0I3f/1+IW+x8AAACakbv/63FLJ/t/d/9/7myrUN0y1P9Ho6b/P43+f/v71/8Pf314/r/+X/+/fFPp/z3//8zev/5f/7/O7/9A/f+9d3++/p8WTa3/z91/a9zSyf4HAACAHuTu/0bcYv8DAABAM3L3fzNusf8BAACgGbn7b4tbOtn/nv+v/9f/6//1/8Ovr/9fT/r/cfr/OfT/+n/P/7/0Qf+n/2dxptb/5+7/VtzSyf4HAACAHuTu/3bcYv8DAABAM3L3fydusf8BAACgGbn7vxu3dLL/9f/6f/3/Evr/zeGvD/2//l//v3z6/3H6/7LzL21LP/3/kaEPrrqfP1urfv/N9P+e/88CTa3/z93/vbilk/0PAAAAPcjd//24xf4HAACAZuTu/0HcYv8DAABAM3L3/zBu6WT/6/8b7/9P/KD7/v+Bnv+/4/X1//r/lun/85/ow/T/c/TT/w9adT+/7u9f/6//Z7ep9f+5+2+PWzrZ/wAAANCD3P0/ilvsfwAAAGhG7v4fxy32PwAAADQjd/9P4pZO9r/+v/H+f8fz/zdmPfb/K3j+/x5fH/p//b/+f/n0/+P0/3Po//X/+n/9Pws1tf4/d/8dG5td7n8AAABYVw+4z0Nv3+8fe8fJ/zwy+2ncctHs+D6/jQ0AAABM3Indv7E5m/3s5I98/x8AAABalLv/53FLJ/tf/99X/9/n8/+X2P+feGH9v/5f/z8p+v9x+v859P/6f/2//p+Fmlr/n7v/F3HLacNv88B/lQAAAMCU5O7/ZdzSyff/AQAAoAe5+38Vt+za/345QAAAAFhXuft/Hbd08v1//f/E+//Zkvr/+OP0/1s8/1//P/T6+v/1pP8fd5b9//EN/b/+f4T+X/+v/2enqfX/uft/E7d0sv8BAACgUdv+jULu/t/GLfY/AAAANCN3/+/iFvsfAAAAmpG7//dxSyf7X/9/6P1/pupLfP7/0fotz//vvP+/8sjg6+v/9f8t0/+P8/z/OfT/rfT/5+n/9f9Mw9T6/9z9f4hbOtn/AAAA0IPc/X+MW+x/AAAAaEbu/j/FLfY/AAAANCN3/50nzv/3t/9X0v/Hn6TT/v9gz/8/o/5/H8//1//30f/v8frt9P/3PP/YzRc/+Ppr9f+ccpj9f34t6P/1//r/LRPq/z3/X//PRCy+/9/c9sGD9v8nd//syOzPcUsn+x8AAAB6kLv/rrjF/gcAAIBm5O7/S9xi/wMAAEAzcvf/NW7pZP97/r/+fyr9f/53vYL+/9gZ9/9HZ7PZSvr/bIp77/89/1//v5vn/4/T/8+h/9f/6//1/yzU4vv/7R88aP+fu/9vcUsn+x8AAAB6kLv/73FL7v+NA/+rewAAAGBicvf/I27x/X8AAABoRu7+f8Ytnex//b/+fyr9f/L8/1Of19bz/y+uOLXP/v+C+i39/3Lp/8fp/+fQ/+v/9f/6fxZqav1/7v5/xS2d7H8AAADoQe7+u+MW+x8AAACakbv/33GL/Q8AAADNyN3/n7ilk/2v/2+1/88iXv+v/59K/+/5/57/fzj0/+P0/3Po//X/+n/9Pws1tf4/d///AgAA//8kcHQC") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x8, 0x0, 0x10, 0x0, 0x100000}) 48.877264058s ago: executing program 5 (id=1803): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[r6, r6], &(0x7f0000000580)}) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff6}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x4, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x17ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r8, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(r8, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r7, &(0x7f0000000240)={0x27, r10, 0x1, 0x4}, 0x10) 45.1289547s ago: executing program 5 (id=1823): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50e, &(0x7f0000000700)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3a00019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 42.866418152s ago: executing program 5 (id=1832): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) 27.40038834s ago: executing program 34 (id=1832): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) 16.128635529s ago: executing program 1 (id=1910): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r5 = accept(r1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) r6 = syz_open_procfs(0x0, 0x0) readlinkat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r7, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f00"}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) 14.830831943s ago: executing program 1 (id=1916): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001740)="88b9", 0x2}], 0x2) 10.488019514s ago: executing program 1 (id=1934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.399958671s ago: executing program 6 (id=1936): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[r6, r6], &(0x7f0000000580)}) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff6}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x4, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x17ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r8, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(r8, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r7, &(0x7f0000000240)={0x27, r10, 0x1, 0x4}, 0x10) 9.698626407s ago: executing program 1 (id=1938): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[r6, r6], &(0x7f0000000580)}) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff6}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x4, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x17ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r8, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(r8, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r7, &(0x7f0000000240)={0x27, r10, 0x1, 0x4}, 0x10) 9.697838197s ago: executing program 6 (id=1939): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) fallocate(r0, 0x8, 0x4012, 0x4000) 8.462059047s ago: executing program 6 (id=1942): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r5 = accept(r1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) r6 = syz_open_procfs(0x0, 0x0) readlinkat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, 0x0, 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r8, &(0x7f0000000180)=[{0x0}], 0x1) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r9, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f00"}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, 0x0, 0x0) 8.414187701s ago: executing program 1 (id=1943): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000304040000f8ff08ffffffffff00", @ANYRES32=0x0, @ANYBLOB="1103020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0xba01}, 0x810) 6.910344152s ago: executing program 6 (id=1951): syz_mount_image$minix(&(0x7f0000000540), &(0x7f0000000080)='./file1\x00', 0x8040, &(0x7f0000000c00)=ANY=[@ANYRES16=0x0], 0xfd, 0x1d0, &(0x7f0000000580)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fstatfs(r0, 0x0) 6.225556467s ago: executing program 6 (id=1952): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x6b, 0x52, 0x7a, 0x20, 0xbaf, 0xf6, 0xa84a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x32, 0x4, 0x0, 0x60, 0x5a, 0xb8, 0x0, [@generic={0x9, 0x4, "a47c6e072694ef"}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 6.199763709s ago: executing program 7 (id=1874): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x4, @local, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) 3.263893616s ago: executing program 4 (id=1959): openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x105042, 0x44) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, &(0x7f0000000040)) 3.038469235s ago: executing program 0 (id=1961): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x0, 0xf2, 0xb}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0) 2.934757403s ago: executing program 4 (id=1962): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x400, 0x2000, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 2.679243793s ago: executing program 0 (id=1963): r0 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x1000}) io_uring_enter(r0, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) 2.605209569s ago: executing program 4 (id=1964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.543882524s ago: executing program 1 (id=1965): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581", @ANYBLOB="87e9"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x2000) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x9, 0x1, 0xc, 0x6, 0x7, 0xba}) 2.162294535s ago: executing program 6 (id=1966): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x2000c6, &(0x7f0000001340)=ANY=[], 0x1, 0xac5, &(0x7f00000001c0)="$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") unlink(&(0x7f0000000380)='./file1\x00') link(&(0x7f00000001c0)='./file1\x00', 0x0) 2.065715683s ago: executing program 0 (id=1967): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0xc0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634c114600000000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x0) 2.054512624s ago: executing program 7 (id=1968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x40881}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000140}, 0x20000000) 1.9791846s ago: executing program 4 (id=1969): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00222200000096231306e53f93757d8f8d2990070900be0083000f020057a90da1f60b0000040004"], 0x0}, 0x0) 1.7219591s ago: executing program 0 (id=1970): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) 1.700195353s ago: executing program 7 (id=1971): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000500)) 1.350501901s ago: executing program 7 (id=1972): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8000, &(0x7f0000000100), 0x1, 0x7a2, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x8d) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) 1.280531316s ago: executing program 0 (id=1973): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000629f84540000000000000061122c00000000009500000000000000d1bcba0fabe35e6460208f539acfc796c688646968e0188860a2061ab460aeac0e59fffd5c407e5a0a82f3b2171fa9f95bec3746362df16efe3f0d61312dcf8dc1feb68723213469fe210dd78c5a471ef3e0f07a7f942115fe302db6a0aaa943842e1ea94359e67438c1c5fa518f7ebb9f4ea8c366fa08a8111412411b6117dfbc0c78d3218a64e5f33a496b35d50c3d585b1932"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x4004851) setsockopt(r1, 0x84, 0x14, &(0x7f0000000040)="020000000980", 0x6) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000240000664dc2650375a001f5456e2773d55a00000005000000000000000000000300000000010000000200000009000000040000000000000700000000002e000000"], &(0x7f0000000380)=""/161, 0x41, 0xa1, 0x1, 0x5, 0x10000, @value=r4}, 0x28) syz_open_dev$evdev(0x0, 0x0, 0x2002) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}}, 0x20}, 0x1, 0x0, 0x0, 0x200448d0}, 0x4004004) io_uring_enter(r2, 0x2412, 0x0, 0x36, 0x0, 0x0) r7 = epoll_create1(0x80000) r8 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1.222021101s ago: executing program 4 (id=1974): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r5], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[r6, r6], &(0x7f0000000580)}) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000019140)=@newchain={0x43c, 0x64, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff6}, {0x1, 0x5}, {0xfff3, 0xa}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x4551, 0x80000001, 0x1000, 0x7, 0x5, 0x3, 0x7, 0x8001, 0x2, 0x0, 0x4, 0x55, 0x0, 0x1, 0x5e9f, 0x0, 0x0, 0x17ff, 0x2264, 0x6, 0x577, 0x2, 0x818, 0x1, 0x10000, 0x0, 0xb9, 0xfffffffe, 0x77, 0xc1c, 0x3, 0x0, 0xff, 0x4, 0x2, 0x2, 0x0, 0x0, 0xa, 0x3ff, 0x1000, 0x7129, 0x2, 0x4, 0xc, 0x0, 0xfffffbff, 0x0, 0x7cca, 0x9, 0x7, 0x6, 0x9, 0x4, 0x6, 0xb978, 0x0, 0xf, 0xfffffffb, 0xcfce, 0x0, 0xfffffff7, 0x4f1, 0x55, 0x712ae542, 0x4, 0xfaab, 0x200, 0x85b, 0xff, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x17f, 0x7, 0x0, 0x2e6, 0xac6, 0x1, 0x8, 0xec6f, 0x3, 0x80, 0xfffffc00, 0x94, 0xfff, 0xfaa2a50, 0x31d, 0x1, 0x2, 0x1, 0x90, 0x3, 0xed, 0x4249, 0x88, 0xfffffffc, 0x100, 0xf8d4, 0x52, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x3, 0x7fffffff, 0x6, 0x4, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x4000000, 0x37d, 0x3, 0xd, 0x0, 0x7, 0x5, 0x1745, 0x7, 0x2, 0x9, 0x263, 0x5fd, 0x7, 0x0, 0x7, 0x0, 0x5, 0x1, 0x2, 0xfffffff6, 0xed6, 0x1, 0x10, 0x0, 0x7, 0x10, 0xb04, 0x1, 0x7, 0x6, 0x3, 0x7, 0x4405, 0x100, 0x7, 0x48, 0x1, 0x9, 0x7, 0x5, 0x3, 0x5, 0x1, 0x5, 0x10000, 0x4e, 0x8, 0x5, 0x8, 0xf708, 0x9, 0x9, 0x5, 0x7ff3, 0x4, 0x8, 0x7, 0xfff, 0x4, 0x0, 0x3, 0x5, 0x7, 0xee2, 0x8001, 0x7fffffff, 0x2, 0xffffffff, 0x1, 0x5, 0x2e91, 0xc, 0x4, 0xfff, 0x0, 0xe, 0x98, 0x4, 0x400, 0x9, 0x6, 0x6, 0x4, 0x1f, 0x1, 0x1, 0xa893, 0x9, 0x9, 0x7, 0x2, 0xfffffff8, 0x8, 0xa, 0x9, 0x1, 0xb, 0x101, 0x9, 0x1, 0x3, 0x4, 0x8, 0x1, 0x101, 0x9, 0x7fffffff, 0x6, 0x0, 0x1, 0x7, 0x2, 0x8, 0xffffff45, 0x1, 0x7, 0x1ff, 0x9, 0x100, 0x8001, 0xfffffffd, 0x3, 0x73ac, 0x8, 0x71c, 0x5, 0xc, 0x1, 0x9, 0x8001, 0x4, 0x8001, 0xba, 0x5a88, 0x0, 0x10]}]}]}}]}, 0x43c}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r8, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) ioctl$UI_SET_PHYS(r8, 0x4008556c, &(0x7f00000000c0)='syz0\x00') r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000400)=""/101, 0x65}], 0x2}}], 0x1, 0x60, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r7, &(0x7f0000000240)={0x27, r10, 0x1, 0x4}, 0x10) 9.300919ms ago: executing program 0 (id=1975): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005200010005bd7000040000000200000008000100", @ANYRES32], 0x1c}}, 0x800) 0s ago: executing program 4 (id=1985): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000629f84540000000000000061122c00000000009500000000000000d1bcba0fabe35e6460208f539acfc796c688646968e0188860a2061ab460aeac0e59fffd5c407e5a0a82f3b2171fa9f95bec3746362df16efe3f0d61312dcf8dc1feb68723213469fe210dd78c5a471ef3e0f07a7f942115fe302db6a0aaa943842e1ea94359e67438c1c5fa518f7ebb9f4ea8c366fa08a8111412411b6117dfbc0c78d3218a64e5f33a496b35d50c3d585b1932"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x4004851) setsockopt(r1, 0x84, 0x14, &(0x7f0000000040)="020000000980", 0x6) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000240000664dc2650375a001f5456e2773d55a00000005000000000000000000000300000000010000000200000009000000040000000000000700000000002e000000"], &(0x7f0000000380)=""/161, 0x41, 0xa1, 0x1, 0x5, 0x10000, @value=r4}, 0x28) syz_open_dev$evdev(0x0, 0x0, 0x2002) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}}, 0x20}, 0x1, 0x0, 0x0, 0x200448d0}, 0x4004004) io_uring_enter(r2, 0x2412, 0x0, 0x36, 0x0, 0x0) r7 = epoll_create1(0x80000) r8 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): er_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 610.573968][ T9079] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 610.677344][ T9077] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 610.926461][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 611.231983][ T9098] netlink: 'syz.3.1280': attribute type 6 has an invalid length. [ 611.255056][ T9097] loop5: detected capacity change from 0 to 4096 [ 611.261660][ T9098] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1280'. [ 611.391291][ T9097] ntfs3: loop5: ino=5, "/" directory corrupted [ 611.450076][ T9097] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 613.565389][ T9112] overlayfs: missing 'lowerdir' [ 614.707961][ T9139] overlayfs: missing 'lowerdir' [ 615.720444][ T9125] loop5: detected capacity change from 0 to 32768 [ 615.748513][ T9125] XFS: attr2 mount option is deprecated. [ 615.754320][ T9125] XFS: ikeep mount option is deprecated. [ 615.780295][ T9125] XFS: noikeep mount option is deprecated. [ 616.049275][ T9125] XFS (loop5): Mounting V5 Filesystem [ 616.655067][ T9172] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 616.827203][ T9125] XFS (loop5): Ending clean mount [ 616.873549][ T9125] XFS (loop5): Quotacheck needed: Please wait. [ 617.018565][ T9125] XFS (loop5): Quotacheck: Done. [ 617.552465][ T5585] XFS (loop5): Unmounting Filesystem [ 617.754894][ T9182] overlayfs: missing 'lowerdir' [ 619.470855][ T9211] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 620.843112][ T9220] overlayfs: missing 'lowerdir' [ 621.027397][ T9232] loop1: detected capacity change from 0 to 2048 [ 621.416291][ T9232] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 622.030581][ T9248] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 622.471530][ T9253] loop1: detected capacity change from 0 to 1024 [ 622.492309][ T9255] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1336'. [ 622.518953][ T9253] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 622.573366][ T9253] EXT4-fs (loop1): group descriptors corrupted! [ 622.578932][ T9262] loop5: detected capacity change from 0 to 16 [ 622.591805][ T9253] tmpfs: Bad value for 'mpol' [ 622.638115][ T9262] erofs: (device loop5): mounted with root inode @ nid 36. [ 622.804871][ T4334] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 622.935726][ T9270] overlayfs: missing 'lowerdir' [ 622.996598][ T4334] usb 4-1: unable to get BOS descriptor or descriptor too short [ 623.020939][ T4334] usb 4-1: not running at top speed; connect to a high speed hub [ 623.110423][ T4334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.173678][ T4334] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 623.191084][ T4334] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 623.227443][ T4334] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 623.283852][ T4334] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 623.374275][ T4334] usb 4-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 623.422946][ T4334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.729250][ T4334] usb 4-1: Product: syz [ 623.733661][ T4334] usb 4-1: Manufacturer: syz [ 623.738963][ T4334] usb 4-1: SerialNumber: syz [ 623.781624][ T4334] ipaq 4-1:1.0: PocketPC PDA converter detected [ 623.987266][ T9282] loop1: detected capacity change from 0 to 1024 [ 624.006757][ T4334] usb 4-1: PocketPC PDA converter now attached to ttyUSB0 [ 624.078902][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.085299][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.174324][ T9282] syz.1.1346: attempt to access beyond end of device [ 624.174324][ T9282] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 624.196621][ T4352] usb 4-1: USB disconnect, device number 7 [ 624.215228][ T9282] buffer_io_error: 8 callbacks suppressed [ 624.215247][ T9282] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 624.248347][ T4352] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 624.279304][ T4352] ipaq 4-1:1.0: device disconnected [ 624.301075][ T9282] hfsplus: unable to mark blocks free: error -5 [ 624.309896][ T9290] overlayfs: missing 'lowerdir' [ 624.358370][ T9282] hfsplus: can't free extent [ 624.361468][ T9294] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1352'. [ 624.581664][ T9301] overlayfs: missing 'lowerdir' [ 624.946401][ T9315] overlayfs: missing 'lowerdir' [ 624.994520][ T9312] loop1: detected capacity change from 0 to 4096 [ 625.026333][ T9312] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 625.268471][ T9312] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 625.345778][ T9312] ntfs3: loop1: Failed to load $Extend. [ 625.509279][ T9328] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 625.534607][ T9328] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1364'. [ 625.540093][ T9297] loop5: detected capacity change from 0 to 32768 [ 625.559963][ T9330] overlayfs: missing 'lowerdir' [ 625.585920][ T9328] NCSI netlink: No device for ifindex 130997362 [ 625.611765][ T9297] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1353 (9297) [ 625.746086][ T9297] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 625.787720][ T9297] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 625.810322][ T9297] BTRFS info (device loop5): using free space tree [ 625.962638][ T9347] loop1: detected capacity change from 0 to 64 [ 626.005178][ T9357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1371'. [ 626.055311][ T4352] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 626.062024][ T9347] MINIX-fs: mounting file system with errors, running fsck is recommended [ 626.160883][ T9297] BTRFS info (device loop5): enabling ssd optimizations [ 626.175909][ T9347] Trying to free block not in datazone [ 626.200584][ T9347] Trying to free block not in datazone [ 626.210748][ T9347] Trying to free block not in datazone [ 626.255161][ T4352] usb 4-1: Using ep0 maxpacket: 8 [ 626.255180][ T9347] Trying to free block not in datazone [ 626.340567][ T4352] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 626.369957][ T9347] Trying to free block not in datazone [ 626.411587][ T9347] Trying to free block not in datazone [ 626.431761][ T4352] usb 4-1: config 0 interface 0 has no altsetting 0 [ 626.441956][ T9347] Trying to free block not in datazone [ 626.450173][ T5585] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 626.451037][ T4352] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 626.482037][ T4352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.489698][ T9347] Trying to free block not in datazone [ 626.505134][ T4352] usb 4-1: Product: syz [ 626.509423][ T4352] usb 4-1: Manufacturer: syz [ 626.514098][ T4352] usb 4-1: SerialNumber: syz [ 626.560058][ T4352] usb 4-1: config 0 descriptor?? [ 626.578949][ T4352] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 626.657657][ T8837] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (8837) [ 626.786797][ T4352] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 626.794569][ T4352] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 626.898058][ T4352] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 627.211167][ T14] usb 4-1: USB disconnect, device number 8 [ 627.352542][ T9391] overlayfs: missing 'lowerdir' [ 628.811326][ T9439] overlayfs: missing 'lowerdir' [ 628.981982][ T9441] overlayfs: missing 'lowerdir' [ 628.994953][ T9443] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 630.592092][ T9452] loop5: detected capacity change from 0 to 8 [ 630.635317][ T4284] Bluetooth: hci4: unexpected event 0x03 length: 32 > 11 [ 630.653918][ T9458] netlink: 'syz.1.1405': attribute type 32 has an invalid length. [ 630.681128][ T9452] SQUASHFS error: Failed to read block 0x33c: -5 [ 630.700293][ T9452] SQUASHFS error: Unable to read metadata cache entry [33a] [ 630.722838][ T9452] SQUASHFS error: Unable to read inode 0xa7 [ 631.247219][ T9470] overlayfs: missing 'lowerdir' [ 631.900220][ T9469] overlayfs: missing 'lowerdir' [ 634.103132][ T9485] overlayfs: missing 'lowerdir' [ 634.300859][ T9489] loop1: detected capacity change from 0 to 256 [ 634.657937][ T9498] overlayfs: missing 'lowerdir' [ 635.039817][ T9502] loop1: detected capacity change from 0 to 512 [ 635.082610][ T9502] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 635.143766][ T9502] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 635.188743][ T9502] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.224592][ T9497] loop3: detected capacity change from 0 to 8192 [ 635.270719][ T9497] ntfs3: Invalid value for uid. [ 635.360326][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 635.517390][ T9510] overlayfs: missing 'lowerdir' [ 635.957177][ T9516] loop1: detected capacity change from 0 to 1024 [ 636.131992][ T9516] hfsplus: can't free extent [ 636.138417][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 636.138436][ T26] audit: type=1326 audit(1754455381.830:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141c38ebe9 code=0x7ffc0000 [ 636.166866][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.345709][ T9524] hfsplus: can't free extent [ 636.372676][ T9524] hfsplus: can't free extent [ 636.452805][ T26] audit: type=1326 audit(1754455381.830:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f141c38ebe9 code=0x7ffc0000 [ 636.678575][ T26] audit: type=1326 audit(1754455381.850:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141c38ebe9 code=0x7ffc0000 [ 636.700872][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.062459][ T9533] overlayfs: missing 'lowerdir' [ 637.451565][ T9546] overlayfs: missing 'lowerdir' [ 638.168201][ T9550] capability: warning: `syz.4.1443' uses 32-bit capabilities (legacy support in use) [ 638.241296][ T9539] loop1: detected capacity change from 0 to 32768 [ 638.502203][ T9541] loop3: detected capacity change from 0 to 32768 [ 638.580887][ T9541] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 638.615832][ T9541] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 638.633199][ T9541] BTRFS info (device loop3): using free space tree [ 638.651923][ T9543] loop5: detected capacity change from 0 to 32768 [ 638.730322][ T9543] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 638.787557][ T9543] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 638.797420][ T9543] BTRFS info (device loop5): turning off barriers [ 638.803945][ T9543] BTRFS info (device loop5): setting nodatasum [ 638.811303][ T9543] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 638.830213][ T9543] BTRFS info (device loop5): use zstd compression, level 3 [ 638.844248][ T9543] BTRFS info (device loop5): using free space tree [ 638.945255][ T9541] BTRFS info (device loop3): enabling ssd optimizations [ 639.077724][ T9593] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 639.997053][ T9590] overlayfs: missing 'lowerdir' [ 640.283160][ T4273] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 640.375049][ T41] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 640.591007][ T9609] overlayfs: missing 'lowerdir' [ 640.601924][ T41] usb 2-1: config 0 has no interfaces? [ 640.617462][ T41] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 640.626841][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.636369][ T41] usb 2-1: Product: syz [ 640.641096][ T41] usb 2-1: Manufacturer: syz [ 640.645927][ T41] usb 2-1: SerialNumber: syz [ 640.659203][ T41] usb 2-1: config 0 descriptor?? [ 640.704439][ T5585] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 641.166297][ T951] usb 2-1: USB disconnect, device number 4 [ 641.298181][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.401541][ T8845] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (8845) [ 641.624985][ T9623] overlayfs: missing 'lowerdir' [ 641.764300][ T8837] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (8837) [ 642.361114][ T9634] loop3: detected capacity change from 0 to 512 [ 642.434117][ T9634] EXT4-fs: Ignoring removed oldalloc option [ 642.492900][ T9634] EXT4-fs (loop3): 1 truncate cleaned up [ 642.524991][ T9634] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 642.597955][ T9643] loop1: detected capacity change from 0 to 128 [ 642.640109][ T9643] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 642.689684][ T9643] ext4 filesystem being mounted at /273/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 642.784347][ T4273] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 642.904825][ T4273] EXT4-fs (loop3): Remounting filesystem read-only [ 642.977982][ T9646] loop5: detected capacity change from 0 to 512 [ 643.004112][ T4273] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0) [ 643.035677][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 643.058452][ T9646] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 643.082707][ T9646] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.102591][ T4273] EXT4-fs (loop3): Remounting filesystem read-only [ 643.249900][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 643.364344][ T5585] EXT4-fs (loop5): unmounting filesystem. [ 643.549515][ T9652] loop1: detected capacity change from 0 to 32768 [ 643.560480][ T9652] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 644.758988][ T8837] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 644.777281][ T9661] overlayfs: missing 'lowerdir' [ 644.948164][ T9663] loop3: detected capacity change from 0 to 2048 [ 645.116226][ T9667] loop5: detected capacity change from 0 to 2048 [ 645.196369][ T4284] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 645.207316][ T4284] Bluetooth: hci3: Injecting HCI hardware error event [ 645.219281][ T4286] Bluetooth: hci3: hardware error 0x00 [ 645.458829][ T9663] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 645.476710][ T9667] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 645.489875][ T9667] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 645.695372][ T9667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 645.718022][ T9666] overlayfs: missing 'lowerdir' [ 645.755605][ T9663] overlayfs: upper fs needs to support d_type. [ 645.809765][ T9663] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 645.844572][ T9663] overlayfs: failed to set xattr on upper [ 645.869343][ T9663] overlayfs: ...falling back to index=off,metacopy=off. [ 646.086959][ T4273] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 646.117454][ T4273] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 646.318219][ T9681] loop1: detected capacity change from 0 to 512 [ 646.342505][ T9681] EXT4-fs: Ignoring removed nobh option [ 646.363142][ T9681] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 646.364898][ T9627] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 646.375079][ T9681] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 646.393942][ T9681] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #13: comm syz.1.1478: casefold flag without casefold feature [ 646.412748][ T9681] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1478: couldn't read orphan inode 13 (err -117) [ 646.427659][ T9681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 646.487344][ T9624] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 646.502057][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 646.594828][ T9627] usb 6-1: Using ep0 maxpacket: 32 [ 646.602190][ T9627] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 646.634862][ T9627] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 646.644489][ T9627] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 646.673871][ T9627] usb 6-1: config 1 has no interface number 0 [ 646.680316][ T9627] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 646.711669][ T9624] usb 1-1: Using ep0 maxpacket: 16 [ 646.726590][ T9624] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 646.741131][ T9627] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 646.751294][ T9624] usb 1-1: config 0 has no interface number 0 [ 646.764183][ T9624] usb 1-1: config 0 interface 237 has no altsetting 0 [ 646.771597][ T9627] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 646.787541][ T9627] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 646.797077][ T9627] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.807211][ T9624] usb 1-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 646.817042][ T9624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.846562][ T9627] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 646.861492][ T9624] usb 1-1: Product: syz [ 646.865872][ T9624] usb 1-1: Manufacturer: syz [ 646.870511][ T9624] usb 1-1: SerialNumber: syz [ 646.897181][ T9624] usb 1-1: config 0 descriptor?? [ 646.917374][ T9624] snd_usb_podhd 1-1:0.237: Line 6 POD HD300 found [ 647.111007][ T9627] snd_usb_pod 6-1:1.1: cannot start listening: -90 [ 647.138397][ T9624] snd_usb_podhd 1-1:0.237: cannot get proper max packet size [ 647.160163][ T9627] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 647.169580][ T9624] snd_usb_podhd 1-1:0.237: Line 6 POD HD300 now disconnected [ 647.182162][ T9627] snd_usb_pod: probe of 6-1:1.1 failed with error -90 [ 647.220223][ T9624] snd_usb_podhd: probe of 1-1:0.237 failed with error -22 [ 647.334932][ T4286] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 647.576032][ T9624] usb 1-1: USB disconnect, device number 6 [ 647.991768][ T9628] usb 6-1: USB disconnect, device number 3 [ 648.096036][ T9695] overlayfs: missing 'lowerdir' [ 648.211009][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 648.230192][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 648.239702][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 648.256791][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 648.264508][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 648.274748][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 648.345787][ T9698] bond0 speed is unknown, defaulting to 1000 [ 648.367368][ T9705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1488'. [ 648.379327][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'. [ 648.389010][ T9705] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 648.691398][ T9712] overlayfs: missing 'lowerdir' [ 648.823378][ T9715] overlayfs: missing 'lowerdir' [ 648.951295][ T9698] chnl_net:caif_netlink_parms(): no params data found [ 649.915852][ T9698] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.924978][ T9698] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.958626][ T9698] device bridge_slave_0 entered promiscuous mode [ 649.968872][ T9698] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.981736][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.993554][ T9698] device bridge_slave_1 entered promiscuous mode [ 650.024860][ T9698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.025924][ T9624] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 650.036488][ T9698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.078985][ T9698] team0: Port device team_slave_0 added [ 650.094316][ T9698] team0: Port device team_slave_1 added [ 650.114831][ T126] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 650.134856][ T9628] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 650.164163][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.178738][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.217085][ T9698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.240169][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.247907][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.284377][ T9624] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.294781][ T9698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.295863][ T9624] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.312041][ T126] usb 6-1: Using ep0 maxpacket: 16 [ 650.319123][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 650.324121][ T126] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 650.340172][ T9624] usb 2-1: config 0 interface 0 has no altsetting 0 [ 650.347243][ T9624] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 650.354394][ T126] usb 6-1: config 0 has no interface number 0 [ 650.356461][ T9624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.364923][ T9624] usb 2-1: config 0 descriptor?? [ 650.378148][ T9628] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 650.379347][ T9748] overlayfs: missing 'lowerdir' [ 650.396914][ T9628] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 650.406447][ T9628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.416475][ T126] usb 6-1: config 0 interface 237 has no altsetting 0 [ 650.427535][ T9628] usb 1-1: config 0 descriptor?? [ 650.466927][ T126] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 650.492464][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.511739][ T126] usb 6-1: Product: syz [ 650.520941][ T126] usb 6-1: Manufacturer: syz [ 650.530018][ T126] usb 6-1: SerialNumber: syz [ 650.547891][ T9698] device hsr_slave_0 entered promiscuous mode [ 650.565897][ T126] usb 6-1: config 0 descriptor?? [ 650.579557][ T9750] overlayfs: missing 'lowerdir' [ 650.587884][ T9698] device hsr_slave_1 entered promiscuous mode [ 650.598795][ T126] snd_usb_podhd 6-1:0.237: Line 6 POD HD300 found [ 650.803851][ T9624] pantherlord 0003:0810:0002.0001: unknown main item tag 0x0 [ 650.817752][ T9624] pantherlord 0003:0810:0002.0001: unknown main item tag 0x0 [ 650.826043][ T9624] pantherlord 0003:0810:0002.0001: unknown main item tag 0x0 [ 650.854437][ T9628] elecom 0003:056E:00FC.0002: hidraw1: USB HID v1.01 Device [HID 056e:00fc] on usb-dummy_hcd.0-1/input0 [ 650.866237][ T9624] pantherlord 0003:0810:0002.0001: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.1-1/input0 [ 650.888921][ T126] snd_usb_podhd 6-1:0.237: cannot get proper max packet size [ 650.897522][ T126] snd_usb_podhd 6-1:0.237: Line 6 POD HD300 now disconnected [ 650.906338][ T126] snd_usb_podhd: probe of 6-1:0.237 failed with error -22 [ 650.918990][ T9624] pantherlord 0003:0810:0002.0001: no output reports found [ 651.075247][ T9628] usb 1-1: USB disconnect, device number 7 [ 651.545541][ T9627] usb 2-1: USB disconnect, device number 5 [ 651.627913][ T9628] usb 6-1: USB disconnect, device number 4 [ 651.740655][ T9698] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 651.794155][ T9698] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 651.845745][ T9698] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 651.902454][ T9698] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 651.942958][ T9758] fido_id[9758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 651.987603][ T9760] fido_id[9760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 652.154827][ T126] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 652.222218][ T9698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.251904][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 652.291615][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.322639][ T9698] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.344875][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 652.352713][ T126] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 652.362124][ T126] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 652.370046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 652.375099][ T126] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 652.394889][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 652.401724][ T126] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 652.401897][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.431120][ T126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 652.439801][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.443856][ T126] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 652.446967][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.462305][ T126] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 652.464083][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 652.480310][ T126] usb 1-1: Product: syz [ 652.484669][ T126] usb 1-1: Manufacturer: syz [ 652.520704][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 652.545621][ T9780] overlayfs: missing 'lowerdir' [ 652.561015][ T126] usb 1-1: SerialNumber: syz [ 652.573396][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.622924][ T126] usb 1-1: config 0 descriptor?? [ 652.653693][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.661838][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.689720][ T126] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 652.796446][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 652.894876][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 652.921479][ T126] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 652.964203][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 653.113477][ T126] usb 1-1: USB disconnect, device number 8 [ 653.140269][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 653.191582][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 653.200572][ T126] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 653.202020][ T9784] overlayfs: missing 'lowerdir' [ 653.223098][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 653.250449][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 653.362840][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 654.363812][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.421111][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 654.466470][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 654.474894][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 654.625343][ T126] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 654.826738][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.851520][ T126] usb 2-1: config 0 has no interfaces? [ 654.871798][ T126] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 654.890783][ T9628] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 654.904351][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.929452][ T126] usb 2-1: config 0 descriptor?? [ 655.097223][ T9628] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 655.120714][ T9628] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.177901][ T9628] usb 1-1: config 0 interface 0 has no altsetting 0 [ 655.186991][ T126] usb 2-1: USB disconnect, device number 6 [ 655.212516][ T9628] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 655.252936][ T9628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.293060][ T9628] usb 1-1: config 0 descriptor?? [ 655.302224][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 655.318344][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 655.370983][ T9698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.549846][ T9814] overlayfs: missing 'lowerdir' [ 655.728950][ T9628] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 655.754834][ T9628] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 655.935789][ T9628] hid-steam 0003:28DE:1102.0003: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 656.141678][ T9827] overlayfs: missing 'lowerdir' [ 656.155034][ T126] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 656.354754][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 656.362180][ T126] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 656.389039][ T9628] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 656.397761][ T126] usb 2-1: config 0 has no interface number 0 [ 656.404217][ T9628] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 656.423860][ T9628] hid-steam 0003:28DE:1102.0004: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 656.440105][ T126] usb 2-1: config 0 interface 12 has no altsetting 0 [ 656.463592][ T126] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 656.477056][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.501280][ T126] usb 2-1: Product: syz [ 656.512555][ T126] usb 2-1: Manufacturer: syz [ 656.533228][ T126] usb 2-1: SerialNumber: syz [ 656.535468][ T9628] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' connected [ 656.556188][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 656.568494][ T9628] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0003/input/input16 [ 656.608714][ T9628] usb 1-1: USB disconnect, device number 9 [ 656.611951][ T126] usb 2-1: config 0 descriptor?? [ 656.728908][ T9628] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' disconnected [ 656.890574][ T9835] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 656.920985][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 656.944306][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 656.998782][ T9832] fido_id[9832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 657.521948][ T126] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 657.538246][ T126] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 657.578670][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 657.587545][ T126] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 657.600992][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 657.613093][ T9837] overlayfs: missing 'lowerdir' [ 657.624489][ T126] f81534: probe of 2-1:0.12 failed with error -71 [ 657.639979][ T9698] device veth0_vlan entered promiscuous mode [ 657.651753][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 657.662611][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 657.675135][ T126] usb 2-1: USB disconnect, device number 7 [ 657.734069][ T9698] device veth1_vlan entered promiscuous mode [ 657.791907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 657.805108][ T9847] overlayfs: missing 'lowerdir' [ 657.817375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 657.832395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 657.841312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 657.850702][ T9624] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 657.862188][ T9698] device veth0_macvtap entered promiscuous mode [ 657.877441][ T9698] device veth1_macvtap entered promiscuous mode [ 657.911297][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.922192][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.932841][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.943880][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.954063][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.964929][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.976395][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.983753][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 657.992605][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 658.000711][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 658.009995][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 658.021122][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.032692][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.043282][ T9624] usb 6-1: Using ep0 maxpacket: 32 [ 658.048700][ T9628] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 658.062957][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.078959][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.087063][ T9624] usb 6-1: unable to get BOS descriptor or descriptor too short [ 658.092674][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.114422][ T9624] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 658.114919][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.130538][ T9624] usb 6-1: can't read configurations, error -71 [ 658.142437][ T9698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.155589][ T9698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.189240][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.231340][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 658.252643][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 658.313322][ T9698] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.343720][ T9698] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.374478][ T9698] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.410636][ T9628] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 658.412920][ T9698] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.992606][ T9628] usb 1-1: config 0 has no interface number 0 [ 659.022082][ T9628] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 659.032402][ T9628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.055771][ T9628] usb 1-1: config 0 descriptor?? [ 659.065142][ T9628] usb 1-1: selecting invalid altsetting 1 [ 659.074042][ T9628] dvb_ttusb_budget: ttusb_init_controller: error [ 659.080953][ T9628] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 659.198286][ T9628] DVB: Unable to find symbol cx22700_attach() [ 659.222623][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.255798][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.281144][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 659.332595][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.351098][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.354437][ T9628] DVB: Unable to find symbol tda10046_attach() [ 659.377226][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 659.391186][ T9628] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 659.446304][ T9628] usb 1-1: USB disconnect, device number 10 [ 659.447478][ T9862] overlayfs: missing 'lowerdir' [ 660.157048][ T9877] overlayfs: missing 'lowerdir' [ 660.438470][ T9880] overlayfs: missing 'lowerdir' [ 660.943798][ T9887] netlink: 'syz.4.1550': attribute type 1 has an invalid length. [ 661.005564][ T9887] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1550'. [ 662.247158][ T9888] overlayfs: missing 'lowerdir' [ 662.894831][ T9616] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 663.110399][ T9616] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 663.142166][ T9616] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.180813][ T9616] usb 7-1: config 0 interface 0 has no altsetting 0 [ 663.214823][ T9616] usb 7-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 663.235028][ T9616] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.279413][ T9616] usb 7-1: config 0 descriptor?? [ 663.745395][ T9616] pantherlord 0003:0810:0002.0005: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.6-1/input0 [ 663.972791][ T9616] pantherlord 0003:0810:0002.0005: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 664.034195][ T9616] usb 7-1: USB disconnect, device number 2 [ 664.420658][ T9916] overlayfs: missing 'lowerdir' [ 664.440969][ T9923] netlink: 802 bytes leftover after parsing attributes in process `syz.1.1564'. [ 664.734018][ T9925] fido_id[9925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 665.165326][ T9939] tmpfs: Bad value for 'mpol' [ 665.194251][ T9939] tmpfs: Bad value for 'mpol' [ 665.274877][ T9616] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 665.474793][ T9616] usb 2-1: Using ep0 maxpacket: 16 [ 665.487752][ T9616] usb 2-1: config 0 has no interfaces? [ 665.522968][ T9616] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 665.544854][ T9616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.558418][ T9616] usb 2-1: Product: syz [ 665.564380][ T9616] usb 2-1: Manufacturer: syz [ 665.569725][ T9616] usb 2-1: SerialNumber: syz [ 665.589467][ T9616] usb 2-1: config 0 descriptor?? [ 665.809444][ T9628] usb 2-1: USB disconnect, device number 8 [ 665.864905][ T4326] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 665.876995][ T9954] (unnamed net_device) (uninitialized): (slave bridge0): Device is not bonding slave [ 665.881361][ T9952] overlayfs: missing 'lowerdir' [ 665.892992][ T9954] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge0) [ 666.074840][ T4326] usb 1-1: Using ep0 maxpacket: 32 [ 666.089327][ T4326] usb 1-1: config 0 has no interfaces? [ 666.122632][ T4326] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 666.161926][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.190302][ T4326] usb 1-1: Product: syz [ 666.204976][ T4326] usb 1-1: Manufacturer: syz [ 666.209618][ T4326] usb 1-1: SerialNumber: syz [ 666.244537][ T4326] usb 1-1: config 0 descriptor?? [ 666.266186][ T9958] netlink: 'syz.4.1579': attribute type 50 has an invalid length. [ 666.511825][ T9628] usb 1-1: USB disconnect, device number 11 [ 666.576028][ T9962] device bridge0 entered promiscuous mode [ 666.583352][ T9962] device macvlan2 entered promiscuous mode [ 666.942868][ T9973] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1586'. [ 666.952353][ T9973] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1586'. [ 666.983796][ T9972] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1586'. [ 667.104842][ T4326] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 667.136328][ T9976] overlayfs: missing 'lowerdir' [ 667.307594][ T4326] usb 2-1: Using ep0 maxpacket: 32 [ 667.316687][ T4326] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 667.327085][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.352340][ T4326] usb 2-1: config 0 descriptor?? [ 667.366865][ T4326] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 667.405773][ T9624] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 667.605611][ T9624] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 667.614557][ T9624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 667.624103][ T9624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 667.638411][ T9624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 667.647533][ T9624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 667.657524][ T9624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 667.668919][ T9624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 667.679584][ T9624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 667.689874][ T9624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 667.701302][ T9624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 667.710855][ T9624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 667.720279][ T9624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 667.732653][ T9624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 667.741894][ T9624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 667.752657][ T9624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 667.764512][ T9624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 667.773460][ T9624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 667.782964][ T9624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 667.795017][ T9624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 667.804615][ T9624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 667.814489][ T9624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 667.826000][ T9624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 667.834989][ T9616] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 667.847129][ T9624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 667.866602][ T9624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 667.878131][ T9624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 667.892773][ T9624] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 667.902344][ T9624] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 667.911621][ T9624] usb 1-1: Product: syz [ 667.916474][ T9624] usb 1-1: Manufacturer: syz [ 667.921193][ T9624] usb 1-1: SerialNumber: syz [ 667.939261][ T9624] usb 1-1: config 0 descriptor?? [ 667.972805][ T4326] gspca_vc032x: reg_w err -71 [ 667.985549][ T9624] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 667.993723][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.017579][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.037219][ T9616] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 668.053845][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.063209][ T9616] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 668.081054][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.088883][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.094228][ T9616] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 668.104277][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.109706][ T9616] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 668.119814][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.126347][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.135264][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.141532][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.148065][ T9616] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 668.157730][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.163392][ T9616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.172013][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.177509][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.184230][ T9616] usb 6-1: Product: syz [ 668.188545][ T9616] usb 6-1: Manufacturer: syz [ 668.193709][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.199290][ T9616] usb 6-1: SerialNumber: syz [ 668.204409][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.221291][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.229595][ T9616] usb 6-1: config 0 descriptor?? [ 668.235682][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.242554][ T4326] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.257487][ T9616] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 668.266043][ T4326] gspca_vc032x: Unknown sensor... [ 668.275671][ T4326] vc032x: probe of 2-1:0.0 failed with error -22 [ 668.323735][ T4326] usb 2-1: USB disconnect, device number 9 [ 668.342371][ T126] usb 1-1: USB disconnect, device number 12 [ 668.358422][ T126] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 668.489818][ T9616] ums-isd200: probe of 6-1:0.0 failed with error -22 [ 668.666898][ T126] usb 6-1: USB disconnect, device number 7 [ 668.723746][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 668.764457][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 668.775239][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.788221][ T9995] device bridge_slave_0 left promiscuous mode [ 668.795180][ T9995] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.845642][ T9995] device bridge_slave_1 left promiscuous mode [ 668.871500][ T9995] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.901564][ T9995] bond0: (slave bond_slave_0): Releasing backup interface [ 668.963112][ T9995] bond0: (slave bond_slave_1): Releasing backup interface [ 669.046880][ T9995] team0: Port device team_slave_0 removed [ 669.081353][ T9995] team0: Port device team_slave_1 removed [ 669.097481][ T9995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.106111][ T9995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.118918][ T9995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.127247][ T9995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.225004][ T9626] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 669.576804][ T9626] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 669.659899][ T9626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.173423][ T9626] usb 1-1: config 0 descriptor?? [ 670.884820][ T4334] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 671.055108][ T126] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 671.066407][T10029] overlayfs: missing 'lowerdir' [ 671.084810][ T4334] usb 2-1: Using ep0 maxpacket: 32 [ 671.094646][ T4334] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 671.124414][ T4334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.138917][ T4334] usb 2-1: Product: syz [ 671.151854][ T4334] usb 2-1: Manufacturer: syz [ 671.166770][ T4334] usb 2-1: SerialNumber: syz [ 671.204369][ T9626] usb 1-1: Cannot set autoneg [ 671.211077][ T9626] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 671.211128][ T4334] usb 2-1: config 0 descriptor?? [ 671.256822][ T4334] hub 2-1:0.0: bad descriptor, ignoring hub [ 671.263574][ T9626] usb 1-1: USB disconnect, device number 13 [ 671.266455][ T126] usb 7-1: unable to get BOS descriptor or descriptor too short [ 671.293432][ T126] usb 7-1: config 1 has an invalid interface number: 82 but max is 1 [ 671.304200][ T4334] hub: probe of 2-1:0.0 failed with error -5 [ 671.341425][ T126] usb 7-1: config 1 has no interface number 1 [ 671.349392][ T4334] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 671.358526][ T126] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 671.371945][ T126] usb 7-1: too many endpoints for config 1 interface 82 altsetting 79: 80, using maximum allowed: 30 [ 671.384803][ T126] usb 7-1: config 1 interface 82 altsetting 79 has 0 endpoint descriptors, different from the interface descriptor's value: 80 [ 671.399591][ T126] usb 7-1: config 1 interface 0 has no altsetting 0 [ 671.420002][ T126] usb 7-1: config 1 interface 82 has no altsetting 0 [ 671.444729][ T126] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 671.459306][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.467748][ T4334] gspca_vc032x: reg_w err -71 [ 671.472462][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.479680][ T126] usb 7-1: Product: syz [ 671.484078][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.489627][ T126] usb 7-1: Manufacturer: syz [ 671.494435][ T126] usb 7-1: SerialNumber: syz [ 671.504746][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.520129][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.553055][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.575370][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.584959][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.590341][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.596041][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.603504][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.610313][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.620156][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.629785][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.636837][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.674456][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.691125][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.704830][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.710211][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.716339][ T4334] gspca_vc032x: I2c Bus Busy Wait 00 [ 671.721688][ T4334] gspca_vc032x: Unknown sensor... [ 671.733488][ T4334] vc032x: probe of 2-1:0.0 failed with error -22 [ 671.746467][ T126] smsusb:smsusb_probe: board id=8, interface number 0 [ 671.785744][ T4334] usb 2-1: USB disconnect, device number 10 [ 671.811233][ T126] smsusb:smsusb_probe: board id=8, interface number 82 [ 671.844043][ T126] usb 7-1: USB disconnect, device number 3 [ 672.235627][T10037] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1613'. [ 672.404785][ T9626] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 672.810873][ T9626] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 673.410360][ T126] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 673.452417][ T9626] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 673.468689][ T9626] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 673.479824][ T9626] usb 1-1: config 220 has no interface number 2 [ 673.486595][ T9626] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 673.500254][ T9626] usb 1-1: config 220 interface 0 has no altsetting 0 [ 673.507481][ T9626] usb 1-1: config 220 interface 76 has no altsetting 0 [ 673.514475][ T9626] usb 1-1: config 220 interface 1 has no altsetting 0 [ 673.597739][ T9626] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 673.604785][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 673.612073][ T9626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.613841][ T126] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 673.630161][ T9626] usb 1-1: Product: syz [ 673.634484][ T9626] usb 1-1: Manufacturer: syz [ 673.639188][ T9626] usb 1-1: SerialNumber: syz [ 673.669196][ T126] usb 2-1: config 0 has no interface number 0 [ 673.727655][ T126] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 673.737403][ T4334] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 673.757599][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.773361][ T126] usb 2-1: Product: syz [ 673.780199][ T126] usb 2-1: Manufacturer: syz [ 673.789698][ T126] usb 2-1: SerialNumber: syz [ 673.805436][ T126] usb 2-1: config 0 descriptor?? [ 673.832983][ T126] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 673.879463][ T9626] usb 1-1: selecting invalid altsetting 0 [ 673.896214][ T9626] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 673.903083][ T9626] usb 1-1: No valid video chain found. [ 673.960598][ T4334] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 673.985069][ T9626] usb 1-1: selecting invalid altsetting 0 [ 673.992262][ T9626] usbtest: probe of 1-1:220.1 failed with error -22 [ 673.994801][ T4334] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.025016][ T9626] usb 1-1: USB disconnect, device number 14 [ 674.040354][ T4334] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 674.068712][ T126] usb 2-1: qt2_attach - failed to power on unit: -71 [ 674.077044][ T126] quatech2: probe of 2-1:0.51 failed with error -71 [ 674.085495][ T4334] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.100175][ T126] usb 2-1: USB disconnect, device number 11 [ 674.108387][ T4334] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 674.118861][ T4334] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 674.128730][ T4334] usb 7-1: Product: syz [ 674.133011][ T4334] usb 7-1: Manufacturer: syz [ 674.142941][ T4334] cdc_wdm 7-1:1.0: skipping garbage [ 674.148311][ T4334] cdc_wdm 7-1:1.0: skipping garbage [ 674.157683][ T4334] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 674.163624][ T4334] cdc_wdm 7-1:1.0: Unknown control protocol [ 674.324856][ T9624] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 674.356511][ T126] usb 7-1: USB disconnect, device number 4 [ 674.505983][ T9624] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.516185][ T9624] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 674.529523][ T9624] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 674.538630][ T9624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.549827][ T9624] usb 6-1: config 0 descriptor?? [ 674.724855][ T4334] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 674.904757][ T4334] usb 1-1: Using ep0 maxpacket: 16 [ 674.919881][ T4334] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 674.930692][ T4334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.938853][ T4334] usb 1-1: Product: syz [ 674.943061][ T4334] usb 1-1: Manufacturer: syz [ 674.947842][ T126] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 674.962572][ T4334] usb 1-1: SerialNumber: syz [ 675.144839][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 675.169872][ T126] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 675.218439][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.479252][ T126] usb 2-1: Product: syz [ 675.539871][ T126] usb 2-1: Manufacturer: syz [ 675.593863][ T126] usb 2-1: SerialNumber: syz [ 675.757832][ T126] usb 2-1: config 0 descriptor?? [ 675.772984][ T9624] hid-picolcd 0003:04D8:C002.0006: No report with id 0x11 found [ 675.783906][ T9624] usb 6-1: USB disconnect, device number 8 [ 675.908524][ T126] gspca_main: se401-2.14.0 probing 047d:5003 [ 676.195430][ T4334] snd-usb-audio: probe of 1-1:222.0 failed with error -71 [ 676.267132][ T4334] usb 1-1: USB disconnect, device number 15 [ 676.301584][ T126] gspca_se401: Wrong descriptor type [ 676.314420][ T9611] udevd[9611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 676.503952][ T126] usb 2-1: USB disconnect, device number 12 [ 676.781486][T10086] overlayfs: missing 'lowerdir' [ 676.786316][T10085] overlayfs: missing 'lowerdir' [ 676.817558][T10091] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (128) [ 677.242349][T10098] overlayfs: missing 'lowerdir' [ 677.367650][T10103] tipc: Started in network mode [ 677.384845][T10103] tipc: Node identity , cluster identity 4711 [ 678.079948][T10115] overlayfs: missing 'lowerdir' [ 678.765360][ T9627] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 678.973221][ T9627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.985092][ T9627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.016072][ T9627] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.030550][ T9627] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 679.040539][ T9627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.084893][ T9628] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 679.140031][ T9627] usb 1-1: config 0 descriptor?? [ 679.502337][ T9628] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 679.518134][ T9628] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 679.559762][ T9628] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.578585][ T9628] usb 6-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.00 [ 679.588148][ T9628] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.626144][ T9628] usb 6-1: config 0 descriptor?? [ 679.648559][T10130] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 679.684369][ T9627] dragonrise 0003:0079:0011.0007: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 680.294520][ T9628] wacom 0003:056A:0326.0008: ignoring exceeding usage max [ 680.530291][ T9628] wacom 0003:056A:0326.0008: Unknown device_type for 'HID 056a:0326'. Ignoring. [ 680.701196][ T9628] usb 6-1: USB disconnect, device number 9 [ 680.791821][ T9624] usb 1-1: USB disconnect, device number 16 [ 680.953745][T10157] overlayfs: missing 'lowerdir' [ 681.044895][ T126] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 681.238565][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.259837][ T126] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 681.270777][ T126] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 681.295498][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.316604][ T126] usb 2-1: config 0 descriptor?? [ 681.332195][ T126] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 681.339392][ T126] dvb-usb: bulk message failed: -22 (3/0) [ 681.375511][ T126] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 681.403696][ T126] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 681.481759][ T126] usb 2-1: media controller created [ 681.573268][T10151] dvb-usb: bulk message failed: -22 (4/0) [ 681.630077][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 682.033343][ T126] dvb-usb: bulk message failed: -22 (6/0) [ 682.119415][ T126] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 682.194627][ T126] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 682.269689][ T126] dvb-usb: schedule remote query interval to 150 msecs. [ 682.605002][ T9627] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 682.830706][ T9627] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 682.867019][ T9627] usb 6-1: config 0 has no interface number 0 [ 682.925257][ T9627] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 683.018897][ T9627] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.149125][ T126] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 683.149269][ T9627] usb 6-1: config 0 descriptor?? [ 683.175557][ T126] usb 2-1: USB disconnect, device number 13 [ 683.231673][ T9627] usb 6-1: selecting invalid altsetting 1 [ 683.236752][ T126] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 683.253788][ T9627] dvb_ttusb_budget: ttusb_init_controller: error [ 683.283935][ T9627] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 683.645245][ T126] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 683.870403][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.950924][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.996159][ T126] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 684.025752][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.057529][ T126] usb 2-1: config 0 descriptor?? [ 684.086458][ T9627] DVB: Unable to find symbol cx22700_attach() [ 684.329034][ T9627] DVB: Unable to find symbol tda10046_attach() [ 684.337659][ T9627] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 684.359791][ T9627] usb 6-1: USB disconnect, device number 10 [ 684.514537][ T126] logitech 0003:046D:C295.0009: item fetching failed at offset 5/7 [ 684.526546][ T126] logitech 0003:046D:C295.0009: parse failed [ 684.533199][ T126] logitech: probe of 0003:046D:C295.0009 failed with error -22 [ 684.719514][ T9627] usb 2-1: USB disconnect, device number 14 [ 685.518220][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.526168][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.308006][ T9628] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 686.524849][ T9628] usb 6-1: Using ep0 maxpacket: 8 [ 686.535523][ T9628] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.580186][ T9628] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.590951][T10234] tipc: Started in network mode [ 686.596298][T10234] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 686.604080][ T9628] usb 6-1: config 0 interface 0 has no altsetting 0 [ 686.611431][ T9628] usb 6-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 686.621149][T10234] tipc: Enabled bearer , priority 0 [ 686.636154][ T9628] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.686586][ T9628] usb 6-1: config 0 descriptor?? [ 687.785246][ T9628] waltop 0003:172F:0032.000A: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.5-1/input0 [ 687.973992][ T9628] usb 6-1: USB disconnect, device number 11 [ 688.023830][ T41] tipc: Node number set to 11578026 [ 688.380736][T10251] overlayfs: missing 'lowerdir' [ 690.393289][T10254] fido_id[10254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 691.845587][T10285] netlink: 'syz.0.1710': attribute type 5 has an invalid length. [ 693.744894][ T126] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 694.863295][ T126] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 694.934890][ T126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.989839][ T126] usb 7-1: config 0 descriptor?? [ 695.440303][ T126] [drm:udl_init] *ERROR* Selecting channel failed [ 696.294528][ T126] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2 [ 696.351457][ T126] [drm] Initialized udl on minor 2 [ 696.427987][ T126] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 696.569360][ T126] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 696.674494][ T126] usb 7-1: USB disconnect, device number 5 [ 696.696976][ T9616] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 696.776520][ T9616] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 696.809728][T10317] loop6: detected capacity change from 0 to 1024 [ 696.836553][ T9616] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 696.997548][T10317] hfsplus: bad catalog entry type [ 697.227999][T10325] overlayfs: missing 'lowerdir' [ 697.244811][ T75] hfsplus: b-tree write err: -5, ino 4 [ 697.344872][ T4334] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 697.544933][ T4334] usb 6-1: Using ep0 maxpacket: 16 [ 697.553246][ T4334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.649020][ T4334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.696754][ T4334] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 698.264167][ T4334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.328383][ T4334] usb 6-1: config 0 descriptor?? [ 699.669458][ T4334] input: HID 041e:3100 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.000B/input/input21 [ 699.842247][ T4334] creative-sb0540 0003:041E:3100.000B: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.5-1/input0 [ 699.853768][T10343] loop6: detected capacity change from 0 to 2048 [ 699.910568][ T4334] usb 6-1: USB disconnect, device number 12 [ 700.002653][ T4543] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.114382][T10343] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 700.312348][T10344] fido_id[10344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 701.685082][T10360] overlayfs: missing 'lowerdir' [ 702.284897][ T4326] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 702.484928][ T4326] usb 6-1: Using ep0 maxpacket: 32 [ 702.497206][ T4326] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.531623][ T4326] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 702.571283][ T4326] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.663478][ T4326] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 702.683827][T10375] loop1: detected capacity change from 0 to 2048 [ 702.690342][ T4326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.718233][ T4326] usb 6-1: Product: syz [ 702.732872][ T4326] usb 6-1: Manufacturer: syz [ 702.747578][ T4326] usb 6-1: SerialNumber: syz [ 702.800101][ T4326] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 702.826518][ T4326] cdc_ncm 6-1:1.0: bind() failure [ 703.173236][T10375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 703.202563][T10375] EXT4-fs error (device loop1): ext4_ext_precache:645: inode #2: comm syz.1.1746: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 703.236120][ T4334] usb 6-1: USB disconnect, device number 13 [ 703.274124][T10375] EXT4-fs (loop1): Remounting filesystem read-only [ 703.445278][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 703.564099][ T4543] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.746766][T10389] loop1: detected capacity change from 0 to 16 [ 703.781744][T10389] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 704.092904][ T41] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 704.404779][ T4334] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 705.343847][ T41] usb 1-1: config 0 has no interfaces? [ 705.356674][ T4334] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.422708][ T4334] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 705.442610][ T41] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 705.458539][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.479601][ T41] usb 1-1: Product: syz [ 705.489932][ T41] usb 1-1: Manufacturer: syz [ 705.500536][ T41] usb 1-1: SerialNumber: syz [ 705.514284][ T4334] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 705.550725][ T4334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 705.573939][ T41] usb 1-1: config 0 descriptor?? [ 705.575685][ T4334] usb 2-1: SerialNumber: syz [ 706.435499][ T4334] usb 2-1: 0:2 : does not exist [ 706.536657][ T4334] usb 2-1: USB disconnect, device number 15 [ 706.567122][ T4283] Bluetooth: hci1: command 0x0405 tx timeout [ 706.579575][T10411] loop5: detected capacity change from 0 to 256 [ 706.676620][ T126] usb 1-1: USB disconnect, device number 17 [ 706.721922][T10411] FAT-fs (loop5): Directory bread(block 1285) failed [ 706.879157][ T9611] udevd[9611]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 707.099546][ T4543] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.634775][ T4286] Bluetooth: hci1: command 0x0405 tx timeout [ 708.968068][T10437] overlayfs: missing 'lowerdir' [ 709.454778][ T4334] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 709.598872][ T4543] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.714950][ T4334] usb 1-1: Using ep0 maxpacket: 32 [ 709.756315][ T4334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.804412][ T4334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.857495][T10443] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 709.879038][ T4334] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 709.924586][ T4334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.938228][T10426] loop1: detected capacity change from 0 to 32768 [ 709.977002][ T4334] usb 1-1: config 0 descriptor?? [ 710.057954][T10449] overlayfs: missing 'lowerdir' [ 710.088499][T10451] loop5: detected capacity change from 0 to 128 [ 710.190736][T10451] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 710.228919][T10451] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 710.244740][T10426] [ 710.244740][T10426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 710.244740][T10426] [ 710.315988][T10426] read_mapping_page failed! [ 710.325536][T10426] diRead: diIAGRead returned -5 [ 710.343209][ T5585] EXT4-fs (loop5): unmounting filesystem. [ 710.431317][ T4334] hid_mf 0003:0079:1801.000C: item fetching failed at offset 0/2 [ 710.443574][T10456] overlayfs: missing 'lowerdir' [ 710.449038][ T4334] hid_mf 0003:0079:1801.000C: HID parse failed. [ 710.457498][ T4334] hid_mf: probe of 0003:0079:1801.000C failed with error -22 [ 710.671163][ T9626] usb 1-1: USB disconnect, device number 18 [ 710.919672][ T4334] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 711.114845][ T4334] usb 6-1: Using ep0 maxpacket: 8 [ 711.122294][ T4334] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 711.155011][ T4334] usb 6-1: config 179 has no interface number 0 [ 711.172341][ T4334] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 711.219339][ T4334] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 711.267084][ T4334] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 711.282081][ T4334] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 711.299152][ T4334] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 711.327780][ T4334] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 711.341765][ T4334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.377756][T10459] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 711.674894][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 711.745601][T10459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.757619][T10459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.052214][ T9616] usb 6-1: USB disconnect, device number 14 [ 712.058166][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 712.058187][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 712.258989][T10480] overlayfs: missing 'lowerdir' [ 712.456843][T10486] overlayfs: missing 'lowerdir' [ 713.576566][ T9626] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 713.848446][ T9626] usb 1-1: Using ep0 maxpacket: 16 [ 713.949674][ T9626] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.960057][ T9626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 713.986204][ T9626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 714.025304][ T9626] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 714.141285][ T9626] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.260426][ T9626] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 714.270536][ T9626] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 714.287861][ T9626] usb 1-1: Manufacturer: syz [ 714.334616][ T9626] usb 1-1: config 0 descriptor?? [ 714.942378][ T9626] rc_core: IR keymap rc-hauppauge not found [ 714.983334][ T9626] Registered IR keymap rc-empty [ 714.997009][T10497] loop5: detected capacity change from 0 to 32768 [ 715.018668][ T9626] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.088233][ T9626] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.150265][ T9626] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 715.222387][ T9626] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22 [ 715.342291][ T9626] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.404495][ T9626] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.468738][ T9626] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.517609][ T9626] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.581811][T10535] overlayfs: missing 'lowerdir' [ 715.616015][ T9626] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.632159][T10532] overlayfs: missing 'lowerdir' [ 715.653145][ T9626] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.734361][ T9626] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.784128][ T9626] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.861798][ T9626] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.978539][ T9626] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 716.218944][ T9626] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 716.253891][ T9626] mceusb 1-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 716.386884][ T9626] usb 1-1: USB disconnect, device number 19 [ 716.944008][T10556] loop6: detected capacity change from 0 to 64 [ 717.981699][T10567] loop6: detected capacity change from 0 to 256 [ 718.080067][T10567] exfat: Deprecated parameter 'namecase' [ 718.148015][T10567] exfat: Deprecated parameter 'utf8' [ 718.153411][T10567] exfat: Deprecated parameter 'namecase' [ 718.224823][T10567] exfat: Deprecated parameter 'utf8' [ 718.246379][T10567] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 718.454287][ T26] audit: type=1800 audit(1754455464.140:158): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1814" name="file1" dev="loop6" ino=1048775 res=0 errno=0 [ 719.236792][T10593] loop1: detected capacity change from 0 to 128 [ 720.051965][T10598] loop5: detected capacity change from 0 to 512 [ 720.116805][T10594] overlayfs: missing 'lowerdir' [ 720.217061][T10593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 720.273306][T10593] ext4 filesystem being mounted at /328/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 720.289713][ T4286] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 720.321221][T10600] overlayfs: missing 'lowerdir' [ 720.351456][T10598] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 720.376402][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 720.607528][T10598] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 720.864219][T10598] overlayfs: upper fs needs to support d_type. [ 720.905061][T10612] loop1: detected capacity change from 0 to 1024 [ 721.322743][ T75] hfsplus: b-tree write err: -5, ino 4 [ 721.403685][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 721.592050][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 722.045142][ T4334] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 722.570229][T10625] overlayfs: missing 'lowerdir' [ 722.734780][ T4334] usb 2-1: Using ep0 maxpacket: 32 [ 722.748040][ T4334] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 722.812999][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 723.600747][ T4334] usb 2-1: config 0 has no interface number 0 [ 723.607168][ T4334] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 723.618197][ T4334] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 723.628317][ T4334] usb 2-1: config 0 interface 85 has no altsetting 0 [ 723.643066][ T4334] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 723.654512][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 723.662693][ T4334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.662723][ T4334] usb 2-1: Product: syz [ 723.662739][ T4334] usb 2-1: Manufacturer: syz [ 723.662756][ T4334] usb 2-1: SerialNumber: syz [ 723.673513][ T4334] usb 2-1: config 0 descriptor?? [ 723.712498][T10611] loop6: detected capacity change from 0 to 32768 [ 723.716253][T10639] overlayfs: missing 'lowerdir' [ 723.779326][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 723.817803][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 723.826550][T10611] read_mapping_page failed! [ 723.853181][T10611] jfs_mount: dbMount failed w/rc = -5 [ 723.867385][T10611] Mount JFS Failure: -5 [ 723.872140][T10611] jfs_mount failed w/return code = -5 [ 723.910121][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 724.095791][T10646] overlayfs: missing 'lowerdir' [ 724.127758][ T4334] appletouch 2-1:0.85: Failed to request geyser raw mode [ 724.145440][ T4334] appletouch: probe of 2-1:0.85 failed with error -5 [ 724.197244][ T4334] usb 2-1: USB disconnect, device number 16 [ 724.210330][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 724.229681][ C0] vkms_vblank_simulate: vblank timer overrun [ 724.332196][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 724.350610][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 724.351820][ T4286] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 724.371255][ T4286] Bluetooth: hci0: Injecting HCI hardware error event [ 724.381093][ T4283] Bluetooth: hci0: hardware error 0x00 [ 724.421442][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 724.523876][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 724.544865][ T4326] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 724.749516][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 724.777169][ T4326] usb 7-1: unable to get BOS descriptor or descriptor too short [ 724.797139][ T4326] usb 7-1: config 6 has an invalid interface number: 96 but max is 0 [ 724.847306][ T4326] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 724.875764][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 724.882345][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 724.914864][ T4326] usb 7-1: config 6 has no interface number 0 [ 724.933538][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 724.933629][ T4326] usb 7-1: config 6 interface 96 has no altsetting 0 [ 725.097523][T10657] loop1: detected capacity change from 0 to 2048 [ 725.134251][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 725.181895][ T4326] usb 7-1: string descriptor 0 read error: -22 [ 725.198722][ T4326] usb 7-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=4f.2b [ 725.214714][ T4326] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.324140][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 725.412913][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 725.420854][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 725.463349][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 725.578069][T10663] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 725.603189][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 725.801971][ T4326] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 725.848949][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 725.923759][ T4326] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 725.939056][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 725.954390][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 725.985799][ T4326] dib0700: firmware download failed at 28 with -71 [ 726.016086][T10657] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 726.034311][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 726.036820][ T4326] usb 7-1: USB disconnect, device number 6 [ 726.169180][T10657] Remounting filesystem read-only [ 726.205309][T10657] NILFS (loop1): error -2 truncating bmap (ino=16) [ 726.274700][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 726.290737][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 726.334733][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 726.358785][ T4277] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 726.475446][ T4283] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 726.609911][ T5585] EXT4-fs error: 3 callbacks suppressed [ 726.609930][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 726.701160][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 726.710649][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 726.777167][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 726.872529][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 727.079283][T10681] loop6: detected capacity change from 0 to 128 [ 727.169889][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 727.227138][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 727.246503][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 727.322337][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 727.437780][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 728.258620][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 728.763100][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 729.063134][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 729.364091][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 729.388173][T10695] overlayfs: missing 'lowerdir' [ 729.495001][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 729.526337][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 729.551719][T10699] overlayfs: missing 'lowerdir' [ 729.640407][T10707] loop1: detected capacity change from 0 to 2048 [ 729.724776][ T4334] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 729.808594][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 729.840667][T10707] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 729.881642][T10707] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 729.936616][ T4334] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 729.956241][ T4334] usb 7-1: config 0 has no interface number 0 [ 729.962412][ T4334] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 729.981568][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 730.011152][T10707] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 730.028504][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 730.059900][ T4334] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 730.105130][ T4334] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 730.124893][ T4334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.147660][ T4334] usb 7-1: config 0 descriptor?? [ 730.176684][T10703] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 730.226907][ T4334] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 730.462322][ T5585] EXT4-fs: 6 callbacks suppressed [ 730.462339][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 730.511254][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 730.524619][ T9624] usb 7-1: USB disconnect, device number 7 [ 730.578616][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 731.602231][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 731.645078][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 731.927969][ T4326] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 731.945969][ T5585] EXT4-fs error: 3 callbacks suppressed [ 731.945991][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 732.211462][ T4326] usb 2-1: Using ep0 maxpacket: 16 [ 732.301488][ T4326] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 732.352745][T10736] program syz.6.1862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 732.474816][ T4326] usb 2-1: config 0 has no interface number 0 [ 732.508702][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 732.555367][ T4326] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 732.564471][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.727486][ T4326] usb 2-1: Product: syz [ 732.760879][ T4326] usb 2-1: Manufacturer: syz [ 732.790368][ T4326] usb 2-1: SerialNumber: syz [ 732.841138][ T4326] usb 2-1: config 0 descriptor?? [ 733.333670][ T4326] usb 2-1: USB disconnect, device number 17 [ 733.369974][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 733.414394][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 733.445126][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 733.505867][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 733.643622][T10746] loop6: detected capacity change from 0 to 512 [ 733.656634][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 733.874840][T10746] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 733.935447][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 734.003214][T10746] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1864: inode #255: comm syz.6.1864: iget: illegal inode # [ 734.084794][T10746] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1864: error while reading EA inode 255 err=-117 [ 734.097989][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 734.104541][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 734.180655][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 734.202443][ T4326] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 734.233479][T10746] EXT4-fs (loop6): 1 orphan inode deleted [ 734.245731][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 734.253194][T10746] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 734.385389][ T4326] usb 2-1: Using ep0 maxpacket: 16 [ 734.396710][ T4326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.408850][ T26] audit: type=1800 audit(1754455480.100:159): pid=10746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1864" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 734.470436][ T4326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.521520][ T4326] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 734.590033][ T4326] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 734.606306][T10758] program syz.0.1867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.620425][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 734.654410][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.692637][ T4326] usb 2-1: config 0 descriptor?? [ 734.705673][ T9698] EXT4-fs (loop6): unmounting filesystem. [ 734.719494][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 734.748170][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 734.785145][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 734.806316][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.868756][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 735.124750][ T9617] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 735.143506][ T4326] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 735.173722][ T4326] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 735.176298][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 735.204598][ C1] vkms_vblank_simulate: vblank timer overrun [ 735.210774][ T4326] microsoft 0003:045E:07DA.000D: no inputs found [ 735.220915][ T4326] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 735.278052][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 735.305356][ T5585] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /243/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 735.352991][ T4326] usb 2-1: USB disconnect, device number 18 [ 735.360878][ T9617] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 735.397851][ T9617] usb 1-1: config 0 has no interface number 0 [ 735.404025][ T9617] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 735.439093][ T9617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.470284][ T9617] usb 1-1: config 0 descriptor?? [ 735.516706][ T9617] usb 1-1: selecting invalid altsetting 1 [ 735.523147][ T9617] dvb_ttusb_budget: ttusb_init_controller: error [ 735.534438][ T5585] EXT4-fs: 1 callbacks suppressed [ 735.534455][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 735.614789][ T9617] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 735.730325][T10768] fido_id[10768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 736.363753][ T5585] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 736.671871][ T9617] DVB: Unable to find symbol cx22700_attach() [ 736.801921][ T5585] EXT4-fs (loop5): Remounting filesystem read-only [ 736.827986][ T5585] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 737.406266][ T9617] DVB: Unable to find symbol tda10046_attach() [ 737.412734][ T41] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 737.416349][ T9617] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 737.531532][ T9617] usb 1-1: USB disconnect, device number 20 [ 737.822866][ T41] usb 2-1: Using ep0 maxpacket: 8 [ 737.927030][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.938803][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.980664][ T41] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 738.012046][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.068217][ T41] usb 2-1: config 0 descriptor?? [ 738.335582][T10799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.575805][ T41] uclogic 0003:2179:0053.000E: interface is invalid, ignoring [ 738.672145][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 738.685875][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 738.717498][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 738.819757][ T41] usb 2-1: USB disconnect, device number 19 [ 738.898351][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 738.906452][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 738.916450][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 739.053670][T10803] bond0 speed is unknown, defaulting to 1000 [ 739.204975][ T126] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 739.404756][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 739.412503][ T126] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 739.434755][ T126] usb 1-1: config 0 has no interface number 0 [ 739.441192][ T126] usb 1-1: config 0 interface 184 has no altsetting 0 [ 739.450893][ T126] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 739.471678][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.491034][ T126] usb 1-1: Product: syz [ 739.497050][ T126] usb 1-1: Manufacturer: syz [ 739.501907][ T126] usb 1-1: SerialNumber: syz [ 739.510876][ T126] usb 1-1: config 0 descriptor?? [ 739.526631][ T126] smsc75xx v1.0.0 [ 739.677917][T10818] overlayfs: missing 'lowerdir' [ 739.937151][T10803] chnl_net:caif_netlink_parms(): no params data found [ 739.971701][T10826] loop1: detected capacity change from 0 to 64 [ 740.168982][ T126] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 740.220658][ T126] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 740.316770][ T126] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 740.357936][ T126] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 740.402680][ T126] usb 1-1: USB disconnect, device number 21 [ 740.596266][T10803] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.606723][T10803] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.627496][T10803] device bridge_slave_0 entered promiscuous mode [ 740.654998][T10803] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.682677][T10803] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.699844][T10803] device bridge_slave_1 entered promiscuous mode [ 740.706741][ T9616] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 740.900195][T10803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.942261][ T9616] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.967835][ T9616] usb 7-1: config 0 has no interfaces? [ 741.031678][ T9616] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 741.047019][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 741.090198][ T9616] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.345077][T10803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.429668][ T5585] EXT4-fs (loop5): unmounting filesystem. [ 741.679265][ T9616] usb 7-1: config 0 descriptor?? [ 742.235359][T10803] team0: Port device team_slave_0 added [ 742.314085][T10803] team0: Port device team_slave_1 added [ 742.320395][ T9627] usb 7-1: USB disconnect, device number 8 [ 742.663661][T10850] overlayfs: missing 'lowerdir' [ 743.025408][T10803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.032581][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.058613][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.114885][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 743.382497][ T9627] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 743.622061][T10803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.741139][T10803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.748198][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.774257][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.780751][T10803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.904736][T10803] device hsr_slave_0 entered promiscuous mode [ 743.922453][T10803] device hsr_slave_1 entered promiscuous mode [ 743.942010][ T9627] usb 2-1: Using ep0 maxpacket: 16 [ 743.956514][T10803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.964168][T10803] Cannot create hsr debugfs directory [ 744.133337][ T9627] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.162893][ T9627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.220898][ T9627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 744.248340][ T9627] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 744.290738][ T9627] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.480290][ T9627] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 744.498858][ T9627] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 744.546503][T10870] overlayfs: missing 'lowerdir' [ 744.595256][ T9627] usb 2-1: Manufacturer: syz [ 744.618736][ T9627] usb 2-1: config 0 descriptor?? [ 744.707295][T10803] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 744.778005][T10803] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 744.838984][T10803] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 744.918165][T10803] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 745.135797][T10886] netlink: 'syz.4.1902': attribute type 4 has an invalid length. [ 745.158032][T10886] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1902'. [ 745.205577][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 745.287276][ T9627] rc_core: IR keymap rc-hauppauge not found [ 745.293244][ T9627] Registered IR keymap rc-empty [ 745.311118][ T9627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.405316][ T9627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.445552][ T9627] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 745.490822][T10803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.511241][ T9627] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input25 [ 745.552307][T10803] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.592038][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 745.605260][ T9627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.612814][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 745.665136][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 745.700143][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 745.717572][T10893] overlayfs: missing 'lowerdir' [ 745.730189][ T9627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.731838][ T4552] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.744813][ T4552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.797845][ T9627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.853458][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 745.857209][ T9627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.925513][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 745.935901][ T4552] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.943042][ T4552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.958345][ T9627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 746.000512][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 746.015664][ T9627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 746.065170][ T9627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 746.123791][ T9627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 746.138732][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 746.161817][ T9627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 746.193361][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 746.208866][ T9627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 746.215664][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 746.297040][ T9627] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 746.309287][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 746.310620][ T9627] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 746.373996][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 746.430822][ T9627] usb 2-1: USB disconnect, device number 20 [ 746.456917][T10899] netlink: 'syz.4.1906': attribute type 7 has an invalid length. [ 746.494865][T10899] netlink: 'syz.4.1906': attribute type 8 has an invalid length. [ 746.514769][ T9617] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 746.547946][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 746.620389][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 746.711409][ T9617] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.748190][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 746.789557][ T9617] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 746.873487][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 746.918714][ T9617] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 747.007750][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 747.041113][ T9617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.188978][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 747.253243][ T9617] usb 1-1: config 0 descriptor?? [ 747.348683][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.353870][ T9617] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 747.355062][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 747.365925][T10803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 747.367973][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.475764][ T9617] dvb-usb: bulk message failed: -22 (3/0) [ 747.557392][T10901] dvb-usb: bulk message failed: -22 (2/0) [ 747.576299][ T9617] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 747.667485][ T9617] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 747.724760][ T9617] usb 1-1: media controller created [ 747.758728][ T9617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 747.915344][ T9617] dvb-usb: bulk message failed: -22 (6/0) [ 747.931469][ T9617] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 748.011872][ T9617] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 748.085781][ T9617] dvb-usb: schedule remote query interval to 150 msecs. [ 748.282120][ T9617] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 748.297313][ T9617] usb 1-1: USB disconnect, device number 22 [ 748.349105][ T9617] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 748.746133][T10927] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 749.053218][T10936] overlayfs: missing 'lowerdir' [ 749.332876][T10943] loop6: detected capacity change from 0 to 2048 [ 749.341373][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 749.356390][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 749.377350][T10803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.468097][T10943] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 749.629187][T10951] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 749.836021][ T9626] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 750.302169][ T9626] usb 2-1: Using ep0 maxpacket: 8 [ 750.554835][ T9626] usb 2-1: unable to get BOS descriptor or descriptor too short [ 750.679456][ T9626] usb 2-1: config 4 interface 0 has no altsetting 0 [ 751.472322][T10984] overlayfs: missing 'lowerdir' [ 751.634160][ T9626] usb 2-1: string descriptor 0 read error: -22 [ 751.811957][ T9626] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 751.823228][ T9626] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 751.966681][ T9626] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 751.987399][ T9626] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 752.055067][ T9626] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 752.062275][ T9626] usb 2-1: media controller created [ 752.153518][ T9626] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 752.185951][T10946] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 752.498401][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 752.508203][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 752.631113][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 752.700387][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 752.775199][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 752.783303][ T2935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 752.848972][T10803] device veth0_vlan entered promiscuous mode [ 753.118116][T10803] device veth1_vlan entered promiscuous mode [ 753.229883][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 753.260660][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 753.317104][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 753.385694][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 753.462270][ T9626] zl10353_read_register: readreg error (reg=127, ret==0) [ 753.517150][T10803] device veth0_macvtap entered promiscuous mode [ 753.539179][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 753.598397][T10803] device veth1_macvtap entered promiscuous mode [ 753.734511][T10803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.759172][ T9626] usb 2-1: USB disconnect, device number 21 [ 753.905494][T10803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.990164][T10803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.042895][T11016] overlayfs: missing 'lowerdir' [ 754.084666][T10803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.116162][T10803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.150603][T10803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.227340][T10803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.341722][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 754.364969][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 754.429674][T10803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.494679][T10803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.504593][T10803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.520949][T11026] loop6: detected capacity change from 0 to 128 [ 754.551961][T10803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.639225][T11029] overlayfs: missing 'lowerdir' [ 754.723531][T11026] EXT4-fs: Ignoring removed nobh option [ 754.734862][T10803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.879508][T10803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.072495][T10803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.125364][T10803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.215721][T11026] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 755.272748][T11026] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 755.293175][T10803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.739855][ T9698] EXT4-fs (loop6): unmounting filesystem. [ 756.297808][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 756.307069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 756.387755][T10803] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.421814][T10803] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.477893][T10803] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.565217][T10803] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.816732][T11043] device ipvlan3 entered promiscuous mode [ 757.227179][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.236351][T11065] loop6: detected capacity change from 0 to 64 [ 757.284664][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.397619][ T5528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.406658][ T5528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.478197][T11065] MINIX-fs: mounting file system with errors, running fsck is recommended [ 757.496189][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 757.519593][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 758.639501][ T41] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 759.144691][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 759.462750][ T41] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 759.529026][ T41] usb 7-1: config 0 has an invalid interface number: 164 but max is 0 [ 759.561127][ T41] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 759.596038][ T41] usb 7-1: config 0 has no interface number 0 [ 759.602286][ T41] usb 7-1: config 0 has no interface number 1 [ 759.636161][ T41] usb 7-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30 [ 759.684205][T11088] overlayfs: missing 'lowerdir' [ 759.684880][ T41] usb 7-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 759.743165][ T41] usb 7-1: config 0 interface 50 has no altsetting 0 [ 759.755617][ T41] usb 7-1: config 0 interface 164 has no altsetting 0 [ 759.870338][ T41] usb 7-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 759.883216][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.906339][ T41] usb 7-1: Product: syz [ 759.914071][ T41] usb 7-1: Manufacturer: syz [ 759.922727][ T41] usb 7-1: SerialNumber: syz [ 759.969302][ T41] usb 7-1: config 0 descriptor?? [ 760.010565][ T41] usb 7-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 760.250355][ T41] usb 7-1: reset high-speed USB device number 9 using dummy_hcd [ 761.020430][ T41] usb 7-1: device descriptor read/64, error -71 [ 761.373264][ T41] usb 7-1: reset high-speed USB device number 9 using dummy_hcd [ 761.494713][ T4543] device hsr_slave_0 left promiscuous mode [ 761.556240][ T4543] device hsr_slave_1 left promiscuous mode [ 761.592918][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.618161][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.735476][ T4543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.751644][ T4543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.783232][ T4543] device bridge_slave_1 left promiscuous mode [ 761.813426][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.857494][ T4543] device bridge_slave_0 left promiscuous mode [ 761.863850][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.875095][ T41] usb 7-1: device descriptor read/all, error -71 [ 762.101188][ T126] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 762.194744][ T4543] device veth1_macvtap left promiscuous mode [ 762.219255][ T4543] device veth0_macvtap left promiscuous mode [ 762.243443][T11126] loop6: detected capacity change from 0 to 2048 [ 762.260377][ T4543] device veth1_vlan left promiscuous mode [ 762.301414][ T4543] device veth0_vlan left promiscuous mode [ 762.417667][T11126] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 762.419700][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 762.570345][ T126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.615109][T11126] syz.6.1966: attempt to access beyond end of device [ 762.615109][T11126] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 762.632874][T11134] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 762.652985][ T126] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 762.951340][T11138] overlayfs: missing 'lowerdir' [ 763.004988][T11126] syz.6.1966: attempt to access beyond end of device [ 763.004988][T11126] loop6: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 763.059385][ T126] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 763.081784][ T41] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 763.084520][ T126] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 763.099328][ T41] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 763.867569][ T41] usb 7-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 763.878598][ T126] usb 2-1: Product: syz [ 763.878984][T11142] loop7: detected capacity change from 0 to 2048 [ 763.882837][ T126] usb 2-1: Manufacturer: syz [ 763.894458][ T126] usb 2-1: SerialNumber: syz [ 763.897455][T11126] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=3) [ 763.950230][ T41] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 763.966489][ T126] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input27 [ 763.976025][T11126] NILFS (loop6): error -5 reading inode: ino=15 [ 764.023750][ T41] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 764.037920][T11141] syz.6.1966: attempt to access beyond end of device [ 764.037920][T11141] loop6: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 764.101008][ T9628] usb 7-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 764.143770][ T41] usb 7-1: USB disconnect, device number 9 [ 764.162979][ T9628] usb 7-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 764.188381][T11141] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=3) [ 764.231810][T11141] NILFS (loop6): error -5 reading inode: ino=15 [ 764.310637][ T9628] ================================================================== [ 764.318728][ T9628] BUG: KASAN: use-after-free in kernfs_add_one+0x4d2/0x8f0 [ 764.325920][ T9628] Read of size 8 at addr ffff8880306b8688 by task kworker/1:13/9628 [ 764.333936][ T9628] [ 764.336257][ T9628] CPU: 1 PID: 9628 Comm: kworker/1:13 Not tainted 6.1.147-syzkaller #0 [ 764.344488][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 764.354527][ T9628] Workqueue: events request_firmware_work_func [ 764.360753][ T9628] Call Trace: [ 764.364016][ T9628] [ 764.366929][ T9628] dump_stack_lvl+0x168/0x22e [ 764.371671][ T9628] ? read_lock_is_recursive+0x10/0x10 [ 764.377021][ T9628] ? show_regs_print_info+0x12/0x12 [ 764.382208][ T9628] ? load_image+0x3b0/0x3b0 [ 764.386705][ T9628] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 764.392055][ T9628] ? __virt_addr_valid+0x188/0x540 [ 764.397148][ T9628] ? __virt_addr_valid+0x465/0x540 [ 764.402256][ T9628] ? kernfs_add_one+0x4d2/0x8f0 [ 764.407084][ T9628] print_report+0xa8/0x200 [ 764.411476][ T9628] kasan_report+0x10b/0x140 [ 764.416002][ T9628] ? kernfs_add_one+0x4d2/0x8f0 [ 764.420850][ T9628] kernfs_add_one+0x4d2/0x8f0 [ 764.425510][ T9628] kernfs_create_link+0x160/0x200 [ 764.430512][ T9628] sysfs_do_create_link_sd+0x83/0x110 [ 764.435964][ T9628] device_add+0x6c8/0xfb0 [ 764.440288][ T9628] firmware_fallback_sysfs+0x2e5/0x930 [ 764.445731][ T9628] ? _request_firmware+0xbe4/0x1290 [ 764.450923][ T9628] _request_firmware+0xcad/0x1290 [ 764.455949][ T9628] ? request_firmware+0x50/0x50 [ 764.460791][ T9628] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 764.466786][ T9628] ? read_lock_is_recursive+0x10/0x10 [ 764.472150][ T9628] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 764.478051][ T9628] request_firmware_work_func+0xac/0x1b0 [ 764.483671][ T9628] ? process_one_work+0x7a1/0x1160 [ 764.488777][ T9628] process_one_work+0x898/0x1160 [ 764.493694][ T9628] ? worker_detach_from_pool+0x240/0x240 [ 764.499305][ T9628] ? _raw_spin_lock_irq+0xab/0xe0 [ 764.504306][ T9628] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 764.509662][ T9628] ? kthread_data+0x4b/0xc0 [ 764.514144][ T9628] worker_thread+0xaa2/0x1250 [ 764.518799][ T9628] ? __kthread_parkme+0x162/0x1c0 [ 764.523803][ T9628] kthread+0x29d/0x330 [ 764.527847][ T9628] ? worker_clr_flags+0x1a0/0x1a0 [ 764.532856][ T9628] ? kthread_blkcg+0xd0/0xd0 [ 764.537429][ T9628] ret_from_fork+0x1f/0x30 [ 764.541838][ T9628] [ 764.544877][ T9628] [ 764.547180][ T9628] Allocated by task 9628: [ 764.551480][ T9628] kasan_set_track+0x4b/0x70 [ 764.556049][ T9628] __kasan_slab_alloc+0x6b/0x80 [ 764.560878][ T9628] slab_post_alloc_hook+0x4b/0x480 [ 764.565975][ T9628] kmem_cache_alloc+0x123/0x2f0 [ 764.570822][ T9628] __kernfs_new_node+0xd4/0x7d0 [ 764.575658][ T9628] kernfs_new_node+0x148/0x250 [ 764.580410][ T9628] kernfs_create_link+0xa3/0x200 [ 764.585334][ T9628] sysfs_do_create_link_sd+0x83/0x110 [ 764.590686][ T9628] device_add+0x6c8/0xfb0 [ 764.594992][ T9628] firmware_fallback_sysfs+0x2e5/0x930 [ 764.600442][ T9628] _request_firmware+0xcad/0x1290 [ 764.605455][ T9628] request_firmware_work_func+0xac/0x1b0 [ 764.611068][ T9628] process_one_work+0x898/0x1160 [ 764.616006][ T9628] worker_thread+0xaa2/0x1250 [ 764.620669][ T9628] kthread+0x29d/0x330 [ 764.624717][ T9628] ret_from_fork+0x1f/0x30 [ 764.629108][ T9628] [ 764.631411][ T9628] Freed by task 41: [ 764.635197][ T9628] kasan_set_track+0x4b/0x70 [ 764.639857][ T9628] kasan_save_free_info+0x2d/0x50 [ 764.644981][ T9628] ____kasan_slab_free+0x126/0x1e0 [ 764.650156][ T9628] slab_free_freelist_hook+0x131/0x1a0 [ 764.655590][ T9628] kmem_cache_free+0xf7/0x290 [ 764.660255][ T9628] kernfs_put+0x319/0x490 [ 764.664748][ T9628] __kernfs_remove+0x5db/0x6d0 [ 764.669497][ T9628] kernfs_remove+0x76/0x90 [ 764.673909][ T9628] __kobject_del+0xe1/0x2f0 [ 764.678391][ T9628] kobject_del+0x41/0x60 [ 764.682638][ T9628] device_del+0x8f8/0xa70 [ 764.686943][ T9628] usb_disconnect+0x573/0x8a0 [ 764.691610][ T9628] hub_event+0x1e24/0x54e0 [ 764.696021][ T9628] process_one_work+0x898/0x1160 [ 764.700945][ T9628] worker_thread+0xd62/0x1250 [ 764.705602][ T9628] kthread+0x29d/0x330 [ 764.709649][ T9628] ret_from_fork+0x1f/0x30 [ 764.714040][ T9628] [ 764.716342][ T9628] The buggy address belongs to the object at ffff8880306b8658 [ 764.716342][ T9628] which belongs to the cache kernfs_node_cache of size 168 [ 764.730906][ T9628] The buggy address is located 48 bytes inside of [ 764.730906][ T9628] 168-byte region [ffff8880306b8658, ffff8880306b8700) [ 764.744071][ T9628] [ 764.746383][ T9628] The buggy address belongs to the physical page: [ 764.752769][ T9628] page:ffffea0000c1ae00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x306b8 [ 764.762895][ T9628] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 764.770420][ T9628] raw: 00fff00000000200 ffffea0001e6a800 dead000000000008 ffff888140009c80 [ 764.778997][ T9628] raw: 0000000000000000 0000000080110011 00000001ffffffff 0000000000000000 [ 764.787562][ T9628] page dumped because: kasan: bad access detected [ 764.793973][ T9628] page_owner tracks the page as allocated [ 764.799663][ T9628] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4273, tgid 4273 (syz-executor), ts 67107919095, free_ts 67092230853 [ 764.817879][ T9628] post_alloc_hook+0x173/0x1a0 [ 764.822629][ T9628] get_page_from_freelist+0x1a26/0x1ac0 [ 764.828171][ T9628] __alloc_pages+0x1df/0x4e0 [ 764.832737][ T9628] alloc_slab_page+0x5d/0x160 [ 764.837401][ T9628] new_slab+0x87/0x2c0 [ 764.841442][ T9628] ___slab_alloc+0xbc6/0x1220 [ 764.846110][ T9628] kmem_cache_alloc+0x1b7/0x2f0 [ 764.850936][ T9628] __kernfs_new_node+0xd4/0x7d0 [ 764.855760][ T9628] kernfs_new_node+0x148/0x250 [ 764.860501][ T9628] __kernfs_create_file+0x47/0x2e0 [ 764.865586][ T9628] sysfs_add_file_mode_ns+0x234/0x2f0 [ 764.870932][ T9628] internal_create_group+0x487/0xce0 [ 764.876198][ T9628] sysfs_create_groups+0x55/0x120 [ 764.881196][ T9628] device_add_attrs+0xdb/0x800 [ 764.885957][ T9628] device_add+0x64b/0xfb0 [ 764.890263][ T9628] netdev_register_kobject+0x176/0x310 [ 764.895697][ T9628] page last free stack trace: [ 764.900454][ T9628] free_unref_page_prepare+0x8b4/0x9a0 [ 764.905891][ T9628] free_unref_page+0x2e/0x3f0 [ 764.910546][ T9628] __unfreeze_partials+0x1a5/0x200 [ 764.915657][ T9628] put_cpu_partial+0x17c/0x250 [ 764.920411][ T9628] qlist_free_all+0x76/0xe0 [ 764.924888][ T9628] kasan_quarantine_reduce+0x144/0x160 [ 764.930321][ T9628] __kasan_slab_alloc+0x1e/0x80 [ 764.935164][ T9628] slab_post_alloc_hook+0x4b/0x480 [ 764.940274][ T9628] __kmem_cache_alloc_node+0x140/0x260 [ 764.945723][ T9628] kmalloc_trace+0x26/0xe0 [ 764.950128][ T9628] netdevice_event+0x325/0x900 [ 764.954872][ T9628] raw_notifier_call_chain+0xcb/0x160 [ 764.960221][ T9628] __dev_notify_flags+0x178/0x2d0 [ 764.965223][ T9628] dev_change_flags+0xe3/0x1a0 [ 764.969966][ T9628] do_setlink+0xc31/0x3c40 [ 764.974357][ T9628] rtnl_newlink+0x17d6/0x1ff0 [ 764.979009][ T9628] [ 764.981311][ T9628] Memory state around the buggy address: [ 764.987004][ T9628] ffff8880306b8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 764.995047][ T9628] ffff8880306b8600: fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb [ 765.003095][ T9628] >ffff8880306b8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 765.011302][ T9628] ^ [ 765.015620][ T9628] ffff8880306b8700: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 765.023675][ T9628] ffff8880306b8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 765.031730][ T9628] ================================================================== [ 766.249087][ T9628] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 766.256362][ T9628] CPU: 1 PID: 9628 Comm: kworker/1:13 Not tainted 6.1.147-syzkaller #0 [ 766.264767][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 766.274864][ T9628] Workqueue: events request_firmware_work_func [ 766.281060][ T9628] Call Trace: [ 766.284362][ T9628] [ 766.287313][ T9628] dump_stack_lvl+0x168/0x22e [ 766.292106][ T9628] ? memcpy+0x3c/0x60 [ 766.296123][ T9628] ? show_regs_print_info+0x12/0x12 [ 766.301351][ T9628] ? load_image+0x3b0/0x3b0 [ 766.305892][ T9628] panic+0x2c9/0x710 [ 766.309818][ T9628] ? bpf_jit_dump+0xd0/0xd0 [ 766.314375][ T9628] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 766.320300][ T9628] ? _raw_spin_unlock+0x40/0x40 [ 766.325197][ T9628] check_panic_on_warn+0x80/0xa0 [ 766.330163][ T9628] ? kernfs_add_one+0x4d2/0x8f0 [ 766.335033][ T9628] end_report+0x66/0x110 [ 766.339301][ T9628] kasan_report+0x118/0x140 [ 766.343831][ T9628] ? kernfs_add_one+0x4d2/0x8f0 [ 766.348719][ T9628] kernfs_add_one+0x4d2/0x8f0 [ 766.353424][ T9628] kernfs_create_link+0x160/0x200 [ 766.358477][ T9628] sysfs_do_create_link_sd+0x83/0x110 [ 766.363875][ T9628] device_add+0x6c8/0xfb0 [ 766.368231][ T9628] firmware_fallback_sysfs+0x2e5/0x930 [ 766.373719][ T9628] ? _request_firmware+0xbe4/0x1290 [ 766.378947][ T9628] _request_firmware+0xcad/0x1290 [ 766.384006][ T9628] ? request_firmware+0x50/0x50 [ 766.388883][ T9628] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 766.394980][ T9628] ? read_lock_is_recursive+0x10/0x10 [ 766.400384][ T9628] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 766.406311][ T9628] request_firmware_work_func+0xac/0x1b0 [ 766.411979][ T9628] ? process_one_work+0x7a1/0x1160 [ 766.417119][ T9628] process_one_work+0x898/0x1160 [ 766.422260][ T9628] ? worker_detach_from_pool+0x240/0x240 [ 766.427960][ T9628] ? _raw_spin_lock_irq+0xab/0xe0 [ 766.433104][ T9628] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 766.438507][ T9628] ? kthread_data+0x4b/0xc0 [ 766.443041][ T9628] worker_thread+0xaa2/0x1250 [ 766.447752][ T9628] ? __kthread_parkme+0x162/0x1c0 [ 766.452814][ T9628] kthread+0x29d/0x330 [ 766.457017][ T9628] ? worker_clr_flags+0x1a0/0x1a0 [ 766.462067][ T9628] ? kthread_blkcg+0xd0/0xd0 [ 766.466696][ T9628] ret_from_fork+0x1f/0x30 [ 766.471144][ T9628] [ 766.474439][ T9628] Kernel Offset: disabled [ 766.478761][ T9628] Rebooting in 86400 seconds..