last executing test programs: 3m41.764844613s ago: executing program 0 (id=1223): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 3m36.901536675s ago: executing program 0 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 3m36.136517667s ago: executing program 0 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, 0x0) ustat(0x11, 0x0) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x7ffe}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200000004001f000800018004001f901000048004"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$apparmor_exec(r5, &(0x7f00000001c0)={'exec ', ':\x00~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x1c\xee\xaa\xdd\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed['}, 0xb0) syz_usb_connect(0x0, 0x3d7, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) 3m33.027984477s ago: executing program 0 (id=1233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = socket$inet(0x2, 0xa, 0xcaa) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 3m31.599435203s ago: executing program 0 (id=1236): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_DEV_DESTROY(r2, 0x5502) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) syz_io_uring_setup(0xec1, &(0x7f0000000380)={0x0, 0xd387, 0x2, 0x3, 0xf1, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x114, &(0x7f0000000640)=0x6, 0x0, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r4, 0x80047437, 0x10004000000006) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x52002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'sit0\x00', 0x2000}) socket$netlink(0x10, 0x3, 0x0) 3m29.438398797s ago: executing program 0 (id=1242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0xf1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x37) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/216, 0xd8}, {0x0}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/181, 0xb5}, {0x0}], 0x5, 0xb, 0xfffffff9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 3m14.14145999s ago: executing program 32 (id=1242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0xf1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x37) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/216, 0xd8}, {0x0}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/181, 0xb5}, {0x0}], 0x5, 0xb, 0xfffffff9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2m34.780207703s ago: executing program 1 (id=1315): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x1000000, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 2m33.231231198s ago: executing program 1 (id=1316): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=static'}}}]}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, 0x0) ustat(0x11, 0x0) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x7ffe}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200000004001f000800018004001f901000048004"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$apparmor_exec(r5, &(0x7f00000001c0)={'exec ', ':\x00~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x1c\xee\xaa\xdd\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed['}, 0xb0) syz_usb_connect(0x0, 0x3d7, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x5, 0x80000000, 0x8, 0x80}) 2m29.696058303s ago: executing program 1 (id=1324): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) io_setup(0x2, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000040)=ANY=[], 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x388, 0x0, 0x1c4, 0x1c4, 0x2a8, 0x2a8, 0x2a8, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @loopback, 0xff000000, 0xff, 0xe, 0x9, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x101, 0x10, 0x7, 0x3, 0x101, 'ipvlan0\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0xa}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1c4}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x12ed}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3d4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r2, &(0x7f0000000000)="29000000140005d8ff00000004eabdeb0101b6ff02", 0x15) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x212f) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}], 0x20}, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='X', 0x1}], 0x1) 2m28.047290455s ago: executing program 1 (id=1326): r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x8d8, &(0x7f0000000100)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@space_cache_v2}, {@compress_force}, {@nossd_spread}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x1f, 0x32, 0x37, 0x74, 0x65, 0x78]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4000010, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000300)={0x60, 0x6, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2, 0x4e, 0x14, 0x0, 0x10}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x7ff}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @loopback}], 0x78) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x282, 0x140) 2m23.543224539s ago: executing program 1 (id=1332): r0 = socket$inet_smc(0x2b, 0x1, 0x0) semget$private(0x0, 0x6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x2, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}, 0x48000) syz_emit_ethernet(0xfc, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) 2m22.071517967s ago: executing program 1 (id=1334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0xf1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x37) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/216, 0xd8}, {0x0}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/181, 0xb5}, {0x0}], 0x5, 0xb, 0xfffffff9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2m6.828594877s ago: executing program 33 (id=1334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0xf1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x37) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/216, 0xd8}, {0x0}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/181, 0xb5}, {0x0}], 0x5, 0xb, 0xfffffff9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 23.835341139s ago: executing program 3 (id=1512): syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x53) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000200)={0x0, "63ff8791919a5b70f918110cd2e1f7fbd15ec7918e806deb14c0f82379b49307", 0x3, 0x1, 0x3, 0xcd5, 0x4, 0x4, 0x400, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000100)={[{@grpquota}, {@nolargeio}, {@gqnoenforce}]}, 0x1, 0xb92b, &(0x7f000000b880)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc2"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xb0, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5692}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6ed0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000011c0)="b9ffddc1ddc8cdde75537d07007e", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x8004587d, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7ff}) write$FUSE_NOTIFY_INVAL_INODE(r5, 0x0, 0x0) 19.767776827s ago: executing program 3 (id=1519): syz_open_procfs(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0x20000023893) 18.25042938s ago: executing program 3 (id=1521): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x4001, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25DELUID(r1, 0x89e2, 0x0) r2 = gettid() ptrace$setregset(0x4205, r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x80000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, 0x0, 0x0) 17.268379699s ago: executing program 5 (id=1523): eventfd(0x7) mknod$loop(&(0x7f0000000800)='./bus\x00', 0x4, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@local, @in6=@local}}, {{@in=@empty}}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@remote, @in6=@ipv4={""/10, ""/2, @dev}}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) r0 = socket$nl_generic(0x10, 0x3, 0x10) lstat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f00000005c0)={&(0x7f0000000400)=@proc={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc, &(0x7f0000000500)=[{&(0x7f0000000ac0)={0x12c, 0x32, 0x400, 0x70bd28, 0x25dfdbfe, "", [@generic="dcb3c087267c62244d19a92c951160e98f6c6acf5d13103d67d0668fbef061b130b55b518946911891997d59e08563227ed3f77e", @typed={0x8, 0xe9, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="2155858c893bdd4b275f21f45672ab4c88dabe455a2f58149576551e2fd8d88c5bbcba2e0a4a9736a56dc8e2ad276e6d75cffac0589a153da96c6680bea6be0f5876465f38e90bde07d0d1add38833d6aa6e288c4efa048b3ba7df87812b1b8ba2442ee9c1c3e1550e72576a1ae1bcdb67d9ced63880b18480a858260fc9ba54f32d1a20dcefe90fbd92218e62edfba8ec82dba4f57d8020d5bf533e23d9038c2e4ad30fab7110cc537e329873d0", @generic="9e240cc5696fbfdf70f60bcf6c16d564498119572ab9c2f57d9fc1f745ef427a6e0bbb91c909e8c5e0e2fa8fad5355"]}, 0x12c}], 0x1, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}], 0x108, 0x4000004}, 0x8000) read$FUSE(0xffffffffffffffff, &(0x7f0000000f00)={0x2020}, 0x2020) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x444b, &(0x7f000000cd00)="$eJzs3b9vG9cdAPB3J7mWXLuVXA8uUKAEaqBFWwiSp7YyUFmWLUu26sKtjaILTUm0rZYSDYkqOniQNwOZAmQIMhgJkE2ToSGr8ydkyejMBpIhS4IARhiQPEq8EwnRjijFyucz6Hjvt/i9e/c4HF6ciEIUagorufLC3bXzuf+VS+vLxRAfkMr9pbXc0lou1f+xg+uf7rSN0/e8TnrRJt25cenKP26fD+HjxU9fVKvVan0S6A9tjbV8/urLhwutx6Y4U6fWbvvW9su/Qwhndo2rpi+E8K+PQn1mu5ikTSbHwRDCqdDIu/3wrTu5fRrN0+fFC/mXc4+3xs/Nbj7Z6vy/RyG8V/rlH+8tf/6bvvHPfr9P3QMAAAAAAAAAAAAAAAAA8Iabvnnj1t9Hx8KzKPRvRrvf151Oji3vx/a15lf3za8P5h8GAAAAAAAAAAAAAAAAAACAH6Cd9/9z0ek27/9PJceJDvWrf+39GOmdmb/dmLo8Opbs/x7tyv9TkvTFxb4w3Gbf9+z+7xcz9dvv/767n9fVHF+z36EQxSOp8zgeiUL4INn4/Wx0Ii6V1yp/uFteX1nct2G8sdLxb+zen4pOsqF/t/GfzLTf+/3/f7Hraqqd39m/S+xIS8e/r2O5Dx9FXcX/UqbeQcSf15eOf389bbC1wERjAqjF/+3+veM/lWm/N/E/tv1pMORSM0BtDZOLOq9XSEvHv/G9pqbO5IvsdP9/k4n/5Uz7hzX/b2QfRLSVjv9P6mkDqRI79/9wvPf9fyXT/mHEvzb+Dc//rqTjf7yR2J8qUv8mu53/pzPtt8T/646DiDZeedy34mScP4tSV8Bm1EjPvXKLP07p+A/syt/5/Rd3tf67mql/UL//mv02f/81p//fRXE8MrJv3R056fgPdizX7f0/k6nX6/l/or7+43Wl43+inpZeOw/V/3Yb/9lM+72Kf31VMtCM/8588u3xRvr71n9dScf/p43EuLVE49lcX/9Fe6//r2XaP4z1X238G3Fvez0q0vE/2bFcLf6fdPH8v56p1/v4h1DtdQdHWDr+pzqWq9//A3vHfy5Tr9fx/20vGwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4A0wmx6EQxSOp8zgeGQnhUnJ+NpyI5guL+flSeeG/ayFMJem5cDq6VyrPF0r5pZXyYjFfKJXKCyFcTvLPhIForVSu5JcLD65stzUY3S8WVivzxUIlhDCdpP8qnGq2Nb9UWS48CCFc3c77eVxefXC/sJJfXFr9y+jo6GiY2R7DcFT8f6W4Umn03sgNYXa77lDUMrh69rXtsZyM/lNeX10plOrp11vqlMoLhVJLnbkk750wHFVW11cWCpVivlS+1+zvME0kx6mZm/+8eX1sV/6dqHGcPNhhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCKno3/+d0QQn/jLA4hTDQ/RO3KP31evJB/Ofd4a/zc7OaTrRf1co+qBztoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL5jBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCrt0jBIxEIUB+M1YRK08hlVIOtuIIloYETyBHsPD6FG8hHewsLC1EEEn7G6ygW12i+X7mkfyM/MezAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbI1X3/cNe0ESkOf6qIt6f3j+X8ptSX8/XnD3YwI9tzfdtfXDZtefc0yc/Kr88u/6XfX8+PsajHw/fgdbQn4336N/Q5mp1rbt8m81WrfU8i5ToiupKfppzrerO7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhlBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86ir4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//2f/H8A=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540), &(0x7f0000000600)=@md5={0x1, "f1920b99faef87491229c53d89f6eaec"}, 0x11, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) 17.052012316s ago: executing program 2 (id=1524): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18008, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0x2, 0xfffffffe}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8}, 0x10}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f00000000c0)=""/57, 0x39, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x7, 0x8, 0x4, 0xfffffffffffffffd}, {0x2004}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x8}}, 0xe8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r5) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) socket$inet6_sctp(0xa, 0x801, 0x84) 14.461782586s ago: executing program 2 (id=1525): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) syz_open_dev$I2C(0x0, 0x0, 0x101042) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzCb59U9+JhURWxQDHipIt9larHpqe7GHggU9iHhoaDc1dNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7PJmuwmIWSdJPP5wOy+N2+T9747vMx7M/NIAKU1lr2kEScj4noSMdJRNhB54Vjrcyt/3LuRbUmsrr71exJJvq/9+SR/P55njkTEd5cjnqxsrnd+cen2RKNRn8vzZxemZ8/OLy6dmZqeuFW/Vb9TO/fq+Qvjr9XO1/Ys1odfffbLlatvPvvxh++/Mvl940wSF2M4L+uMY6+Mxdjad9Ip+14v7HVlBRroOPYcLJX8+A1GxNMxEpW812dGYuphoY0D+mq1ErEKlFSi/0NJtccB7bl9P+bB+9njS60J0Ob4B1rXRuJIc250bCXpmBm15ruje1B/Vsff9059kW3Rp+sQW7n/ICKe6RZ/0mzbaPMqThZ/+q/404gYz9+z/ed2Wf/YhvxBiv9iR/yXd1l/0fEDUE7Ll1on8s3nv3Rt/BNdxj/DXc5du1H0+a/3+G89/kqP8d+1Hdbx80dXPu1V1jn+y7as/vZY8L/w+EHEqa7xJ2vxJ13iz8Y913dYxxs//HalV1nR8a8+ijjddf6zfkcr2fr+5NnJqUZ9vPXatY5vvn3vy171Fx1/dvyP9Yh/q+Of7ZvdYR1fX3s03ats+/jTX4eSt5upoXzPBxMLC3O1iKHk6ub920xE2p9p/44s/hdf2Lr/d4v/aDZ32GH8s+/cXtl9/P2VxX9zl8f/kx3W8de7d5/rVVZ0/AAAAAAAAHCYpM1nOZK0upZO02q1tYb3qTiWNmbmF16anLl752brmY/RGEzbd7pHWvkky9fy52Hb+XMb8i9HxImI+LxytJmv3php3Cw6eAAAAAAAAAAAAAAAAAAAANgnjm9Y//9npbX+HyiJgaIbABRG/4fy0v+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/4fy0v8BAAAA4FA68fzyT0lE3H/9aHPLDOVlg4W2DOi3tOgGAIWpFN0AoDBu/UN5meMDyTblR3oVLG/3kwAAAAAAAAAAAADAXjl90vp/KCvr/6G8rP+H8rL+H8rLHB+w/h8AAAAAAAAAAAAA9r/h5pak1Xwt8HCkabUa8f+IGI3BZHKqUR+PiCci4sfK4P+yfK3oRgMAAAAAAAAAAAAAAAAAAMAhM7+4dHui0ajPSUhISKwliv7LBAAAAAAAAAAAAAAAAAAA5bO+6LfolgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAcdb//3//EkXHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcTP8EAAD//wugIGI=") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x4020bc10, &(0x7f0000000280)=0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0xb, 0xfffffffffffffffe, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000340)=0x1, 0x4) sendmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 13.78104861s ago: executing program 3 (id=1527): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18008, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0x2, 0xfffffffe}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8}, 0x10}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f00000000c0)=""/57, 0x39, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x7, 0x8, 0x4, 0xfffffffffffffffd}, {0x2004}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x8}}, 0xe8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r5) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) socket$inet6_sctp(0xa, 0x801, 0x84) 13.064660748s ago: executing program 4 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}}, 0x0) 10.960210967s ago: executing program 4 (id=1529): socket$nl_route(0x10, 0x3, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={0x0, 0x1000000, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) 10.946601308s ago: executing program 5 (id=1530): r0 = socket$inet_smc(0x2b, 0x1, 0x0) semget$private(0x0, 0x6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}], 0x1, 0x2, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}, 0x48000) syz_emit_ethernet(0xfc, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) 10.579226158s ago: executing program 3 (id=1531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0xf1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x37) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/216, 0xd8}, {0x0}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/181, 0xb5}, {0x0}], 0x5, 0xb, 0xfffffff9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 9.31698078s ago: executing program 4 (id=1532): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={0x0, 0x1000000, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) close_range(r0, 0xffffffffffffffff, 0x0) 8.174983182s ago: executing program 2 (id=1533): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) 8.000209196s ago: executing program 5 (id=1534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0xf1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x37) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000300)=""/216, 0xd8}, {0x0}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/181, 0xb5}, {0x0}], 0x5, 0xb, 0xfffffff9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 7.969671408s ago: executing program 4 (id=1535): syz_open_procfs(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0x20000023893) 6.799740423s ago: executing program 2 (id=1536): socket$inet6_sctp(0xa, 0x1, 0x84) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0x20000023893) 4.088785091s ago: executing program 5 (id=1537): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) 3.913757995s ago: executing program 4 (id=1538): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5fc4, &(0x7f0000006400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x7) msgrcv(0x0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xa, @loopback, 0xacef}}}, 0x30) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendfile(r0, r2, 0x0, 0xfffe82) 2.399169487s ago: executing program 5 (id=1539): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201120000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_DEV_DESTROY(r2, 0x5502) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) syz_io_uring_setup(0xec1, &(0x7f0000000380)={0x0, 0xd387, 0x2, 0x3, 0xf1, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x114, 0x0, 0x0, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r4, 0x80047437, 0x10004000000006) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x52002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'sit0\x00', 0x2000}) socket$netlink(0x10, 0x3, 0x0) 2.265769778s ago: executing program 3 (id=1540): r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x8d8, &(0x7f0000000100)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@space_cache_v2}, {@compress_force}, {@nossd_spread}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x1f, 0x32, 0x37, 0x74, 0x65, 0x78]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4000010, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000300)={0x60, 0x6, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2, 0x4e, 0x14, 0x0, 0x10}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x7ff}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @loopback}], 0x78) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x282, 0x140) 1.99172928s ago: executing program 2 (id=1541): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read$dsp(r1, &(0x7f0000000200)=""/230, 0xe6) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x842, 0x0) write$dsp(r2, &(0x7f0000000340)="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", 0x1000) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x8000007ff, 0x913d, 0x0, 0x8, 0xf42, 0xfffffffffffffff7, 0x5}, {0x7, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in=@local, 0x4d6, 0x33}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x3, 0x1}}, 0xe8) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) eventfd(0x100) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f00000000c0)={0x10}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x33, 0x4, 0x1, 0x5, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x64}}, 0x0) 82.025534ms ago: executing program 2 (id=1542): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000005c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610936dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84bb90577b8b405a48292eeca69f5275cb7b7027d4bf643bd69b034c0221a309b51de90ce1398d3671463c5d7cee3928d2117b9dd2b5dffc93ee0494493ac2965f91635e88c6443b2b07b51ee688517889ade4e441b37744550fc4d7d68b1f79745b2c0c450c15f1b95f2e04181474eb8ba32ce2aab73", @ANYRES32, @ANYBLOB="3801cada1278dcfec4a63ed311a72046850c76ee", @ANYRESHEX], 0x1, 0x4439, &(0x7f00000088c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4020) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r2 = getpid() r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) ioctl$IMCTRLREQ(r3, 0x80044945, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 50.097837ms ago: executing program 4 (id=1543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read$dsp(r1, &(0x7f0000000200)=""/230, 0xe6) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x842, 0x0) write$dsp(r2, &(0x7f0000000340)="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", 0x1000) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x8000007ff, 0x913d, 0x0, 0x8, 0xf42, 0xfffffffffffffff7, 0x5}, {0x7, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in=@local, 0x4d6, 0x33}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x3, 0x1}}, 0xe8) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f00000000c0)={0x10}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x33, 0x4, 0x1, 0x5, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x64}}, 0x0) 0s ago: executing program 5 (id=1544): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): 080545][ T9568] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 572.097940][ T9572] input: syz1 as /devices/virtual/input/input25 [ 572.169621][ T9568] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 572.349560][ T9572] netlink: 'syz.1.836': attribute type 4 has an invalid length. [ 572.365606][ T9570] loop3: detected capacity change from 0 to 32768 [ 572.395564][ T9572] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.836'. [ 572.433005][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 572.466703][ T9570] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 572.541407][ T9570] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 572.784260][ T9570] overlayfs: missing 'lowerdir' [ 572.871829][ T9582] overlay: Unknown parameter '/' [ 573.971309][ T9588] overlay: Unknown parameter '/' [ 574.855259][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 578.537491][ T9619] input: syz1 as /devices/virtual/input/input26 [ 578.556200][ T9619] netlink: 'syz.0.847': attribute type 4 has an invalid length. [ 578.568294][ T5790] ocfs2: Unmounting device (7,3) on (node local) [ 578.580340][ T9619] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.847'. [ 578.868348][ T9630] loop3: detected capacity change from 0 to 128 [ 579.593175][ T9635] input: syz0 as /devices/virtual/input/input27 [ 580.096328][ T9644] loop1: detected capacity change from 0 to 1024 [ 580.167839][ T9644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.222545][ T9649] input: syz1 as /devices/virtual/input/input28 [ 580.236813][ T2933] kworker/u4:8: attempt to access beyond end of device [ 580.236813][ T2933] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 580.363824][ T9649] netlink: 'syz.2.856': attribute type 4 has an invalid length. [ 580.371532][ T9649] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.856'. [ 582.184159][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.383606][ T9663] input: syz1 as /devices/virtual/input/input29 [ 582.562294][ T9663] netlink: 'syz.3.861': attribute type 4 has an invalid length. [ 582.583595][ T9657] loop2: detected capacity change from 0 to 32768 [ 582.589437][ T9663] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.861'. [ 582.681676][ T9657] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 582.777757][ T9657] overlayfs: missing 'lowerdir' [ 583.086618][ T9668] loop1: detected capacity change from 0 to 32768 [ 583.154780][ T9668] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 583.154992][ T9680] loop0: detected capacity change from 0 to 1024 [ 583.208635][ T9668] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 583.444656][ T9680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.517172][ T9686] loop3: detected capacity change from 0 to 128 [ 583.536201][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 584.097605][ T9692] overlay: Unknown parameter '/' [ 584.937249][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 586.074406][ T9703] input: syz1 as /devices/virtual/input/input30 [ 586.210910][ T9703] netlink: 'syz.2.866': attribute type 4 has an invalid length. [ 586.266146][ T9703] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.866'. [ 586.624257][ T1131] kworker/u4:6: attempt to access beyond end of device [ 586.624257][ T1131] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 587.284692][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.315949][ T9711] loop3: detected capacity change from 0 to 2048 [ 587.368787][ T9711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.423629][ T9714] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 587.501779][ T27] audit: type=1800 audit(1755171306.657:203): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.869" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 587.603657][ T9717] input: syz1 as /devices/virtual/input/input31 [ 587.884412][ T9717] netlink: 'syz.1.872': attribute type 4 has an invalid length. [ 587.892114][ T9717] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.872'. [ 588.445603][ T2933] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1234 with error 28 [ 588.522181][ T2933] EXT4-fs (loop3): This should not happen!! Data will be lost [ 588.522181][ T2933] [ 588.558052][ T2933] EXT4-fs (loop3): Total free blocks count 0 [ 588.586383][ T2933] EXT4-fs (loop3): Free/Dirty block details [ 588.603770][ T2933] EXT4-fs (loop3): free_blocks=2415919504 [ 588.631134][ T2933] EXT4-fs (loop3): dirty_blocks=1248 [ 588.644920][ T2933] EXT4-fs (loop3): Block reservation details [ 588.651082][ T2933] EXT4-fs (loop3): i_reserved_data_blocks=78 [ 588.667179][ T9721] loop2: detected capacity change from 0 to 32768 [ 588.724595][ T9721] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 588.962915][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 588.966386][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.199671][ T9752] loop2: detected capacity change from 0 to 1024 [ 593.479272][ T9752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.506012][ T9761] loop3: detected capacity change from 0 to 1024 [ 595.040109][ T9761] EXT4-fs: quotafile must be on filesystem root [ 596.236034][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.525095][ T9767] loop3: detected capacity change from 0 to 32768 [ 596.530039][ T9771] input: syz1 as /devices/virtual/input/input32 [ 596.645451][ T9774] loop1: detected capacity change from 0 to 128 [ 596.651416][ T9767] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 596.653715][ T9770] netlink: 'syz.2.885': attribute type 4 has an invalid length. [ 596.838779][ T9770] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.885'. [ 598.662950][ T5790] ocfs2: Unmounting device (7,3) on (node local) [ 599.130413][ T11] kworker/u4:0: attempt to access beyond end of device [ 599.130413][ T11] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 600.137461][ T9797] tmpfs: Bad value for 'mpol' [ 601.276236][ T5534] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 601.643786][ T5534] usb 1-1: Using ep0 maxpacket: 8 [ 601.661004][ T5534] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.853631][ T5534] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 601.871834][ T5534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.912282][ T5534] usb 1-1: Product: syz [ 601.927112][ T5534] usb 1-1: Manufacturer: syz [ 601.931927][ T5534] usb 1-1: SerialNumber: syz [ 601.944498][ T9811] tmpfs: Bad value for 'mpol' [ 602.058663][ T5534] usb 1-1: config 0 descriptor?? [ 602.110726][ T5534] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 602.117412][ T5534] usb 1-1: selecting invalid altsetting 1 [ 602.274825][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 602.633790][ T5534] gspca_stk014: reg_r err -110 [ 602.640876][ T5534] stk014: probe of 1-1:0.0 failed with error -110 [ 602.652593][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 602.688692][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.786576][ T8] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 602.855365][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.922355][ T8] usb 2-1: Product: syz [ 602.947641][ T8] usb 2-1: Manufacturer: syz [ 602.987839][ T8] usb 2-1: SerialNumber: syz [ 603.118648][ T9814] loop2: detected capacity change from 0 to 1024 [ 603.255553][ T8] usb 2-1: config 0 descriptor?? [ 603.433228][ T8] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 603.444919][ T8] usb 2-1: selecting invalid altsetting 1 [ 603.731518][ T8695] usb 1-1: USB disconnect, device number 14 [ 603.800042][ T9814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.962789][ T8] gspca_stk014: reg_r err -110 [ 603.968472][ T8] stk014: probe of 2-1:0.0 failed with error -110 [ 604.852869][ T8] usb 2-1: USB disconnect, device number 8 [ 604.894452][ T9810] syz.2.894: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 604.952113][ T9826] loop1: detected capacity change from 0 to 128 [ 604.969289][ T9810] CPU: 0 PID: 9810 Comm: syz.2.894 Not tainted 6.6.101-syzkaller #0 [ 604.977396][ T9810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 604.987571][ T9810] Call Trace: [ 604.990876][ T9810] [ 604.993830][ T9810] dump_stack_lvl+0x16c/0x230 [ 604.998550][ T9810] ? show_regs_print_info+0x20/0x20 [ 605.003783][ T9810] ? load_image+0x3b0/0x3b0 [ 605.008423][ T9810] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 605.014868][ T9810] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 605.021406][ T9810] warn_alloc+0x210/0x300 [ 605.025784][ T9810] ? zone_watermark_ok_safe+0x230/0x230 [ 605.031383][ T9810] ? _raw_spin_unlock+0x28/0x40 [ 605.036271][ T9810] ? __vb2_queue_alloc+0x794/0x1410 [ 605.041475][ T9810] __vmalloc_node_range+0x662/0x1320 [ 605.046866][ T9810] ? free_vm_area+0x50/0x50 [ 605.051368][ T9810] vmalloc_user+0x74/0x80 [ 605.055694][ T9810] ? vb2_vmalloc_alloc+0xef/0x330 [ 605.060712][ T9810] vb2_vmalloc_alloc+0xef/0x330 [ 605.065552][ T9810] ? __copy_timestamp+0x1f0/0x1f0 [ 605.070571][ T9810] __vb2_queue_alloc+0x794/0x1410 [ 605.075611][ T9810] vb2_core_reqbufs+0xa57/0x1140 [ 605.080544][ T9810] ? __mutex_lock+0x4e8/0xcc0 [ 605.085213][ T9810] ? vb2_verify_memory_type+0x570/0x570 [ 605.090756][ T9810] ? vb2_reqbufs+0x360/0x5a0 [ 605.095367][ T9810] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 605.100760][ T9810] __video_do_ioctl+0xcbd/0xdd0 [ 605.105607][ T9810] ? video_ioctl2+0x30/0x30 [ 605.110100][ T9810] ? __might_fault+0xc6/0x120 [ 605.114867][ T9810] ? __might_fault+0xaa/0x120 [ 605.119663][ T9810] video_usercopy+0x838/0x1330 [ 605.124460][ T9810] ? video_ioctl2+0x30/0x30 [ 605.129023][ T9810] ? v4l_printk_ioctl+0x160/0x160 [ 605.134118][ T9810] v4l2_ioctl+0x18a/0x1e0 [ 605.138483][ T9810] ? v4l2_poll+0x2b0/0x2b0 [ 605.142911][ T9810] __se_sys_ioctl+0xfd/0x170 [ 605.147504][ T9810] do_syscall_64+0x55/0xb0 [ 605.151915][ T9810] ? clear_bhb_loop+0x40/0x90 [ 605.156587][ T9810] ? clear_bhb_loop+0x40/0x90 [ 605.161266][ T9810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.167167][ T9810] RIP: 0033:0x7f92f378ebe9 [ 605.171765][ T9810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.192427][ T9810] RSP: 002b:00007f92f4548038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.200878][ T9810] RAX: ffffffffffffffda RBX: 00007f92f39b6180 RCX: 00007f92f378ebe9 [ 605.208877][ T9810] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000003 [ 605.216877][ T9810] RBP: 00007f92f3811e19 R08: 0000000000000000 R09: 0000000000000000 [ 605.224877][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.232854][ T9810] R13: 00007f92f39b6218 R14: 00007f92f39b6180 R15: 00007ffe5b9c0ae8 [ 605.241032][ T9810] [ 605.351945][ T9810] Mem-Info: [ 605.367853][ T9810] active_anon:5479 inactive_anon:0 isolated_anon:0 [ 605.367853][ T9810] active_file:17239 inactive_file:40051 isolated_file:0 [ 605.367853][ T9810] unevictable:768 dirty:174 writeback:0 [ 605.367853][ T9810] slab_reclaimable:10741 slab_unreclaimable:96002 [ 605.367853][ T9810] mapped:27800 shmem:1491 pagetables:612 [ 605.367853][ T9810] sec_pagetables:0 bounce:0 [ 605.367853][ T9810] kernel_misc_reclaimable:0 [ 605.367853][ T9810] free:1332464 free_pcp:10826 free_cma:0 [ 605.972952][ T9810] Node 0 active_anon:21916kB inactive_anon:0kB active_file:68956kB inactive_file:160008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111200kB dirty:696kB writeback:0kB shmem:4428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11188kB pagetables:2448kB sec_pagetables:0kB all_unreclaimable? no [ 606.005684][ T9810] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 606.036130][ T9810] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.064364][ T9810] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 606.070244][ T9810] Node 0 DMA32 free:1412528kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21924kB inactive_anon:0kB active_file:68956kB inactive_file:158708kB unevictable:1536kB writepending:700kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:27796kB local_pcp:14944kB free_cma:0kB [ 606.124269][ T9810] lowmem_reserve[]: 0 0 1 1 1 [ 606.129070][ T9810] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 606.189767][ T9810] lowmem_reserve[]: 0 0 0 0 0 [ 606.195028][ T9810] Node 1 Normal free:3901712kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14752kB local_pcp:7776kB free_cma:0kB [ 606.459238][ T9810] lowmem_reserve[]: 0 0 0 0 0 [ 606.469295][ T9810] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 606.491391][ T9810] Node 0 DMA32: 1*4kB (U) 3*8kB (UME) 20*16kB (UME) 33*32kB (UE) 209*64kB (UME) 56*128kB (U) 21*256kB (UM) 6*512kB (UE) 5*1024kB (UM) 6*2048kB (UM) 333*4096kB (UM) = 1411772kB [ 606.516908][ T9810] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 606.531847][ T9810] Node 1 Normal: 220*4kB (UE) 62*8kB (UE) 41*16kB (UE) 127*32kB (UE) 35*64kB (UME) 7*128kB (UME) 1*256kB (E) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3901712kB [ 606.552558][ T9810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.564509][ T9810] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 606.627778][ T9810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.638102][ T9810] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 606.654628][ T9810] 58919 total pagecache pages [ 606.660574][ T9810] 0 pages in swap cache [ 606.679478][ T9810] Free swap = 124472kB [ 606.686540][ T9810] Total swap = 124996kB [ 606.690870][ T9810] 2097051 pages RAM [ 606.701624][ T9810] 0 pages HighMem/MovableOnly [ 606.709193][ T9810] 416137 pages reserved [ 606.736444][ T9810] 0 pages cma reserved [ 606.990316][ T2933] kworker/u4:8: attempt to access beyond end of device [ 606.990316][ T2933] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 607.209291][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.224949][ T9881] loop2: detected capacity change from 0 to 128 [ 613.329287][ T9887] tmpfs: Bad value for 'mpol' [ 613.622657][ T5859] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 614.172560][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 614.181803][ T5859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.200292][ T5859] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 614.220141][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.243280][ T5859] usb 4-1: Product: syz [ 614.247666][ T5859] usb 4-1: Manufacturer: syz [ 614.262107][ T5859] usb 4-1: SerialNumber: syz [ 614.291361][ T5859] usb 4-1: config 0 descriptor?? [ 614.327644][ T5859] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 614.594340][ T5859] usb 4-1: selecting invalid altsetting 1 [ 614.611637][ T11] kworker/u4:0: attempt to access beyond end of device [ 614.611637][ T11] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 615.112615][ T5859] gspca_stk014: reg_r err -110 [ 615.514768][ T5859] stk014: probe of 4-1:0.0 failed with error -110 [ 616.194724][ T5859] usb 4-1: USB disconnect, device number 12 [ 616.833041][ T9909] loop1: detected capacity change from 0 to 1024 [ 617.040039][ T9909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.935835][ T9927] loop0: detected capacity change from 0 to 1024 [ 619.101553][ T9927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.226825][ T9931] loop3: detected capacity change from 0 to 128 [ 620.164140][ T2993] kworker/u4:11: attempt to access beyond end of device [ 620.164140][ T2993] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 620.391503][ T9939] loop3: detected capacity change from 0 to 128 [ 621.979530][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.000457][ T1131] kworker/u4:6: attempt to access beyond end of device [ 622.000457][ T1131] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 622.039689][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.164531][ T9940] loop2: detected capacity change from 0 to 1024 [ 622.211475][ T9940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.011858][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.517155][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.982982][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.199696][ T9969] loop2: detected capacity change from 0 to 32768 [ 626.335655][ T9969] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 626.489698][ T9969] overlayfs: missing 'lowerdir' [ 627.181437][ T9980] input: syz1 as /devices/virtual/input/input33 [ 627.342238][ T9980] netlink: 'syz.3.939': attribute type 4 has an invalid length. [ 627.518049][ T9980] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.939'. [ 627.563726][ T9985] netlink: 'syz.0.940': attribute type 10 has an invalid length. [ 628.169237][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 629.182254][ T9998] loop2: detected capacity change from 0 to 128 [ 630.907018][ T1131] kworker/u4:6: attempt to access beyond end of device [ 630.907018][ T1131] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 631.121240][ T9994] loop1: detected capacity change from 0 to 32768 [ 631.149444][ T9994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.944 (9994) [ 631.239851][ T9994] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 631.326407][ T9994] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 631.372909][ T9994] BTRFS info (device loop1): metadata ratio 2 [ 631.394501][ T9994] BTRFS info (device loop1): force zlib compression, level 3 [ 631.423332][ T9994] BTRFS info (device loop1): use zlib compression, level 3 [ 631.445073][ T9994] BTRFS info (device loop1): enabling auto defrag [ 631.469558][ T9994] BTRFS info (device loop1): max_inline at 0 [ 631.483813][ T9994] BTRFS info (device loop1): using free space tree [ 631.697539][ T9994] BTRFS info (device loop1): enabling ssd optimizations [ 631.818622][ T9994] BTRFS info (device loop1): auto enabling async discard [ 632.061254][T10006] loop2: detected capacity change from 0 to 32768 [ 632.079641][ T5789] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 632.175399][T10006] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.946 (10006) [ 632.317578][ T5784] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (5784) [ 635.596991][T10026] loop1: detected capacity change from 0 to 40427 [ 635.621180][T10026] F2FS-fs (loop1): LFS is not compatible with checkpoint=disable [ 636.749280][T10039] loop3: detected capacity change from 0 to 32768 [ 636.822460][T10039] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 636.894328][T10039] overlayfs: missing 'lowerdir' [ 637.326208][T10046] loop1: detected capacity change from 0 to 32768 [ 637.402215][T10046] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 637.475459][T10046] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 637.546904][T10046] overlayfs: missing 'lowerdir' [ 638.046776][ T5790] ocfs2: Unmounting device (7,3) on (node local) [ 639.045249][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 643.155703][T10099] input: syz1 as /devices/virtual/input/input34 [ 643.222542][T10099] netlink: 'syz.3.967': attribute type 4 has an invalid length. [ 643.242587][T10099] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.967'. [ 643.621543][T10093] loop1: detected capacity change from 0 to 32768 [ 643.836084][T10093] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 643.864338][T10093] overlayfs: missing 'lowerdir' [ 643.967791][T10098] loop0: detected capacity change from 0 to 32768 [ 644.039333][T10098] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 644.115877][T10098] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 644.302332][T10098] overlayfs: missing 'lowerdir' [ 645.187127][T10119] loop2: detected capacity change from 0 to 128 [ 646.819257][ T2933] kworker/u4:8: attempt to access beyond end of device [ 646.819257][ T2933] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 646.925725][T10124] loop2: detected capacity change from 0 to 128 [ 647.374536][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 647.755205][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 647.772984][T10132] input: syz1 as /devices/virtual/input/input35 [ 648.011516][T10132] netlink: 'syz.1.973': attribute type 4 has an invalid length. [ 648.019732][T10132] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.973'. [ 650.964278][T10150] loop1: detected capacity change from 0 to 65536 [ 651.028937][T10150] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 651.342533][T10150] XFS (loop1): Ending clean mount [ 651.387532][T10150] XFS (loop1): Quotacheck needed: Please wait. [ 651.795626][T10150] XFS (loop1): Quotacheck: Done. [ 652.690285][ T27] audit: type=1800 audit(1755171371.377:204): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.979" name="file1" dev="loop1" ino=70 res=0 errno=0 [ 652.865692][ T5789] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 652.999626][T10175] loop0: detected capacity change from 0 to 128 [ 654.198405][T10186] loop1: detected capacity change from 0 to 32768 [ 654.257068][T10186] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 654.397359][T10186] overlayfs: missing 'lowerdir' [ 655.868310][T10199] input: syz1 as /devices/virtual/input/input36 [ 656.070945][T10199] netlink: 'syz.0.988': attribute type 4 has an invalid length. [ 656.084419][T10199] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.988'. [ 656.430889][T10206] loop2: detected capacity change from 0 to 1024 [ 656.560497][T10206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.156277][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 658.657813][T10214] loop0: detected capacity change from 0 to 65536 [ 658.711145][T10214] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 658.894381][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.151724][T10214] XFS (loop0): Ending clean mount [ 659.172894][T10214] XFS (loop0): Quotacheck needed: Please wait. [ 659.346927][T10214] XFS (loop0): Quotacheck: Done. [ 659.926832][T10211] XFS (loop0): User initiated shutdown received. [ 659.933747][T10211] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 659.947564][T10211] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 660.037815][ T5792] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 660.174888][T10235] loop3: detected capacity change from 0 to 128 [ 660.314281][T10237] loop0: detected capacity change from 0 to 128 [ 661.912694][T10227] kworker/u4:1: attempt to access beyond end of device [ 661.912694][T10227] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 663.096707][T10249] loop0: detected capacity change from 0 to 65536 [ 664.353196][ T27] audit: type=1326 audit(1755171382.337:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10243 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0838ebe9 code=0x7ffc0000 [ 664.431713][T10249] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 664.472888][ T27] audit: type=1326 audit(1755171382.447:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10243 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fbf0838ebe9 code=0x7ffc0000 [ 664.498617][T10249] XFS (loop0): Ending clean mount [ 664.515347][T10249] XFS (loop0): Quotacheck needed: Please wait. [ 664.564936][ T27] audit: type=1326 audit(1755171382.457:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10243 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0838ebe9 code=0x7ffc0000 [ 664.588578][ T27] audit: type=1326 audit(1755171382.457:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10243 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0838ebe9 code=0x7ffc0000 [ 664.611054][T10249] XFS (loop0): Quotacheck: Done. [ 664.902269][ T5792] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 665.449889][T10262] loop3: detected capacity change from 0 to 32768 [ 665.522807][T10262] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 665.715827][T10267] overlayfs: missing 'lowerdir' [ 667.703739][T10269] loop2: detected capacity change from 0 to 32768 [ 667.776229][T10269] XFS: ikeep mount option is deprecated. [ 667.827464][T10269] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 668.275528][T10269] XFS (loop2): Ending clean mount [ 668.327799][T10269] XFS (loop2): Quotacheck needed: Please wait. [ 669.070495][T10269] XFS (loop2): Quotacheck: Done. [ 669.930435][ T5791] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 670.045739][T10301] loop1: detected capacity change from 0 to 128 [ 670.689317][ T5790] ocfs2: Unmounting device (7,3) on (node local) [ 670.703263][T10299] loop0: detected capacity change from 0 to 32768 [ 670.727409][T10299] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 673.151113][T10310] loop3: detected capacity change from 0 to 65536 [ 673.189783][ T5802] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 673.256219][T10310] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 673.277143][T10227] kworker/u4:1: attempt to access beyond end of device [ 673.277143][T10227] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 673.370336][T10310] XFS (loop3): Ending clean mount [ 673.378165][T10310] XFS (loop3): Quotacheck needed: Please wait. [ 675.003905][T10325] loop2: detected capacity change from 0 to 65536 [ 675.080574][T10310] XFS (loop3): Quotacheck: Done. [ 675.082035][T10325] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 675.157768][T10325] XFS (loop2): Ending clean mount [ 675.201793][T10325] XFS (loop2): Quotacheck needed: Please wait. [ 675.203596][ T5790] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 675.278558][T10325] XFS (loop2): Quotacheck: Done. [ 676.519931][T10324] XFS (loop2): User initiated shutdown received. [ 676.526671][T10324] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 676.540462][T10324] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 676.798219][ T5791] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 679.544302][T10362] loop3: detected capacity change from 0 to 128 [ 679.712498][ T28] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 679.894490][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.149483][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.159462][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 680.178868][ T28] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 680.190907][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.223655][ T28] usb 3-1: config 0 descriptor?? [ 680.390495][T10369] loop1: detected capacity change from 0 to 128 [ 682.394301][ T992] kworker/u4:5: attempt to access beyond end of device [ 682.394301][ T992] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 682.449685][ T992] kworker/u4:5: attempt to access beyond end of device [ 682.449685][ T992] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 684.782104][ T28] usbhid 3-1:0.0: can't add hid device: -71 [ 684.793113][ T28] usbhid: probe of 3-1:0.0 failed with error -71 [ 684.802083][ T28] usb 3-1: USB disconnect, device number 16 [ 685.956480][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.963063][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.387762][T10413] loop1: detected capacity change from 0 to 128 [ 689.059126][ T992] kworker/u4:5: attempt to access beyond end of device [ 689.059126][ T992] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 689.605631][T10432] loop2: detected capacity change from 0 to 1024 [ 689.685756][T10432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.712301][T10434] loop1: detected capacity change from 0 to 1024 [ 689.937339][T10434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.746440][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.561939][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.751764][T10461] loop1: detected capacity change from 0 to 128 [ 697.630153][T10487] loop2: detected capacity change from 0 to 1024 [ 697.760178][T10474] loop3: detected capacity change from 0 to 32768 [ 697.791286][T10473] loop0: detected capacity change from 0 to 32768 [ 697.820211][T10487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.869796][T10473] XFS: ikeep mount option is deprecated. [ 697.922732][T10474] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 697.981314][T10473] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 698.015740][T10474] overlayfs: missing 'lowerdir' [ 698.082022][T10499] input: syz1 as /devices/virtual/input/input37 [ 698.209264][T10499] netlink: 'syz.1.1051': attribute type 4 has an invalid length. [ 698.281457][T10499] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1051'. [ 698.293818][T10473] XFS (loop0): Ending clean mount [ 698.317692][T10473] XFS (loop0): Quotacheck needed: Please wait. [ 698.948910][T10473] XFS (loop0): Quotacheck: Done. [ 699.030483][ T5792] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 700.242091][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.262569][ T5790] ocfs2: Unmounting device (7,3) on (node local) [ 701.454277][T10523] input: syz0 as /devices/virtual/input/input38 [ 702.191484][T10525] loop1: detected capacity change from 0 to 1024 [ 702.199331][T10525] EXT4-fs: quotafile must be on filesystem root [ 703.066499][T10529] loop1: detected capacity change from 0 to 128 [ 703.347526][T10534] tmpfs: Bad value for 'mpol' [ 704.202955][ T5534] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 704.341726][T10541] tmpfs: Bad value for 'mpol' [ 704.922445][ T5534] usb 1-1: Using ep0 maxpacket: 8 [ 705.003954][ T8695] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 705.021434][ T5534] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.043980][ T5534] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 705.061167][ T5534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.069329][ T5534] usb 1-1: Product: syz [ 705.073614][ T5534] usb 1-1: Manufacturer: syz [ 705.078225][ T5534] usb 1-1: SerialNumber: syz [ 705.093094][ T5534] usb 1-1: config 0 descriptor?? [ 705.112324][ T5534] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 705.132026][ T5534] usb 1-1: selecting invalid altsetting 1 [ 705.352593][ T8695] usb 4-1: Using ep0 maxpacket: 8 [ 705.372491][ T8695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.429985][T10546] input: syz1 as /devices/virtual/input/input39 [ 705.438021][ T8695] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 705.473139][ T8695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.495959][ T8695] usb 4-1: Product: syz [ 705.527105][T10546] netlink: 'syz.1.1062': attribute type 4 has an invalid length. [ 705.535128][T10546] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1062'. [ 705.550704][ T8695] usb 4-1: Manufacturer: syz [ 705.576512][ T8695] usb 4-1: SerialNumber: syz [ 705.621411][ T8695] usb 4-1: config 0 descriptor?? [ 705.670825][ T8695] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 705.680143][ T8695] usb 4-1: selecting invalid altsetting 1 [ 705.702770][ T5534] gspca_stk014: reg_r err -110 [ 705.713552][ T5534] stk014: probe of 1-1:0.0 failed with error -110 [ 705.834205][T10545] loop2: detected capacity change from 0 to 32768 [ 705.913062][T10545] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 705.979934][T10545] overlayfs: missing 'lowerdir' [ 706.204011][ T8695] gspca_stk014: reg_r err -110 [ 706.227514][ T8695] stk014: probe of 4-1:0.0 failed with error -110 [ 706.423700][ T8695] usb 1-1: USB disconnect, device number 15 [ 707.554673][ T5534] usb 4-1: USB disconnect, device number 13 [ 709.678278][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 709.840837][T10559] loop3: detected capacity change from 0 to 32768 [ 710.357258][T10559] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 710.563810][T10559] overlayfs: missing 'lowerdir' [ 710.778533][T10577] loop2: detected capacity change from 0 to 128 [ 711.376124][T10580] loop0: detected capacity change from 0 to 128 [ 713.088725][ T5790] ocfs2: Unmounting device (7,3) on (node local) [ 713.171035][T10227] kworker/u4:1: attempt to access beyond end of device [ 713.171035][T10227] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 714.694714][T10601] netlink: 'syz.1.1076': attribute type 4 has an invalid length. [ 714.717937][T10601] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1076'. [ 716.452225][T10615] input: syz0 as /devices/virtual/input/input40 [ 717.009231][T10619] netlink: 'syz.2.1082': attribute type 10 has an invalid length. [ 718.334316][T10617] loop1: detected capacity change from 0 to 32768 [ 718.719562][T10617] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 719.084263][T10617] overlayfs: missing 'lowerdir' [ 720.230835][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 722.217786][T10639] loop0: detected capacity change from 0 to 65536 [ 722.268606][T10633] loop2: detected capacity change from 0 to 32768 [ 722.284448][T10647] loop1: detected capacity change from 0 to 128 [ 722.313856][T10639] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 722.382785][T10639] XFS (loop0): Ending clean mount [ 722.402647][T10639] XFS (loop0): Quotacheck needed: Please wait. [ 722.515199][T10633] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 722.583011][T10639] XFS (loop0): Quotacheck: Done. [ 723.200502][T10658] overlayfs: missing 'lowerdir' [ 724.136239][T10660] netlink: 'syz.3.1090': attribute type 4 has an invalid length. [ 724.148850][T10636] XFS (loop0): User initiated shutdown received. [ 724.155614][T10636] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 724.169504][T10636] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 724.248600][ T5792] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 724.267758][T10660] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1090'. [ 724.285110][ T992] kworker/u4:5: attempt to access beyond end of device [ 724.285110][ T992] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 724.521526][T10664] loop1: detected capacity change from 0 to 128 [ 727.435179][ T2933] kworker/u4:8: attempt to access beyond end of device [ 727.435179][ T2933] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 728.104601][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 732.342063][T10694] loop1: detected capacity change from 0 to 65536 [ 732.406602][T10694] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 732.580609][T10694] XFS (loop1): Ending clean mount [ 732.594921][T10694] XFS (loop1): Quotacheck needed: Please wait. [ 732.761843][T10694] XFS (loop1): Quotacheck: Done. [ 732.959580][T10704] loop0: detected capacity change from 0 to 32768 [ 732.999613][T10704] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 733.371841][ T5784] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 733.946341][T10711] netlink: 'syz.3.1101': attribute type 4 has an invalid length. [ 733.961934][T10711] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1101'. [ 734.048914][T10692] XFS (loop1): User initiated shutdown received. [ 734.055440][T10692] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 734.069979][T10692] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 734.143833][ T5789] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 735.878361][T10729] tmpfs: Bad value for 'mpol' [ 736.192467][ T28] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 736.551596][T10730] loop0: detected capacity change from 0 to 1024 [ 736.581103][T10714] loop2: detected capacity change from 0 to 32768 [ 736.610150][T10714] XFS: ikeep mount option is deprecated. [ 736.646877][T10730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.668490][T10714] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 736.702611][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 736.714140][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.745210][ T28] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 736.754985][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.763283][ T28] usb 2-1: Product: syz [ 736.767860][ T28] usb 2-1: Manufacturer: syz [ 736.772596][ T28] usb 2-1: SerialNumber: syz [ 736.781149][ T28] usb 2-1: config 0 descriptor?? [ 736.789620][ T28] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 736.802523][ T28] usb 2-1: selecting invalid altsetting 1 [ 736.888938][T10714] XFS (loop2): Ending clean mount [ 736.997669][T10714] XFS (loop2): Quotacheck needed: Please wait. [ 737.051474][T10714] XFS (loop2): Quotacheck: Done. [ 737.310142][ T5791] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 737.322771][ T28] gspca_stk014: reg_r err -110 [ 737.327827][ T28] stk014: probe of 2-1:0.0 failed with error -110 [ 737.496122][T10734] loop3: detected capacity change from 0 to 32768 [ 737.504024][T10734] XFS: ikeep mount option is deprecated. [ 737.526067][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.547817][T10734] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 737.707540][T10734] XFS (loop3): Ending clean mount [ 737.717654][T10734] XFS (loop3): Quotacheck needed: Please wait. [ 737.764562][T10734] XFS (loop3): Quotacheck: Done. [ 738.894148][ T55] usb 2-1: USB disconnect, device number 9 [ 739.001703][ T27] audit: type=1800 audit(1755171458.147:209): pid=10755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1107" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 739.031732][ T27] audit: type=1800 audit(1755171458.187:210): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1107" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 739.239131][ T5790] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 739.306761][T10762] loop0: detected capacity change from 0 to 128 [ 741.604187][T10227] kworker/u4:1: attempt to access beyond end of device [ 741.604187][T10227] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 743.975985][ T5880] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 744.205011][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 744.229436][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.247399][T10788] loop1: detected capacity change from 0 to 1024 [ 744.254749][ T5880] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 744.269555][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.287991][ T5880] usb 1-1: Product: syz [ 744.292207][ T5880] usb 1-1: Manufacturer: syz [ 744.311348][ T5880] usb 1-1: SerialNumber: syz [ 744.325702][ T5880] usb 1-1: config 0 descriptor?? [ 744.345587][ T5880] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 744.346929][T10788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.362054][ T5880] usb 1-1: selecting invalid altsetting 1 [ 744.882890][ T5880] gspca_stk014: reg_r err -110 [ 744.915214][ T5880] stk014: probe of 1-1:0.0 failed with error -110 [ 745.884878][ T5534] usb 1-1: USB disconnect, device number 16 [ 746.002102][T10800] loop0: detected capacity change from 0 to 128 [ 748.355848][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.364739][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.432483][ T5880] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 748.534373][ T2933] kworker/u4:8: attempt to access beyond end of device [ 748.534373][ T2933] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 748.612485][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 748.629644][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.665101][ T5880] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 748.691087][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.719707][ T5880] usb 4-1: Product: syz [ 748.724343][ T5880] usb 4-1: Manufacturer: syz [ 748.743202][ T5880] usb 4-1: SerialNumber: syz [ 748.763950][ T5880] usb 4-1: config 0 descriptor?? [ 748.784439][ T5880] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 748.790592][ T5880] usb 4-1: selecting invalid altsetting 1 [ 750.339357][T10817] loop2: detected capacity change from 0 to 65536 [ 750.347663][ T5880] gspca_stk014: reg_r err -71 [ 750.352766][ T5880] stk014: probe of 4-1:0.0 failed with error -71 [ 750.363043][ T5880] usb 4-1: USB disconnect, device number 14 [ 750.461568][T10817] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 750.506184][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.518745][T10817] XFS (loop2): Ending clean mount [ 750.526058][T10817] XFS (loop2): Quotacheck needed: Please wait. [ 750.709553][T10813] loop0: detected capacity change from 0 to 32768 [ 750.738114][T10817] XFS (loop2): Quotacheck: Done. [ 750.895141][T10813] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 751.291471][ T5784] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 752.040050][T10816] XFS (loop2): User initiated shutdown received. [ 752.046667][T10816] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 752.060707][T10816] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 752.153638][ T5791] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 754.686883][T10850] bridge0: port 3(gretap0) entered blocking state [ 754.693592][T10850] bridge0: port 3(gretap0) entered disabled state [ 754.700566][T10850] gretap0: entered allmulticast mode [ 754.707299][T10850] gretap0: entered promiscuous mode [ 754.713220][T10850] bridge0: port 3(gretap0) entered blocking state [ 754.719839][T10850] bridge0: port 3(gretap0) entered forwarding state [ 756.312566][ T5534] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 756.843030][ T5534] usb 3-1: Using ep0 maxpacket: 8 [ 756.854040][ T5534] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.890822][ T5534] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 756.913853][ T5534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.921909][ T5534] usb 3-1: Product: syz [ 756.925610][T10862] input: syz0 as /devices/virtual/input/input41 [ 756.936418][ T5534] usb 3-1: Manufacturer: syz [ 756.941072][ T5534] usb 3-1: SerialNumber: syz [ 756.963640][ T5534] usb 3-1: config 0 descriptor?? [ 756.991151][ T5534] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 757.012586][ T5534] usb 3-1: selecting invalid altsetting 1 [ 757.161582][T10853] loop0: detected capacity change from 0 to 32768 [ 757.207003][T10853] XFS: ikeep mount option is deprecated. [ 757.421002][T10853] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 757.539326][ T5534] gspca_stk014: reg_r err -110 [ 757.603834][ T5534] stk014: probe of 3-1:0.0 failed with error -110 [ 758.204185][T10853] XFS (loop0): Ending clean mount [ 758.214594][T10853] XFS (loop0): Quotacheck needed: Please wait. [ 758.332614][T10853] XFS (loop0): Quotacheck: Done. [ 758.824332][ T5534] usb 3-1: USB disconnect, device number 17 [ 759.772546][ T5792] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 759.912245][T10883] tmpfs: Bad value for 'mpol' [ 760.734664][T10881] loop2: detected capacity change from 0 to 32768 [ 760.743039][T10881] XFS: ikeep mount option is deprecated. [ 760.789268][T10895] loop1: detected capacity change from 0 to 128 [ 760.860262][T10881] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 762.898235][ T2933] kworker/u4:8: attempt to access beyond end of device [ 762.898235][ T2933] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 762.984463][T10881] XFS (loop2): Ending clean mount [ 763.020424][T10881] XFS (loop2): Quotacheck needed: Please wait. [ 763.074917][T10909] loop3: detected capacity change from 0 to 128 [ 763.087336][T10889] loop0: detected capacity change from 0 to 32768 [ 763.135285][T10889] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 763.144928][T10881] XFS (loop2): Quotacheck: Done. [ 764.761432][ T2933] kworker/u4:8: attempt to access beyond end of device [ 764.761432][ T2933] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 764.776938][ T5791] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 765.185354][ T8236] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 765.245432][T10922] input: syz1 as /devices/virtual/input/input42 [ 765.491883][T10922] netlink: 'syz.3.1146': attribute type 4 has an invalid length. [ 765.522928][T10922] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1146'. [ 766.034264][T10924] loop1: detected capacity change from 0 to 32768 [ 766.095095][T10924] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 766.422203][T10928] loop2: detected capacity change from 0 to 32768 [ 766.434899][T10928] XFS: ikeep mount option is deprecated. [ 766.532768][T10928] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 767.395161][T10928] XFS (loop2): Ending clean mount [ 767.588012][T10928] XFS (loop2): Quotacheck needed: Please wait. [ 767.789427][T10928] XFS (loop2): Quotacheck: Done. [ 768.931072][ T27] audit: type=1800 audit(1755171488.027:211): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1145" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 768.954885][ T27] audit: type=1800 audit(1755171488.117:212): pid=10952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1145" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 769.075164][ T5791] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 769.295712][T10955] loop0: detected capacity change from 0 to 128 [ 769.402152][T10957] netlink: 'syz.3.1153': attribute type 10 has an invalid length. [ 771.281249][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 771.397535][T10227] kworker/u4:1: attempt to access beyond end of device [ 771.397535][T10227] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 771.561557][T10966] bridge0: port 3(gretap0) entered blocking state [ 771.568529][T10966] bridge0: port 3(gretap0) entered disabled state [ 771.575355][T10966] gretap0: entered allmulticast mode [ 771.585115][T10966] gretap0: entered promiscuous mode [ 771.591715][T10966] bridge0: port 3(gretap0) entered blocking state [ 771.598502][T10966] bridge0: port 3(gretap0) entered forwarding state [ 772.669479][T10976] input: syz1 as /devices/virtual/input/input43 [ 772.766288][T10976] netlink: 'syz.3.1157': attribute type 4 has an invalid length. [ 772.787723][T10976] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1157'. [ 772.826370][T10979] input: syz0 as /devices/virtual/input/input44 [ 775.112594][ T8695] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 775.312939][ T8695] usb 1-1: Using ep0 maxpacket: 8 [ 775.365790][ T8695] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.451961][ T8695] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 775.471571][ T8695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.490764][ T8695] usb 1-1: Product: syz [ 775.502162][ T8695] usb 1-1: Manufacturer: syz [ 775.517702][ T8695] usb 1-1: SerialNumber: syz [ 775.543870][ T8695] usb 1-1: config 0 descriptor?? [ 775.569151][ T8695] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 775.586370][ T8695] usb 1-1: selecting invalid altsetting 1 [ 776.789230][ T8695] gspca_stk014: reg_r err -110 [ 776.811991][ T8695] stk014: probe of 1-1:0.0 failed with error -110 [ 777.353344][T10987] loop2: detected capacity change from 0 to 32768 [ 777.398731][T10987] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 777.451531][T11004] loop1: detected capacity change from 0 to 128 [ 777.483994][T10987] overlayfs: missing 'lowerdir' [ 777.576115][ T8695] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 777.586637][ T28] usb 1-1: USB disconnect, device number 17 [ 777.783904][ T8695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.868688][ T8695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.478857][ T8695] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 778.552445][ T8695] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 778.561741][ T8695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.726989][ T8695] usb 4-1: config 0 descriptor?? [ 780.954238][ T2993] kworker/u4:11: attempt to access beyond end of device [ 780.954238][ T2993] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 781.956731][ T8695] usbhid 4-1:0.0: can't add hid device: -71 [ 781.967765][ T8695] usbhid: probe of 4-1:0.0 failed with error -71 [ 781.994363][ T8695] usb 4-1: USB disconnect, device number 15 [ 785.044606][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 789.392592][ T28] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 789.494513][T11065] loop0: detected capacity change from 0 to 1024 [ 789.588514][T11065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.602700][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 789.610206][ T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.632504][ T28] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 789.641539][ T28] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 789.650804][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.661815][ T28] usb 3-1: config 0 descriptor?? [ 789.885108][T11060] loop3: detected capacity change from 0 to 32768 [ 789.977483][T11063] loop1: detected capacity change from 0 to 32768 [ 790.006112][T11060] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 790.030244][T11063] XFS: ikeep mount option is deprecated. [ 790.127109][T11063] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 790.134182][T11060] overlayfs: missing 'lowerdir' [ 790.358105][T11063] XFS (loop1): Ending clean mount [ 790.378846][T11063] XFS (loop1): Quotacheck needed: Please wait. [ 790.475740][T11063] XFS (loop1): Quotacheck: Done. [ 790.878139][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.773371][ T5789] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 792.103413][ T55] usb 3-1: USB disconnect, device number 18 [ 792.172185][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 792.382536][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 792.390830][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.401760][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 792.406384][T11084] loop0: detected capacity change from 0 to 32768 [ 792.415212][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 792.426343][T11084] XFS: ikeep mount option is deprecated. [ 792.458873][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.461664][T11084] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 792.480375][ T9] usb 2-1: config 0 descriptor?? [ 792.496239][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 792.503166][ T9] hub: probe of 2-1:0.0 failed with error -5 [ 792.513684][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 792.629283][T11084] XFS (loop0): Ending clean mount [ 792.635386][ T55] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 792.648504][T11084] XFS (loop0): Quotacheck needed: Please wait. [ 792.697889][T11084] XFS (loop0): Quotacheck: Done. [ 793.002454][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 793.017666][ T5790] ocfs2: Unmounting device (7,3) on (node local) [ 793.034350][ T55] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.072690][ T55] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 793.106783][ T55] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 793.166688][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.250814][ T55] usb 3-1: config 0 descriptor?? [ 793.479238][ T55] hub 3-1:0.0: bad descriptor, ignoring hub [ 793.550957][ T55] hub: probe of 3-1:0.0 failed with error -5 [ 793.661301][ T55] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 793.879257][ T5792] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 795.262541][ T5534] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 795.455927][ T5534] usb 1-1: Using ep0 maxpacket: 8 [ 795.534983][ T5534] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.592667][ T5534] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 795.615616][ T5534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.639238][ T5534] usb 1-1: Product: syz [ 795.655725][ T5534] usb 1-1: Manufacturer: syz [ 795.660388][ T5534] usb 1-1: SerialNumber: syz [ 795.713968][ T5534] usb 1-1: config 0 descriptor?? [ 795.734966][ T5534] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 795.757510][ T5880] usb 2-1: USB disconnect, device number 10 [ 795.790289][T10341] usb 3-1: USB disconnect, device number 19 [ 795.823075][ T5534] usb 1-1: selecting invalid altsetting 1 [ 797.072749][ T5534] gspca_stk014: reg_r err -110 [ 797.417017][ T5534] stk014: probe of 1-1:0.0 failed with error -110 [ 797.775803][ T5880] usb 1-1: USB disconnect, device number 18 [ 799.026230][T11131] netlink: 'syz.2.1194': attribute type 10 has an invalid length. [ 799.982875][T10341] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 800.172466][T10341] usb 1-1: Using ep0 maxpacket: 8 [ 800.637270][T10341] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.675565][T10341] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 800.695541][T10341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.710780][T10341] usb 1-1: Product: syz [ 800.715597][T10341] usb 1-1: Manufacturer: syz [ 800.720377][T10341] usb 1-1: SerialNumber: syz [ 800.741568][T10341] usb 1-1: config 0 descriptor?? [ 800.776330][T10341] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 800.789685][T10341] usb 1-1: selecting invalid altsetting 1 [ 800.799018][T11147] input: syz0 as /devices/virtual/input/input45 [ 801.477399][T10341] gspca_stk014: reg_r err -110 [ 801.483393][T10341] stk014: probe of 1-1:0.0 failed with error -110 [ 802.226017][T10341] usb 1-1: USB disconnect, device number 19 [ 804.637947][T11173] loop0: detected capacity change from 0 to 65536 [ 804.835431][T11173] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 805.110942][T11173] XFS (loop0): Ending clean mount [ 805.153781][T11173] XFS (loop0): Quotacheck needed: Please wait. [ 805.499503][T11173] XFS (loop0): Quotacheck: Done. [ 806.355870][T11190] loop1: detected capacity change from 0 to 32768 [ 806.401584][T11190] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 806.429006][T11190] overlayfs: missing 'lowerdir' [ 806.617671][T11199] loop3: detected capacity change from 0 to 1024 [ 806.670663][T11199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.701202][T11194] loop2: detected capacity change from 0 to 32768 [ 806.725164][T11194] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 807.662924][T11172] XFS (loop0): User initiated shutdown received. [ 807.669360][T11172] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 807.683165][T11172] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 807.807964][ T5792] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 808.084450][ T5784] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 808.104703][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.837060][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.843689][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.282126][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 810.476784][T11214] loop3: detected capacity change from 0 to 32768 [ 810.573866][T11214] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 810.592114][T11226] loop0: detected capacity change from 0 to 1024 [ 810.683276][T11226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.739187][ T5880] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 811.051802][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.063548][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.077419][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 811.091524][ T5880] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 811.100734][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.283219][T11214] overlayfs: missing 'lowerdir' [ 811.283605][ T5880] usb 3-1: config 0 descriptor?? [ 811.548242][T11240] loop1: detected capacity change from 0 to 128 [ 811.577570][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.595192][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 813.193647][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.220086][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.277217][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 813.339962][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 813.357632][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.385917][ T8] usb 1-1: config 0 descriptor?? [ 814.282532][ T5880] usbhid 3-1:0.0: can't add hid device: -71 [ 814.288585][ T5880] usbhid: probe of 3-1:0.0 failed with error -71 [ 814.367105][ T2959] kworker/u4:10: attempt to access beyond end of device [ 814.367105][ T2959] loop1: rw=1048577, sector=145, nr_sectors = 896 limit=128 [ 814.405756][ T5880] usb 3-1: USB disconnect, device number 20 [ 815.529632][T11253] input: syz1 as /devices/virtual/input/input46 [ 815.829457][T11254] netlink: 'syz.2.1224': attribute type 4 has an invalid length. [ 815.838970][T11254] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1224'. [ 816.060380][ T5790] ocfs2: Unmounting device (7,3) on (node local) [ 816.381702][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 816.421764][ T8] usbhid: probe of 1-1:0.0 failed with error -71 [ 816.485023][ T8] usb 1-1: USB disconnect, device number 20 [ 817.982553][ T5534] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 818.304006][ T5534] usb 1-1: Using ep0 maxpacket: 8 [ 818.321021][ T5534] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.505429][ T5534] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 818.531520][ T5534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.544680][ T5534] usb 1-1: Product: syz [ 818.548972][ T5534] usb 1-1: Manufacturer: syz [ 818.561815][ T5534] usb 1-1: SerialNumber: syz [ 818.571576][ T5534] usb 1-1: config 0 descriptor?? [ 818.606399][ T5534] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 818.624735][ T5534] usb 1-1: selecting invalid altsetting 1 [ 818.849616][T11263] loop3: detected capacity change from 0 to 32768 [ 819.159458][ T5534] gspca_stk014: reg_r err -110 [ 819.802091][ T5534] stk014: probe of 1-1:0.0 failed with error -110 [ 819.841131][T11263] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 820.182185][T11263] overlayfs: missing 'lowerdir' [ 820.307252][ T28] usb 1-1: USB disconnect, device number 21 [ 821.916283][T11298] input: syz1 as /devices/virtual/input/input47 [ 822.025752][ T5790] ocfs2: Unmounting device (7,3) on (node local) [ 822.194448][T11298] netlink: 'syz.0.1236': attribute type 4 has an invalid length. [ 822.209511][T11298] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1236'. [ 824.380457][T11318] loop2: detected capacity change from 0 to 1024 [ 824.639639][T11327] tmpfs: Bad value for 'mpol' [ 825.342586][T11318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.668924][T11333] loop1: detected capacity change from 0 to 128 [ 827.400184][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.421180][T10227] kworker/u4:1: attempt to access beyond end of device [ 827.421180][T10227] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 827.730605][T11331] loop3: detected capacity change from 0 to 32768 [ 828.562882][T11331] JBD2: journal reset failed [ 828.596502][T11331] (syz.3.1245,11331,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 828.665119][T11331] (syz.3.1245,11331,0):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -4 [ 828.703053][T11344] loop2: detected capacity change from 0 to 1024 [ 828.822253][T11344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.527768][T11357] input: syz1 as /devices/virtual/input/input48 [ 831.702684][T11357] netlink: 'syz.1.1251': attribute type 4 has an invalid length. [ 831.716636][T11357] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1251'. [ 831.735836][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.020603][T11368] tmpfs: Bad value for 'mpol' [ 833.054925][T11372] loop3: detected capacity change from 0 to 128 [ 834.733744][ T11] kworker/u4:0: attempt to access beyond end of device [ 834.733744][ T11] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 834.797883][T11367] loop2: detected capacity change from 0 to 32768 [ 834.816792][T11367] XFS: ikeep mount option is deprecated. [ 834.836411][T11367] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 834.982473][ T5880] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 835.011377][T11367] XFS (loop2): Ending clean mount [ 835.036752][T11367] XFS (loop2): Quotacheck needed: Please wait. [ 835.096058][T11367] XFS (loop2): Quotacheck: Done. [ 835.192849][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 835.258368][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.322614][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 835.349225][ T5791] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 835.423577][ T5880] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 835.516092][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.762418][ T5880] usb 2-1: config 0 descriptor?? [ 835.925266][ T5880] hub 2-1:0.0: bad descriptor, ignoring hub [ 835.968919][ T5880] hub: probe of 2-1:0.0 failed with error -5 [ 836.097540][ T5880] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 837.199833][T11399] tmpfs: Bad value for 'mpol' [ 837.502716][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 837.842444][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 837.858675][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.923586][ T8] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 837.946125][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.954812][T10341] usb 2-1: USB disconnect, device number 11 [ 837.962496][ T8] usb 3-1: Product: syz [ 838.003099][ T8] usb 3-1: Manufacturer: syz [ 838.007758][ T8] usb 3-1: SerialNumber: syz [ 839.095784][ T8] usb 3-1: config 0 descriptor?? [ 839.133071][ T8] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 839.139271][ T8] usb 3-1: selecting invalid altsetting 1 [ 839.619576][T11411] tmpfs: Bad value for 'mpol' [ 839.683039][ T8] gspca_stk014: reg_r err -110 [ 839.688344][ T8] stk014: probe of 3-1:0.0 failed with error -110 [ 840.164399][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 840.382405][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 840.405911][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.439255][ T8] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 840.459418][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.467990][ T8] usb 2-1: Product: syz [ 840.475887][ T8] usb 2-1: Manufacturer: syz [ 840.480607][ T8] usb 2-1: SerialNumber: syz [ 840.543871][T10341] usb 3-1: USB disconnect, device number 21 [ 840.571245][ T8] usb 2-1: config 0 descriptor?? [ 840.595081][ T8] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 840.613540][ T8] usb 2-1: selecting invalid altsetting 1 [ 840.663091][T11414] input: syz1 as /devices/virtual/input/input49 [ 840.838526][T11414] netlink: 'syz.2.1265': attribute type 4 has an invalid length. [ 840.873224][T11414] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1265'. [ 841.081091][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 841.099513][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 841.109670][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 841.118441][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 841.131267][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 841.140675][ T8] gspca_stk014: reg_r err -110 [ 841.150142][ T8] stk014: probe of 2-1:0.0 failed with error -110 [ 841.157215][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 841.397756][T10227] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.637975][T10227] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.729260][T10227] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.788706][T11417] chnl_net:caif_netlink_parms(): no params data found [ 841.835458][T10227] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.862558][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 841.937995][T11417] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.947478][T11417] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.960408][T11417] bridge_slave_0: entered allmulticast mode [ 841.969011][T11417] bridge_slave_0: entered promiscuous mode [ 841.988999][T11417] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.006400][T11417] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.014225][T11417] bridge_slave_1: entered allmulticast mode [ 842.021600][T11417] bridge_slave_1: entered promiscuous mode [ 842.353375][T11417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.482555][ T5880] usb 2-1: USB disconnect, device number 12 [ 842.663386][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.739885][T11417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.027539][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.037549][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 843.052388][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 843.067219][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.080479][ T8] usb 4-1: config 0 descriptor?? [ 843.178770][T11417] team0: Port device team_slave_0 added [ 843.233126][ T5803] Bluetooth: hci1: command tx timeout [ 843.248362][T11417] team0: Port device team_slave_1 added [ 843.412634][T11417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.419768][T11417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.459201][T11417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.662804][T11417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.690140][T11417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.721790][T11417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.868883][T11434] loop2: detected capacity change from 0 to 32768 [ 844.886374][T11434] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 845.312650][ T5803] Bluetooth: hci1: command tx timeout [ 845.454936][ T5802] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 846.742901][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 847.392473][ T5803] Bluetooth: hci1: command tx timeout [ 847.736270][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 848.653954][T11458] loop3: detected capacity change from 0 to 128 [ 848.721858][ T8] usb 4-1: USB disconnect, device number 16 [ 849.472376][ T5803] Bluetooth: hci1: command tx timeout [ 850.470713][T11417] hsr_slave_0: entered promiscuous mode [ 850.533684][T11417] hsr_slave_1: entered promiscuous mode [ 850.550559][ T2993] kworker/u4:11: attempt to access beyond end of device [ 850.550559][ T2993] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 850.569451][T11417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 850.850885][T11417] Cannot create hsr debugfs directory [ 852.052864][T11217] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 852.262524][T11217] usb 4-1: Using ep0 maxpacket: 32 [ 852.263294][T10227] IPVS: stopping master sync thread 7702 ... [ 852.269671][T11217] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 852.496393][T11217] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 852.538324][T11217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.567805][T11217] usb 4-1: config 0 descriptor?? [ 852.629272][T11217] hub 4-1:0.0: bad descriptor, ignoring hub [ 852.646087][T11217] hub: probe of 4-1:0.0 failed with error -5 [ 852.719267][T11217] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 853.719305][T11417] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 853.816999][T10227] hsr_slave_0: left promiscuous mode [ 853.823483][T10227] hsr_slave_1: left promiscuous mode [ 853.841020][T10227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.886922][T10227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.919191][T10227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.951984][T10227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.979213][T10227] bridge_slave_1: left allmulticast mode [ 854.006924][T10227] bridge_slave_1: left promiscuous mode [ 854.042038][T10227] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.084443][T10227] bridge_slave_0: left allmulticast mode [ 854.098224][T10227] bridge_slave_0: left promiscuous mode [ 854.118425][T10227] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.158623][T10227] veth1_macvtap: left promiscuous mode [ 854.168040][T10227] veth0_macvtap: left promiscuous mode [ 854.179916][T10227] veth1_vlan: left promiscuous mode [ 854.194848][T10227] veth0_vlan: left promiscuous mode [ 854.377990][T10341] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 854.564415][T10341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.577788][T10341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.599577][T10341] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 854.613362][T10341] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 854.622811][T10341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.644593][T10341] usb 3-1: config 0 descriptor?? [ 854.932770][ T28] usb 4-1: USB disconnect, device number 17 [ 857.203655][T10227] team0 (unregistering): Port device team_slave_1 removed [ 857.295983][T10227] team0 (unregistering): Port device team_slave_0 removed [ 857.478758][T10227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.787479][T10341] usbhid 3-1:0.0: can't add hid device: -71 [ 858.457498][T10341] usbhid: probe of 3-1:0.0 failed with error -71 [ 859.438959][T10341] usb 3-1: USB disconnect, device number 22 [ 859.521639][T10227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.591183][T11536] loop1: detected capacity change from 0 to 65536 [ 860.730694][T11536] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 861.533569][T11536] XFS (loop1): Ending clean mount [ 861.543725][T11536] XFS (loop1): Quotacheck needed: Please wait. [ 861.602320][T11536] XFS (loop1): Quotacheck: Done. [ 861.914130][T10227] bond0 (unregistering): Released all slaves [ 862.007112][T11417] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 862.078331][T11542] netlink: 'syz.2.1290': attribute type 10 has an invalid length. [ 862.100608][T11417] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 862.115067][T11417] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 862.792445][T11535] XFS (loop1): User initiated shutdown received. [ 862.799036][T11535] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 862.812931][T11535] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 862.923547][ T5789] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 862.985542][T11417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.263540][T11417] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.367021][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.375005][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.428817][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.436040][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.351092][T11417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.793419][T11579] loop1: detected capacity change from 0 to 32768 [ 864.847642][T11579] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 864.890623][T11579] overlayfs: missing 'lowerdir' [ 865.265071][T11417] veth0_vlan: entered promiscuous mode [ 865.412934][T11417] veth1_vlan: entered promiscuous mode [ 865.494232][T11417] veth0_macvtap: entered promiscuous mode [ 865.559385][T11417] veth1_macvtap: entered promiscuous mode [ 865.610447][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.634366][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.646173][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.661941][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.675156][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.686601][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.701477][T11417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.913760][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.942548][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.964471][T11611] loop3: detected capacity change from 0 to 128 [ 865.985288][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.910868][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.940291][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.967884][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.990254][T11417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.011779][T11417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.042321][T11417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.118612][T11417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.199456][T11417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.377615][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.482227][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.919623][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.960985][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.964598][ T42] kworker/u4:2: attempt to access beyond end of device [ 868.964598][ T42] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 869.102694][T11626] input: syz1 as /devices/virtual/input/input50 [ 869.371049][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 869.434101][T11634] tmpfs: Bad value for 'mpol' [ 870.123283][T11626] netlink: 'syz.2.1298': attribute type 4 has an invalid length. [ 870.176638][T11626] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1298'. [ 870.275716][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.284821][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.659885][T11648] loop1: detected capacity change from 0 to 1024 [ 871.902681][T11217] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 872.473152][T11648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.605802][T11217] usb 5-1: Using ep0 maxpacket: 32 [ 872.749814][T11217] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 872.781586][T11217] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 872.794946][T11217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.814638][T11669] loop3: detected capacity change from 0 to 65536 [ 873.998135][T11217] usb 5-1: config 0 descriptor?? [ 874.031245][T11217] hub 5-1:0.0: bad descriptor, ignoring hub [ 874.051006][T11217] hub: probe of 5-1:0.0 failed with error -5 [ 874.069461][T11217] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 874.207946][T11669] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 874.289970][T11669] XFS (loop3): Ending clean mount [ 874.299388][T11669] XFS (loop3): Quotacheck needed: Please wait. [ 874.381798][T11669] XFS (loop3): Quotacheck: Done. [ 874.489491][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.547394][T11665] XFS (loop3): User initiated shutdown received. [ 874.554889][T11665] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 874.568736][T11665] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 874.781817][ T5790] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 875.565332][ T5860] usb 5-1: USB disconnect, device number 2 [ 875.925691][T11703] tmpfs: Bad value for 'mpol' [ 877.147243][T11710] input: syz1 as /devices/virtual/input/input51 [ 877.432522][T11710] netlink: 'syz.4.1312': attribute type 4 has an invalid length. [ 877.440265][T11710] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1312'. [ 880.371489][T11733] tmpfs: Bad value for 'mpol' [ 880.537244][T11736] loop4: detected capacity change from 0 to 128 [ 880.652403][ T5860] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 882.084588][T11743] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 882.172425][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 882.202944][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.223567][ T5860] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 882.224211][T11516] kworker/u4:3: attempt to access beyond end of device [ 882.224211][T11516] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 882.242429][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.268148][ T5860] usb 2-1: Product: syz [ 882.308099][ T5860] usb 2-1: Manufacturer: syz [ 882.322456][ T5860] usb 2-1: SerialNumber: syz [ 882.339246][ T5860] usb 2-1: config 0 descriptor?? [ 882.361727][ T5860] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 882.391214][ T5860] usb 2-1: selecting invalid altsetting 1 [ 882.513517][T11757] input: syz1 as /devices/virtual/input/input52 [ 883.496871][ T5860] gspca_stk014: reg_r err -110 [ 883.509515][ T5860] stk014: probe of 2-1:0.0 failed with error -110 [ 883.629203][T11217] usb 2-1: USB disconnect, device number 13 [ 884.151550][T11757] netlink: 'syz.2.1322': attribute type 4 has an invalid length. [ 884.203198][T11757] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1322'. [ 884.362392][T11217] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 885.208859][T11776] netlink: 'syz.1.1324': attribute type 10 has an invalid length. [ 885.290502][T11217] usb 5-1: Using ep0 maxpacket: 8 [ 885.352312][T11217] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.392784][T11217] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 885.411539][T11217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.434761][T11217] usb 5-1: Product: syz [ 885.439164][T11217] usb 5-1: Manufacturer: syz [ 885.446196][T11217] usb 5-1: SerialNumber: syz [ 885.456486][T11217] usb 5-1: config 0 descriptor?? [ 885.465107][T11217] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 885.480582][T11217] usb 5-1: selecting invalid altsetting 1 [ 885.522376][ T5534] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 885.757181][ T5534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.789352][ T5534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.827631][ T5534] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 885.994209][T11217] gspca_stk014: reg_r err -110 [ 886.039213][T11217] stk014: probe of 5-1:0.0 failed with error -110 [ 886.904212][ T5860] usb 5-1: USB disconnect, device number 3 [ 886.928703][ T5534] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 886.938039][ T5534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.963316][ T5534] usb 4-1: config 0 descriptor?? [ 887.574638][T11788] loop1: detected capacity change from 0 to 32768 [ 887.632462][T11788] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 887.926256][T11788] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 889.123436][T11788] BTRFS info (device loop1): metadata ratio 2 [ 889.225828][T11788] BTRFS info (device loop1): force zlib compression, level 3 [ 889.281103][T11788] BTRFS info (device loop1): use zlib compression, level 3 [ 889.288657][T11788] BTRFS info (device loop1): enabling auto defrag [ 889.296345][T11788] BTRFS info (device loop1): max_inline at 0 [ 889.312555][T11788] BTRFS info (device loop1): using free space tree [ 889.328064][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 889.345528][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 889.357114][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 889.371195][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 889.383174][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 889.393453][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 889.413824][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 889.426026][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 889.436756][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 889.448797][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 889.459695][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 889.493272][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 889.533281][T11788] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 889.603514][T11788] BTRFS error (device loop1): open_ctree failed: -12 [ 889.623607][ T5802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (5802) [ 889.937798][ T5534] usbhid 4-1:0.0: can't add hid device: -71 [ 889.944409][ T5534] usbhid: probe of 4-1:0.0 failed with error -71 [ 889.955778][ T5534] usb 4-1: USB disconnect, device number 18 [ 890.049527][T11827] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 890.594790][T11836] input: syz1 as /devices/virtual/input/input53 [ 891.267116][T11836] netlink: 'syz.4.1331': attribute type 4 has an invalid length. [ 891.275005][T11836] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1331'. [ 896.555649][T11877] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 909.842907][ T2959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.975005][ T2959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.566658][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 911.579624][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 911.673045][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 911.686568][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 911.697871][ T5804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 911.710217][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 911.782660][ T28] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 912.052464][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 912.086832][ T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.187047][ T28] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 912.208521][ T2959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.219124][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.229767][ T28] usb 3-1: Product: syz [ 912.234065][ T28] usb 3-1: Manufacturer: syz [ 912.238964][ T28] usb 3-1: SerialNumber: syz [ 912.283473][ T28] usb 3-1: config 0 descriptor?? [ 912.343636][ T28] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 912.355811][ T28] usb 3-1: selecting invalid altsetting 1 [ 912.495933][ T28] gspca_stk014: reg_r err -71 [ 912.514203][ T28] stk014: probe of 3-1:0.0 failed with error -71 [ 912.571912][ T28] usb 3-1: USB disconnect, device number 23 [ 912.804220][ T2959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.952645][ T5804] Bluetooth: hci2: command tx timeout [ 915.365620][T11981] chnl_net:caif_netlink_parms(): no params data found [ 915.972067][T12035] loop3: detected capacity change from 0 to 65536 [ 916.045533][ T5804] Bluetooth: hci2: command tx timeout [ 916.081677][T12035] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 916.130839][T12035] XFS (loop3): Ending clean mount [ 916.178823][T12035] XFS (loop3): Quotacheck needed: Please wait. [ 916.261929][T12035] XFS (loop3): Quotacheck: Done. [ 916.381211][T12035] XFS (loop3): User initiated shutdown received. [ 916.387802][T12035] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 916.401751][T12035] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 916.436662][T12051] loop4: detected capacity change from 0 to 128 [ 916.532036][T11981] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.576279][ T5790] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 916.587081][T11981] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.213186][T11981] bridge_slave_0: entered allmulticast mode [ 918.109781][T11981] bridge_slave_0: entered promiscuous mode [ 918.195403][ T5804] Bluetooth: hci2: command tx timeout [ 918.326829][T11981] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.338655][T11981] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.352129][T11981] bridge_slave_1: entered allmulticast mode [ 918.359893][T11981] bridge_slave_1: entered promiscuous mode [ 918.414505][ T1131] kworker/u4:6: attempt to access beyond end of device [ 918.414505][ T1131] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 919.675189][T11981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.723778][T11981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.980493][T12067] loop4: detected capacity change from 0 to 65536 [ 920.060068][T12067] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 920.118101][T12067] XFS (loop4): Ending clean mount [ 920.127553][T12067] XFS (loop4): Quotacheck needed: Please wait. [ 920.167088][T11981] team0: Port device team_slave_0 added [ 920.223503][T12067] XFS (loop4): Quotacheck: Done. [ 920.226084][T11981] team0: Port device team_slave_1 added [ 920.272004][ T2959] bridge0: port 3(gretap0) entered disabled state [ 920.280665][ T5804] Bluetooth: hci2: command tx timeout [ 920.765748][ T27] audit: type=1800 audit(1755171639.667:213): pid=12065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1374" name="file1" dev="loop4" ino=70 res=0 errno=0 [ 920.878325][ T2959] gretap0 (unregistering): left allmulticast mode [ 920.884946][ T2959] gretap0 (unregistering): left promiscuous mode [ 920.891463][ T2959] bridge0: port 3(gretap0) entered disabled state [ 920.974253][T11981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.991438][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.079146][T11981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.601757][T11981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.627699][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.666640][T11981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.782692][ T2959] IPVS: stopping master sync thread 5981 ... [ 921.922049][T12094] loop2: detected capacity change from 0 to 128 [ 922.124838][T12097] tmpfs: Bad value for 'mpol' [ 923.282576][T12067] XFS (loop4): User initiated shutdown received. [ 923.289155][T12067] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 923.304016][T12067] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 923.477216][T11417] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 923.578973][T11981] hsr_slave_0: entered promiscuous mode [ 923.670116][T11981] hsr_slave_1: entered promiscuous mode [ 924.285173][T11981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 924.292866][T11981] Cannot create hsr debugfs directory [ 924.493856][ T1131] kworker/u4:6: attempt to access beyond end of device [ 924.493856][ T1131] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 924.546530][ T5880] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 924.752370][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 924.777700][T12116] input: syz1 as /devices/virtual/input/input54 [ 924.781716][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.816168][ T2959] hsr_slave_0: left promiscuous mode [ 924.824508][ T5880] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 924.834204][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.842459][ T5880] usb 4-1: Product: syz [ 924.846930][ T5880] usb 4-1: Manufacturer: syz [ 924.851549][ T5880] usb 4-1: SerialNumber: syz [ 924.859691][ T2959] hsr_slave_1: left promiscuous mode [ 924.873189][ T5880] usb 4-1: config 0 descriptor?? [ 924.882158][ T5880] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 924.889423][ T5880] usb 4-1: selecting invalid altsetting 1 [ 924.918415][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.937627][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.949959][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.958425][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.975076][ T2959] bridge_slave_1: left allmulticast mode [ 925.013173][ T2959] bridge_slave_1: left promiscuous mode [ 925.024681][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.048733][ T2959] bridge_slave_0: left allmulticast mode [ 925.060386][ T2959] bridge_slave_0: left promiscuous mode [ 925.077480][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.091880][ T5880] gspca_stk014: reg_r err -71 [ 925.106311][ T5880] stk014: probe of 4-1:0.0 failed with error -71 [ 925.128987][ T5880] usb 4-1: USB disconnect, device number 19 [ 925.222299][ T2959] veth1_macvtap: left promiscuous mode [ 925.230936][ T2959] veth0_macvtap: left promiscuous mode [ 925.237438][ T2959] veth1_vlan: left promiscuous mode [ 925.246823][ T2959] veth0_vlan: left promiscuous mode [ 925.758392][T12125] loop3: detected capacity change from 0 to 128 [ 927.590087][ T11] kworker/u4:0: attempt to access beyond end of device [ 927.590087][ T11] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 928.877516][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 928.918766][T12143] loop4: detected capacity change from 0 to 1024 [ 928.986159][T12143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 929.036440][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 929.174757][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.273207][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.398758][T11417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.857435][ T2959] bond0 (unregistering): Released all slaves [ 930.972221][T12120] netlink: 'syz.2.1381': attribute type 4 has an invalid length. [ 930.981109][T12120] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1381'. [ 931.007159][T12150] netlink: 'syz.4.1388': attribute type 10 has an invalid length. [ 931.728792][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.735260][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.642508][ T55] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 932.970614][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.066424][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.185543][ T55] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 933.330330][ T55] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 933.349548][T11981] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 933.386643][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.436100][ T55] usb 3-1: config 0 descriptor?? [ 933.531268][T11981] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 933.558875][T11981] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 933.606384][T11981] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 933.703024][ T5534] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 933.912571][ T5534] usb 4-1: Using ep0 maxpacket: 32 [ 934.000131][ T5534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.171604][ T5534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.191255][ T5534] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 934.200849][ T5534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.220707][ T5534] usb 4-1: config 0 descriptor?? [ 934.246090][ T5534] hub 4-1:0.0: USB hub found [ 934.924901][ T5534] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 934.994161][T11981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.114259][T11981] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.269241][T11516] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.276515][T11516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.533597][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.540838][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.831321][ T5534] usbhid 4-1:0.0: can't add hid device: -71 [ 936.042632][ T5534] usbhid: probe of 4-1:0.0 failed with error -71 [ 936.062863][ T55] usbhid 3-1:0.0: can't add hid device: -71 [ 936.068914][ T55] usbhid: probe of 3-1:0.0 failed with error -71 [ 936.085219][ T55] usb 3-1: USB disconnect, device number 24 [ 936.120836][ T5534] usb 4-1: USB disconnect, device number 20 [ 937.140641][ T5534] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 937.815123][ T5534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.833766][ T5534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.877249][ T5534] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 937.891909][T11981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.025536][T12221] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 939.462457][T12231] loop4: detected capacity change from 0 to 65536 [ 939.551780][ T5534] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 939.562128][ T5534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.572907][ T5534] usb 4-1: config 0 descriptor?? [ 939.582648][ T5534] usb 4-1: can't set config #0, error -71 [ 939.603483][ T5534] usb 4-1: USB disconnect, device number 21 [ 939.865111][T12231] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 940.366279][T12231] XFS (loop4): Ending clean mount [ 940.386274][T12231] XFS (loop4): Quotacheck needed: Please wait. [ 940.458975][T12231] XFS (loop4): Quotacheck: Done. [ 941.498294][T11981] veth0_vlan: entered promiscuous mode [ 941.564242][T11981] veth1_vlan: entered promiscuous mode [ 941.707814][T11981] veth0_macvtap: entered promiscuous mode [ 941.719357][T11981] veth1_macvtap: entered promiscuous mode [ 941.796884][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.846804][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.882852][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.910539][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.930737][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.960925][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.993052][T11981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.012575][T11217] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 942.020778][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.047058][T12231] XFS (loop4): User initiated shutdown received. [ 942.053755][T12231] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 942.067765][T12231] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 942.107006][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.117372][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.139914][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.154621][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.166719][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.180377][T11417] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 942.234098][T11981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.282955][T11217] usb 3-1: Using ep0 maxpacket: 8 [ 942.291029][T11981] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.305645][T11217] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.322105][T11981] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.337784][T11981] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.348664][T11217] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 942.367025][T11217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.375330][T11981] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.384535][T11217] usb 3-1: Product: syz [ 942.400696][T12273] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 942.461845][T11217] usb 3-1: Manufacturer: syz [ 942.467140][T11217] usb 3-1: SerialNumber: syz [ 942.490428][T11217] usb 3-1: config 0 descriptor?? [ 942.523670][T11217] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 942.542111][T11217] usb 3-1: selecting invalid altsetting 1 [ 942.728576][T11217] gspca_stk014: reg_r err -71 [ 942.746965][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.759264][T11217] stk014: probe of 3-1:0.0 failed with error -71 [ 942.827784][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.847468][T11217] usb 3-1: USB disconnect, device number 25 [ 942.930468][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.960539][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.193689][T12294] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 948.145161][ T5534] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 948.433468][T12311] loop5: detected capacity change from 0 to 32768 [ 948.438985][ T5534] usb 5-1: Using ep0 maxpacket: 32 [ 948.739382][T12311] read_mapping_page failed! [ 948.761343][ T5534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.813509][T12311] jfs_mount: Failed to read AGGREGATE_I [ 948.819116][T12311] Mount JFS Failure: -5 [ 948.876533][ T5534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.890595][T12311] jfs_mount failed w/return code = -5 [ 948.897686][ T5534] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 948.916439][ T5534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.947257][ T5534] usb 5-1: config 0 descriptor?? [ 949.017480][ T5534] hub 5-1:0.0: USB hub found [ 949.234095][ T5534] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 949.450907][ T5534] usbhid 5-1:0.0: can't add hid device: -71 [ 949.458641][ T5534] usbhid: probe of 5-1:0.0 failed with error -71 [ 949.547167][ T5534] usb 5-1: USB disconnect, device number 4 [ 949.574215][T12349] loop3: detected capacity change from 0 to 128 [ 951.419886][ T42] kworker/u4:2: attempt to access beyond end of device [ 951.419886][ T42] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 955.305620][T12402] netlink: 'syz.4.1429': attribute type 10 has an invalid length. [ 957.591390][T12422] input: syz1 as /devices/virtual/input/input55 [ 957.840783][T12427] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 958.166331][T12422] netlink: 'syz.2.1434': attribute type 4 has an invalid length. [ 958.202327][T12422] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1434'. [ 959.047241][T12414] loop4: detected capacity change from 0 to 32768 [ 959.440983][ T27] audit: type=1800 audit(1755171678.577:214): pid=12414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1431" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 962.335449][T12466] loop4: detected capacity change from 0 to 32768 [ 962.453673][T12466] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 962.530026][T12466] overlayfs: missing 'lowerdir' [ 964.574543][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 965.407800][T12496] loop2: detected capacity change from 0 to 1024 [ 965.572874][T11417] ocfs2: Unmounting device (7,4) on (node local) [ 965.738091][T12496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.175769][T12505] loop5: detected capacity change from 0 to 65536 [ 966.205025][T12505] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 966.234612][T12508] loop3: detected capacity change from 0 to 128 [ 966.749782][T12505] XFS (loop5): Ending clean mount [ 966.839648][T12505] XFS (loop5): Quotacheck needed: Please wait. [ 967.916316][T12505] XFS (loop5): Quotacheck: Done. [ 968.031583][ T2993] kworker/u4:11: attempt to access beyond end of device [ 968.031583][ T2993] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 968.120402][T12534] loop4: detected capacity change from 0 to 1024 [ 968.185692][T12534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.836094][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.092508][T12505] XFS (loop5): User initiated shutdown received. [ 969.099101][T12505] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 969.113494][T12505] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 969.183638][T11981] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 969.862739][T11417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.549947][T12561] loop4: detected capacity change from 0 to 65536 [ 971.622587][T12561] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 971.661679][T12545] loop2: detected capacity change from 0 to 32768 [ 971.692642][T12561] XFS (loop4): Ending clean mount [ 971.702613][T12561] XFS (loop4): Quotacheck needed: Please wait. [ 971.741058][T12561] XFS (loop4): Quotacheck: Done. [ 972.051975][ T27] audit: type=1800 audit(1755171691.197:215): pid=12545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1447" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 972.690198][T12583] loop3: detected capacity change from 0 to 128 [ 973.662826][T12561] XFS (loop4): User initiated shutdown received. [ 973.670496][T12561] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 973.685042][T12561] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 974.096657][T11417] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 974.590783][ T11] kworker/u4:0: attempt to access beyond end of device [ 974.590783][ T11] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 975.193624][T12578] loop5: detected capacity change from 0 to 32768 [ 976.502383][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 976.589424][T12615] netlink: 'syz.3.1458': attribute type 10 has an invalid length. [ 976.722329][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 977.099998][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.124356][ T9] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 977.151045][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.160538][ T9] usb 6-1: Product: syz [ 977.164860][ T9] usb 6-1: Manufacturer: syz [ 977.169527][ T9] usb 6-1: SerialNumber: syz [ 977.178738][ T9] usb 6-1: config 0 descriptor?? [ 977.187088][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 977.201806][ T9] usb 6-1: selecting invalid altsetting 1 [ 977.422983][ T9] gspca_stk014: reg_r err -71 [ 977.427746][ T9] stk014: probe of 6-1:0.0 failed with error -71 [ 977.444801][ T9] usb 6-1: USB disconnect, device number 2 [ 980.887764][T12669] input: syz1 as /devices/virtual/input/input56 [ 981.147861][T12669] netlink: 'syz.2.1464': attribute type 4 has an invalid length. [ 981.156975][T12669] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1464'. [ 983.417976][T12703] tmpfs: Bad value for 'mpol' [ 983.803007][ T8695] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 984.013272][ T8695] usb 3-1: Using ep0 maxpacket: 8 [ 984.037230][ T8695] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.095563][ T8695] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 984.118738][ T8695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.152657][ T8695] usb 3-1: Product: syz [ 984.171423][ T8695] usb 3-1: Manufacturer: syz [ 984.185418][ T8695] usb 3-1: SerialNumber: syz [ 984.207758][ T8695] usb 3-1: config 0 descriptor?? [ 984.233740][ T8695] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 984.257981][ T8695] usb 3-1: selecting invalid altsetting 1 [ 984.782480][ T8695] gspca_stk014: reg_r err -110 [ 984.787419][ T8695] stk014: probe of 3-1:0.0 failed with error -110 [ 986.180990][ T5859] usb 3-1: USB disconnect, device number 26 [ 989.811855][T12746] input: syz1 as /devices/virtual/input/input57 [ 990.123338][T12746] netlink: 'syz.2.1479': attribute type 4 has an invalid length. [ 990.144892][T12746] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1479'. [ 990.953466][T12756] loop5: detected capacity change from 0 to 32768 [ 990.960945][T12756] XFS: ikeep mount option is deprecated. [ 992.060069][T12756] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 992.520224][T12756] XFS (loop5): Ending clean mount [ 992.578611][T12756] XFS (loop5): Quotacheck needed: Please wait. [ 993.171525][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.178350][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.632977][T12756] XFS (loop5): Quotacheck: Done. [ 993.770652][T11981] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 994.054937][T12807] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 995.401405][T12818] netlink: 'syz.4.1490': attribute type 10 has an invalid length. [ 996.273726][T12821] tmpfs: Bad value for 'mpol' [ 996.301287][T12826] loop4: detected capacity change from 0 to 128 [ 996.656981][ T28] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 998.033156][ T2933] kworker/u4:8: attempt to access beyond end of device [ 998.033156][ T2933] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 998.082325][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 998.097752][ T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.112555][ T28] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 998.136259][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.152526][ T28] usb 4-1: Product: syz [ 998.165403][ T28] usb 4-1: Manufacturer: syz [ 998.170852][ T28] usb 4-1: SerialNumber: syz [ 998.181597][ T28] usb 4-1: config 0 descriptor?? [ 998.199824][ T28] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 998.212639][ T28] usb 4-1: selecting invalid altsetting 1 [ 998.403901][ T28] gspca_stk014: reg_r err -71 [ 998.410256][ T28] stk014: probe of 4-1:0.0 failed with error -71 [ 998.437553][ T28] usb 4-1: USB disconnect, device number 22 [ 1003.845179][T12886] input: syz1 as /devices/virtual/input/input58 [ 1004.808996][T12886] netlink: 'syz.5.1503': attribute type 4 has an invalid length. [ 1004.838533][T12886] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1503'. [ 1008.184094][T12910] loop5: detected capacity change from 0 to 128 [ 1010.365079][ T2959] kworker/u4:10: attempt to access beyond end of device [ 1010.365079][ T2959] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1011.688274][T11217] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1011.958897][T12932] loop3: detected capacity change from 0 to 65536 [ 1012.088938][T12940] tmpfs: Bad value for 'mpol' [ 1012.093927][T11217] usb 5-1: Using ep0 maxpacket: 32 [ 1012.115468][T11217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.129540][T12932] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1012.132345][T11217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.158964][T11217] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1012.172351][T11217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.189895][T12932] XFS (loop3): Ending clean mount [ 1012.196558][T11217] usb 5-1: config 0 descriptor?? [ 1012.204251][T11217] hub 5-1:0.0: USB hub found [ 1012.206304][T12932] XFS (loop3): Quotacheck needed: Please wait. [ 1012.291735][T12932] XFS (loop3): Quotacheck: Done. [ 1012.377382][ T28] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1012.389421][T12956] loop5: detected capacity change from 0 to 1024 [ 1012.454259][T12956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1012.602336][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 1012.616740][ T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.630617][ T28] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1012.640263][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.651132][T11217] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 1012.660277][ T28] usb 3-1: Product: syz [ 1012.666028][ T28] usb 3-1: Manufacturer: syz [ 1012.670951][ T28] usb 3-1: SerialNumber: syz [ 1012.686624][ T28] usb 3-1: config 0 descriptor?? [ 1012.714911][ T28] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1012.721826][ T28] usb 3-1: selecting invalid altsetting 1 [ 1012.854962][T11217] usbhid 5-1:0.0: can't add hid device: -71 [ 1012.861105][T11217] usbhid: probe of 5-1:0.0 failed with error -71 [ 1012.908952][ T28] gspca_stk014: reg_r err -71 [ 1012.925036][T11217] usb 5-1: USB disconnect, device number 5 [ 1012.934313][ T28] stk014: probe of 3-1:0.0 failed with error -71 [ 1012.971792][ T28] usb 3-1: USB disconnect, device number 27 [ 1013.189813][T11981] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.401272][T12932] XFS (loop3): User initiated shutdown received. [ 1013.408521][T12932] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 1013.422422][T12932] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 1013.548625][ T5790] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1013.992462][T12985] input: syz1 as /devices/virtual/input/input59 [ 1014.187336][T12985] netlink: 'syz.4.1520': attribute type 4 has an invalid length. [ 1014.195661][T12985] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1520'. [ 1014.946208][T12973] loop5: detected capacity change from 0 to 32768 [ 1015.016243][T12973] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1015.180376][T13004] overlayfs: missing 'lowerdir' [ 1015.488273][T12980] loop2: detected capacity change from 0 to 32768 [ 1015.585197][ T27] audit: type=1800 audit(1755171734.747:216): pid=12980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1518" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 1016.206869][T11981] ocfs2: Unmounting device (7,5) on (node local) [ 1016.931135][T13030] loop2: detected capacity change from 0 to 128 [ 1018.760624][T13028] loop5: detected capacity change from 0 to 32768 [ 1018.819302][T13028] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1018.850669][ T2933] kworker/u4:8: attempt to access beyond end of device [ 1018.850669][ T2933] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1019.001634][T13028] overlayfs: missing 'lowerdir' [ 1019.840951][T13058] loop2: detected capacity change from 0 to 1024 [ 1019.897808][T13060] loop3: detected capacity change from 0 to 128 [ 1019.960452][T13058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.770698][ T1131] kworker/u4:6: attempt to access beyond end of device [ 1022.770698][ T1131] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1022.817353][T11981] ocfs2: Unmounting device (7,5) on (node local) [ 1025.306701][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.074186][T13114] input: syz1 as /devices/virtual/input/input60 [ 1031.245093][T13105] loop4: detected capacity change from 0 to 32768 [ 1031.375483][ T27] audit: type=1800 audit(1755171750.527:217): pid=13105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1538" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 1031.401430][T13114] netlink: 'syz.5.1539': attribute type 4 has an invalid length. [ 1031.410460][T13114] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1539'. [ 1032.203387][T13124] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1032.248928][T13105] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root [ 1032.248928][T13105] [ 1033.018340][T13105] ERROR: (device loop4): remounting filesystem as read-only [ 1033.470322][T13116] loop3: detected capacity change from 0 to 32768 [ 1033.572617][T13116] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1033.617303][T11417] ------------[ cut here ]------------ [ 1033.622932][T13116] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1033.623005][T13116] BTRFS info (device loop3): metadata ratio 2 [ 1033.623026][T13116] BTRFS info (device loop3): force zlib compression, level 3 [ 1033.623054][T11417] kernel BUG at fs/jfs/inode.c:169! [ 1033.631798][T13116] BTRFS info (device loop3): use zlib compression, level 3 [ 1033.792779][T13116] BTRFS info (device loop3): enabling auto defrag [ 1033.902636][T11417] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1033.908773][T11417] CPU: 0 PID: 11417 Comm: syz-executor Not tainted 6.6.101-syzkaller #0 [ 1033.917104][T11417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1033.927158][T11417] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 1033.932802][T11417] Code: e3 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 89 e9 e3 fe e9 0a fe ff ff e8 9f a3 8c fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 1033.952464][T11417] RSP: 0018:ffffc90003257ac0 EFLAGS: 00010293 [ 1033.958535][T11417] RAX: ffffffff82f8f1f1 RBX: ffff88805d9f0d70 RCX: ffff8880210e8000 [ 1033.966518][T11417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805d9f0d70 [ 1033.974492][T11417] RBP: 0000000000000001 R08: ffffffff90da3617 R09: 1ffffffff21b46c2 [ 1033.982465][T11417] R10: dffffc0000000000 R11: fffffbfff21b46c3 R12: dffffc0000000000 [ 1033.990452][T11417] R13: dffffc0000000000 R14: ffff88805d9f09f8 R15: ffff88805d9f0f40 [ 1033.998437][T11417] FS: 000055558f52d500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1034.007372][T11417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1034.010485][T13116] BTRFS info (device loop3): max_inline at 0 [ 1034.013951][T11417] CR2: 00007f4ee91cb000 CR3: 000000007b0aa000 CR4: 00000000003506f0 [ 1034.013973][T11417] Call Trace: [ 1034.013980][T11417] [ 1034.013986][T11417] ? evict+0x480/0x870 [ 1034.014008][T11417] ? jfs_write_inode+0x220/0x220 [ 1034.019983][T13116] BTRFS info (device loop3): using free space tree [ 1034.027932][T11417] evict+0x486/0x870 [ 1034.027955][T11417] ? proc_nr_inodes+0x230/0x230 [ 1034.027975][T11417] ? do_raw_spin_unlock+0x121/0x230 [ 1034.027993][T11417] ? do_raw_spin_unlock+0x121/0x230 [ 1034.069107][T11417] evict_inodes+0x5fe/0x690 [ 1034.073604][T11417] ? clear_inode+0x150/0x150 [ 1034.078180][T11417] generic_shutdown_super+0x97/0x2b0 [ 1034.083459][T11417] kill_block_super+0x44/0x90 [ 1034.088124][T11417] deactivate_locked_super+0x97/0x100 [ 1034.093489][T11417] cleanup_mnt+0x429/0x4c0 [ 1034.097895][T11417] task_work_run+0x1ce/0x250 [ 1034.102477][T11417] ? task_work_cancel+0x240/0x240 [ 1034.107491][T11417] ? exit_to_user_mode_loop+0x3b/0x110 [ 1034.112950][T11417] exit_to_user_mode_loop+0xe6/0x110 [ 1034.118226][T11417] exit_to_user_mode_prepare+0xb1/0x140 [ 1034.123760][T11417] syscall_exit_to_user_mode+0x1a/0x50 [ 1034.129223][T11417] do_syscall_64+0x61/0xb0 [ 1034.133652][T11417] ? clear_bhb_loop+0x40/0x90 [ 1034.138325][T11417] ? clear_bhb_loop+0x40/0x90 [ 1034.142994][T11417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1034.148893][T11417] RIP: 0033:0x7f4337b8ff17 [ 1034.153295][T11417] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1034.172893][T11417] RSP: 002b:00007ffea2c31398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1034.181298][T11417] RAX: 0000000000000000 RBX: 00007f4337c11c05 RCX: 00007f4337b8ff17 [ 1034.189255][T11417] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea2c31450 [ 1034.197231][T11417] RBP: 00007ffea2c31450 R08: 0000000000000000 R09: 0000000000000000 [ 1034.205199][T11417] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea2c324e0 [ 1034.213160][T11417] R13: 00007f4337c11c05 R14: 00000000000fc0a3 R15: 00007ffea2c32520 [ 1034.221123][T11417] [ 1034.224140][T11417] Modules linked in: [ 1034.232774][T11417] ---[ end trace 0000000000000000 ]--- [ 1034.238350][T11417] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 1034.244101][T11417] Code: e3 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 89 e9 e3 fe e9 0a fe ff ff e8 9f a3 8c fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 1034.263997][T11417] RSP: 0018:ffffc90003257ac0 EFLAGS: 00010293 [ 1034.270182][T11417] RAX: ffffffff82f8f1f1 RBX: ffff88805d9f0d70 RCX: ffff8880210e8000 [ 1034.278447][T11417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805d9f0d70 [ 1034.292662][T11417] RBP: 0000000000000001 R08: ffffffff90da3617 R09: 1ffffffff21b46c2 [ 1034.302175][T11417] R10: dffffc0000000000 R11: fffffbfff21b46c3 R12: dffffc0000000000 [ 1034.316289][T13116] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1034.316629][T13116] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1034.327938][T13116] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1034.354190][T11417] R13: dffffc0000000000 R14: ffff88805d9f09f8 R15: ffff88805d9f0f40 [ 1034.370693][T13116] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1034.371936][T11417] FS: 000055558f52d500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1034.377965][T13116] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1034.392910][T11417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1034.412258][T11417] CR2: 00007f4ee91cb000 CR3: 000000007b0aa000 CR4: 00000000003506f0 [ 1034.418745][T13116] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1034.423139][T13116] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1034.435131][T13116] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1034.454275][T11417] Kernel panic - not syncing: Fatal exception [ 1034.470298][T11417] Kernel Offset: disabled [ 1034.474614][T11417] Rebooting in 86400 seconds..