last executing test programs: 3m16.929767827s ago: executing program 1 (id=199): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setpriority(0x0, 0x0, 0x2a14b58) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x7, 0x2c86f28c, 0x2025, 0x0, 0x7, 0x6, 0x2, 0x6}}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') setxattr$security_capability(&(0x7f0000000180)='./proc/thread-self/fail-nth\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x7f}, {0x9, 0xb9b}]}, 0x14, 0x0) (async) lseek(r5, 0x2000, 0x0) (async) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) write$FUSE_LK(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, {{0x3, 0x2, 0x2, r6}}}, 0x28) 3m13.09477571s ago: executing program 1 (id=204): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x136a, &(0x7f00000001c0)={0x0, 0xd7e7, 0x40, 0x3, 0xef}) r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f00002ef000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0xfb9ae8c8839e85fe, 0xffffffffffffffff, 0x968c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) 3m11.805677991s ago: executing program 1 (id=208): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x40804) 3m7.905123813s ago: executing program 1 (id=217): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (fail_nth: 3) 3m7.382420248s ago: executing program 1 (id=219): setns(0xc9, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) dup2(r1, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4040, 0xa, 0x3, 0x40000000, 0x10}) getrlimit(0xa, &(0x7f0000000000)) 3m6.051633379s ago: executing program 1 (id=221): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) 2m50.44308911s ago: executing program 32 (id=221): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) 30.641514708s ago: executing program 5 (id=551): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/133) 28.771335719s ago: executing program 5 (id=554): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xf8c80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x9, 0x0, 0x70}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101}, 0x94) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="5c00000030000504010000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000100000000000000000008000a0078563412", 0x5c}], 0x1}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4081}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 28.237616814s ago: executing program 5 (id=558): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001780), 0x0, 0x4000001) 28.145907429s ago: executing program 5 (id=559): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a0000ffffffff61114c00000000008a0000006c0016000000800000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = dup3(r1, r0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0x7, 0x10, 0x7, 0x2, 0x0, 0x20, 0x1, 0x1, 0xffffffff, &(0x7f0000000240)=[0x7], 0x20, 0x0}) r4 = syz_io_uring_setup(0x1994, &(0x7f0000000480)={0x0, 0x595f, 0x2000, 0x1, 0x51, 0x0, r2}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='\\', 0x1}], 0x1}, 0x24000800) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) r10 = socket(0x200000000000011, 0x2, 0xd) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r12, 0x20, &(0x7f0000000ac0)={0x2, 0xc4, 0xff7ffffe}) ioctl$RTC_IRQP_SET(r11, 0x4008700c, 0xd16) bind$packet(r10, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000bc0)=ANY=[], 0x1, 0x1ea, &(0x7f0000000680)="$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") write(r9, &(0x7f0000000300)='call_site.function ==', 0x15) sendmsg$kcm(r8, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000740000000000019078ac1e0001ac1414aa05009078e00000e046000000000000000011000000000000ac141400070300830300443c00030a01012f00000000e000000100000000ac1e000100000000ac1414aa000000000000000000000000ac1414000000000000000000000000000000bab72acbb5bf0c50870554bc697517e70cf26e0c9481d158e4eec1e8fb8e44d4e470d068412c28a5e968329b125f92d4e1687c4d367cf3f39418922edecd4e3fa44e1d47a05d71b791d4a25c4686ec55fddbf6542ad4eeeb"], 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 27.702452161s ago: executing program 5 (id=561): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.261634404s ago: executing program 5 (id=562): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000240)=0x8) socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x10021) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000dc0)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@smackfshat={'smackfshat', 0x3d, 'e{\x9b\xff\xd0'}}, {@smackfsdef={'smackfsdef', 0x3d, 'geneve\x0e\xc8\xbb\xf3\xa6\x87\xa7x\x13\xd3P\xfb.y0\x00'}}, {@uid_lt}, {@subj_user={'subj_user', 0x3d, '[@/\'+]'}}, {@euid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x30, 0x64, 0x33, 0x62, 0x37, 0x4], 0x2d, [0x39, 0x61, 0x30, 0x65], 0x2d, [0x39, 0x32, 0x31, 0x65], 0x2d, [0x66, 0x39, 0x33, 0x36], 0x2d, [0x65, 0x35, 0x63, 0x37, 0x38, 0x31, 0x0, 0x34]}}}, {@flag='mand'}, {@dont_appraise}]}, 0x3, 0x583, &(0x7f0000000800)="$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") (fail_nth: 4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000e430ee98d6528f7d4231e6cdf6d35b67d8f2fe9282cfb1b2dc51934a", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) 27.000254776s ago: executing program 33 (id=562): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000240)=0x8) socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x10021) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000dc0)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@smackfshat={'smackfshat', 0x3d, 'e{\x9b\xff\xd0'}}, {@smackfsdef={'smackfsdef', 0x3d, 'geneve\x0e\xc8\xbb\xf3\xa6\x87\xa7x\x13\xd3P\xfb.y0\x00'}}, {@uid_lt}, {@subj_user={'subj_user', 0x3d, '[@/\'+]'}}, {@euid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x30, 0x64, 0x33, 0x62, 0x37, 0x4], 0x2d, [0x39, 0x61, 0x30, 0x65], 0x2d, [0x39, 0x32, 0x31, 0x65], 0x2d, [0x66, 0x39, 0x33, 0x36], 0x2d, [0x65, 0x35, 0x63, 0x37, 0x38, 0x31, 0x0, 0x34]}}}, {@flag='mand'}, {@dont_appraise}]}, 0x3, 0x583, &(0x7f0000000800)="$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") (fail_nth: 4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000e430ee98d6528f7d4231e6cdf6d35b67d8f2fe9282cfb1b2dc51934a", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) 21.33781064s ago: executing program 3 (id=576): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x440080) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)=0x200) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x2, 0x8, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x12f, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x56}, 0x10}, 0x2b) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x1c, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1477, 0x1026, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x81, 0xc3}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x6, 0x2}}]}}}]}}]}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x4000, 0x20}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}]}}}, @IFLA_IFALIASn={0x4}]}, 0x5c}}, 0x0) 21.047621522s ago: executing program 6 (id=577): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d000100006000090400800203000000092106040001220500"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='>') 20.547757256s ago: executing program 4 (id=578): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001c00010229bd7000ffdbfa2507000000", @ANYRES32, @ANYBLOB="40004c060a000200aaaaaaaaaa0c"], 0x38}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="1200"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1) syz_clone(0x4000000, &(0x7f0000000000)="3321285a868aaf2fe9b7f27e5dba65d31a59bf925b58d428e9626eeb6beca1e021152c9ae6e01270507f8d928b290b55438987c1d3da0b11500b62593ed864051789b3263966ebb8cff16caa3c1e867535611dcc28771b3c0e63ea37a3d35c7700fa598fa7cdbce24f3ac49e52372841332ced312b48f69aca38594ae092a1fc46de7d8253b3f73bdf2f29b3d1fee859885f62", 0x93, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000280)="3a4816f8481d7e1b8ab2538fcacdd7ce055c0bb41cdcd5a3c00c8fe81d2c2ad6294a81a369bc8b236b5748db8d0056f580af416a0ce062d1d031125fdcc218b5ea1cf086445d55a5837b3e8822e5bebfe5cfd72ef60dfe1bb58ff5d2be1544fdba98fe3d3e5f4a41cb7eeafbb338976d0217b48ae48dd76ca7e1f1d4e1e078cda78be3323403f382d3a8ee53dcc44bd4336afa317ba513da1e128f8bf4af60fbee749378a6698e200667d28f79aa7d499eb31feb71bb7ea9dea4f5a7666c163b750554848b519e0f913e7533b20ecfccba1e339ca7dabd85") ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 17.457993162s ago: executing program 4 (id=583): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ppoll(&(0x7f0000000400)=[{0xffffffffffffffff, 0xa0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000005500)=[{{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003900)=[{&(0x7f0000002900)=""/4096, 0x1000}], 0x1, &(0x7f0000003940)=""/244, 0xf4}, 0xf}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000000640)=""/41, 0x29}, {&(0x7f0000000600)=""/51, 0x33}, {&(0x7f0000003ac0)=""/123, 0x7b}, {&(0x7f0000003b40)=""/90, 0x5a}, {&(0x7f0000003bc0)=""/188, 0xbc}, {&(0x7f0000000700)=""/200, 0xc8}], 0x6, &(0x7f0000000ec0)=""/39, 0x27}, 0x6}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003e40)=""/12, 0xc}, {&(0x7f0000000340)=""/2, 0x2}], 0x2}, 0x5}, {{&(0x7f0000003f00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000005040)=[{&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/43, 0x2b}, {&(0x7f0000004fc0)=""/102, 0x66}], 0x3, &(0x7f0000005080)=""/15, 0xf}, 0x4}, {{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f00000050c0)=""/210, 0xd2}, {&(0x7f00000051c0)=""/169, 0xa9}], 0x2}, 0x4d6b}, {{&(0x7f00000052c0)=@x25, 0x80, &(0x7f00000054c0)}, 0x2}], 0x6, 0x2101, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000240)=0x8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400) write$sndseq(r5, &(0x7f00000003c0)=[{0x7, 0x2, 0x91, 0x2, @time={0x9}, {0x40, 0xa8}, {0x3}, @ext={0x76, &(0x7f00000000c0)="42fee453f0c4e40f9e474c99e94585631b055cf4c01da33778b25176237bd40d17ee4d57d8d3badcb21d6a40ddc1e55fdb1dd6eb47ffa8387324a2430af1297527877b0aac1a4480e597b1a4c6bd173338d712b8462003607791745db3aea2b9e53e1284da9f2c74989575268e77538e8d0a2322a091"}}, {0x7, 0xf4, 0x0, 0x81, @time={0xc, 0x8}, {0x0, 0x4}, {0x10, 0x9e}, @raw8={"d3d80b79ecac2bfc40906845"}}, {0x6, 0x2, 0xf8, 0x0, @tick=0xc, {0x6, 0x3}, {0x9, 0xe5}, @quote={{0x4}, 0x100, &(0x7f0000000300)={0xfb, 0x1, 0x0, 0xb6, @time={0x5, 0xff}, {0x74, 0x40}, {0x11, 0x7}, @quote={{0x5, 0x3}, 0x1000, &(0x7f00000002c0)={0x9, 0x81, 0xf0, 0x6, @tick=0xfffffffd, {0x4, 0x5}, {0xd, 0x2}, @raw8={"d8b5e9cf2b82fa0c3e3c6e65"}}}}}}, {0x59, 0xe1, 0x0, 0x80, @time={0x8, 0x100}, {0x66, 0xd1}, {0x0, 0xc}, @time=@time={0x1, 0xfff}}, {0x0, 0x3d, 0x9, 0x81, @tick=0xffff, {0x2a}, {0xff, 0x7b}, @raw8={"dec8da38d53908b53155c96f"}}, {0x2, 0xff, 0x6, 0x0, @tick=0x9, {0xf8}, {0xff, 0x1}, @control={0x5, 0x3ff, 0x2a}}, {0xff, 0x1, 0x4, 0xd, @tick=0xffffffff, {0x58, 0x9}, {0x76}, @queue={0x7, {0x3, 0x12d}}}], 0xc4) r6 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0xfff, @loopback, 0x5}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) accept(r7, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000540)=0x80) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x228, 0x478, 0x348, 0x130, 0x228, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, &(0x7f0000000680), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, [0xff, 0xffffffff, 0xffffff00], [0xff, 0x0, 0xffffff00, 0xff], 'rose0\x00', 'wlan0\x00', {}, {0xff}, 0x1d, 0x1, 0x6, 0x2}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@ah={{0x30}, {[0x4d2, 0x4d5], 0x3, 0x10}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x2, 0x2}, {0x2, 0x1, 0x1}, 0x6, 0x9}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0x0, 0xffffffff, 0xffffffff], 'macsec0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x0, 0x7, 0x1, 0x5}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@mh={{0x28}, {"29ce"}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x6}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xff000000, 0xffffffff, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'batadv_slave_1\x00', 'wg1\x00', {}, {0xff}, 0x84, 0x2, 0x4, 0xa}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x5e0c}, {0x7}], 0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3d}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, @mcast1, [0x0, 0xff, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff, 0xff], 'netdevsim0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x64, 0xd0, 0x4, 0xe0}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@remote, 0xa, 0xa, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000dc0)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@smackfshat={'smackfshat', 0x3d, 'e{\x9b\xff\xd0'}}, {@smackfsdef={'smackfsdef', 0x3d, 'geneve\x0e\xc8\xbb\xf3\xa6\x87\xa7x\x13\xd3P\xfb.y0\x00'}}, {@uid_lt}, {@subj_user={'subj_user', 0x3d, '[@/\'+]'}}, {@euid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x30, 0x64, 0x33, 0x62, 0x37, 0x4], 0x2d, [0x39, 0x61, 0x30, 0x65], 0x2d, [0x39, 0x32, 0x31, 0x65], 0x2d, [0x66, 0x39, 0x33, 0x36], 0x2d, [0x65, 0x35, 0x63, 0x37, 0x38, 0x31, 0x0, 0x34]}}}, {@flag='mand'}, {@dont_appraise}]}, 0x3, 0x583, &(0x7f0000000800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2, &(0x7f0000000f00)=ANY=[@ANYBLOB="35a361f2bc44de99e242ab09ee85ea666456dea6ae071a6110f78eeb447efdbe32f7b587b976099f40a19abfd05ca9b1888282347c581cdb48593a7e9a2450b833ce2f690ee7d4b742d13855b8012011b3a8c229a02bb078e041491f1bfa705b1cb99cf3cda8bed39ef7bbd105d24166295e1bdd45c2681e21b16d19af764893c04fca8147cc8c9dc46339f568c9b8d4f24c7d0d05d4482389f122a711ca8725e44a739a4735c6872d3b186f703d3501175b297eacfacb6ba4f4fc3939978ca0e0b92ac177c89b46a4d1a7932ebbacbcb57d7aa7d4e3fd8b24254876a138619dca622a0eb04e7946293ff650acf0ddb8c1676b34c9fb8f", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 17.226928959s ago: executing program 6 (id=585): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001780), 0x0, 0x4000001) 16.508347843s ago: executing program 6 (id=586): setns(0xc9, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r3, r3) getrlimit(0xa, &(0x7f0000000000)) 16.007147206s ago: executing program 3 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x6d4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, 0x1, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 15.220773003s ago: executing program 6 (id=588): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880), &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x6}) 14.658090164s ago: executing program 2 (id=589): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) close(0x3) socket$kcm(0x10, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4) mmap(0x0, 0x0, 0xc, 0x13, 0xffffffffffffffff, 0x0) ioctl$ECCGETSTATS(0xffffffffffffffff, 0x80104d12, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x123102) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f51116c280e300", "1e59ddbe", "06ed010001809f9b"}, 0x28) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0xc0302, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r4, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000280)) 13.051644856s ago: executing program 3 (id=590): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ppoll(&(0x7f0000000400)=[{0xffffffffffffffff, 0xa0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500xffffffffffffffff}) bind$unix(r7, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) 11.529783108s ago: executing program 0 (id=592): socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = epoll_create1(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3ff, &(0x7f0000006680)) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@deltfilter={0x4c, 0x2d, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x0, 0xffff}, {0xc, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x290}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x8f, 0x7}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r5, &(0x7f0000000040), 0x0, 0x400c6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20900, 0x0) ioctl$RTC_RD_TIME(r7, 0x80247009, &(0x7f0000000140)) 10.5532455s ago: executing program 0 (id=593): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f00000001c0)='mp', 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd2e, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2001}, [@IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x45}, 0x40000) syz_open_dev$video4linux(0x0, 0x7, 0x513000) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000100)={0x57, 0x2}) syz_mount_image$nilfs2(&(0x7f0000000b80), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYBLOB="79a07a7cb15ea6e16f6edb71b34016681b1282d8ea1b351d60a57c2636074954f2040dc06e899fcdbef8b36f9f280be0f68da455d4fb1f9f925cdb33e3"], 0x3, 0xa7d, &(0x7f000001f500)="$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") 10.400885632s ago: executing program 2 (id=594): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x14002, 0xb96e0453b2f363c4) r3 = socket$inet6(0xa, 0x805, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x4000090) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000340)=ANY=[], 0x118}, {&(0x7f0000001f80)={0x1100, 0x138, 0x800, 0x70bd2c, 0x25dfdbfd, "", [@nested={0xed, 0x105, 0x0, 0x1, [@nested={0x4, 0x72}, @generic="51b60c46c6af246cc85cbaff0fa710b824d453bd4416f131108e4a7159ebebd1afdb09ae8977c9cf30ae865bba2da49dc8bc9b7b64e37dc18b852be396f69ab41fb426449176ed37e40bb2d306a51b3adfbc34321da1fe38266cbb13814f64b2a119f38afb22883b696dc50b459cc086cd8f7c600c52302565204a1160893f5e5ec7e85bddf98c1f2cc54e020dd15f6dc9085fbed22120a61ab21f8505751315ff914e7864af809e4570e086df7fbf1dda477e5a57a34766ff65d9964049bb123a5b70ab1a34437eaa70dece69fca062cb377b9f2dec4244e23645543d63cf38a9effe0712"]}, @generic="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"]}, 0x1100}], 0x2, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000080)=""/240, 0xfffffffffffffcea, 0x10020, 0x0, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x1) r5 = syz_open_procfs(0x0, 0x0) readv(r5, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x8946, &(0x7f0000000100)) mkdirat(r1, &(0x7f0000000040)='./sys\x00', 0x1f9) openat(r5, &(0x7f0000000300)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x141083, 0x54) write(r5, &(0x7f00000004c0)="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", 0x21d) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r7, &(0x7f00000002c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) 9.079539035s ago: executing program 4 (id=595): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000380)={[{@block_validity}, {@errors_continue}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x1be}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x80000) r5 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, 0xffffffffffffffff, 0x0) pread64(r5, &(0x7f0000001600)=""/4072, 0xfe8, 0x3) setsockopt$inet_buf(r3, 0x0, 0x29, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = landlock_create_ruleset(0x0, 0x0, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) fallocate(r0, 0x10, 0x800, 0x8000) 8.862872236s ago: executing program 0 (id=596): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000380)={[{@block_validity}, {@errors_continue}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x1be}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x80000) r5 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, 0xffffffffffffffff, 0x0) pread64(r5, &(0x7f0000001600)=""/4072, 0xfe8, 0x3) setsockopt$inet_buf(r3, 0x0, 0x29, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = landlock_create_ruleset(0x0, 0x0, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) fallocate(r0, 0x10, 0x800, 0x8000) 7.998561143s ago: executing program 2 (id=597): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ec0)='\f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)='3q', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="c846d745efa4474262ae445ce877cfd35940a148fa029bf68dc5d0935223309a7a28b01410eb2c50c80df5401a7861708e37ee6da0c59b956ad07b994aad8a32302639f74bbe336443c894b216e4f9dea0fe1dd44d9343b5d08b1586258e7ed145c26214545b8e562350acc8ee3d", 0x6e}], 0x1}}], 0x3, 0x4000001) 7.088694223s ago: executing program 2 (id=598): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 4) 7.065873926s ago: executing program 4 (id=599): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000003c0)={'c6xdigio\x00', [0x140, 0x0, 0x7, 0x0, 0x2, 0x4, 0x4, 0x2, 0x7, 0x2, 0x4000004, 0x7, 0x2009, 0x8, 0x400004ce, 0x9e9b, 0x40103, 0x80000006, 0x6, 0x2, 0x7, 0x2, 0x2f, 0x81, 0xffd, 0x6, 0xab, 0x1, 0x283, 0x8001, 0x400006]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8e}, 0x0) r2 = getpid() r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./bus\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@inode64}, {@usrquota}, {@dax}, {@nolargeio}]}, 0x1, 0x97a3, &(0x7f0000009780)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000b40)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(0x0, 0x0, 0x1) rmdir(&(0x7f0000000080)='./bus\x00') setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "413d6b300eff0399", "64018d5ff2b3450a337a0e02ff73fa00", "0f6ae197", "f116ff6dec88febb"}, 0x28) 7.002831281s ago: executing program 3 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x280, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0x80000006}, {0x5, 0x14, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x6eb6}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0xfffffff8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}, {0xfec1, 0x13, 0x45}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa7f3}, {0x6, 0x11, 0x80}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x13ae}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x9dd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfcc}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0xfc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xe}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}]}, 0x280}, 0x1, 0x0, 0x0, 0x40}, 0x2004c080) gettid() r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x148, 0x6, 0x3, 0x0, 0x2}, 0x30, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) landlock_restrict_self(r4, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000700)='\x00') pread64(r3, &(0x7f0000001600)=""/4096, 0x1000, 0xfffffff7) 6.553797791s ago: executing program 2 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) syz_read_part_table(0x62c, &(0x7f0000000080)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r1, 0x6d4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, 0x1, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3.734548797s ago: executing program 2 (id=602): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ppoll(&(0x7f0000000400)=[{0xffffffffffffffff, 0xa0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000100)=0x4080200, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = dup(r7) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55d1, &(0x7f000000c040)="$eJzs3DuPG2UXAOAze8n9y7dCFHQZKULaleJVvLkIKgIk4iISRVwKKvDajuXE9qzWjrOkSkGJKPgnCCQqSn4DBZTQIQoQHVLQXAzZJAuEeL3a5HmkmTPz+vWZMyMr2TNjOYCn1lL62y9JHI/DETEfEceSKLaTaom4E3GhnPtcRJyIiLl7lqQa/3PgQEQciYjjefIyZ1K99Nmp8clzP7/569ffHlw4+vlX3+3piQN76vmI6G+U27f6Zcw6ZbxejTfG3SL2z46ruLEtRz8rx2+114sMtxqTeY0inumU87ONm8M8Xus1mnnsdK8V4xuD8oDDcWeSJ39Der2xWey32utF7A6zInZul8fdul3+23Z7OCrztKp8HxXpYzSaxHK8vdUuz2fjRhGbg1E1XubNWu2tPI6rWB0umlmvVdSx/h8v8j7wVndwcysdtzeH3WyQnlutv7BaP1+rb2at9qh9ttbot86fTZc7vXxabdRu9C90sqzTa682s/5KutxpNmv1erp8sb3ebQzSen31zOrp2rmVautU+tqV99JeK13O4yvdwc1RtzdMr2WbafmOlXRt9cyLK+nJevrO5avp1bcvXbp89d0PLr5/5eXLb7xaTXqgrHR57fTaWq1+urZWX3mKzv/jquhHOP/k4cM/fP94lw1KO3zAdrawO3UA7CMP9P9xf/8f+n9g6h6n/+/fqPZ3p/+P643J34g79/8xzf4/b6n0///c/849Uv97fCr972Lsy/4//z93P9z/gMfyyP1/4cDU6wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYOZ+XPzi9WJjqdw/Wo3/rxp6ptpPImIuIu4+xHwc2JZzvsqzuMP8xftq+CaJIkN+jIPVciQiLlTL7//f7asAAAAAT64v75z4tOzWy9XSXhfELJU3beaOfTilfElELC79NKVsc/nq2SklKz7fC7E1pWzFDaxDU0pW3nJbmFa2f2V+Wzh0T0jKMDfTcgAAgJnY3gnMtgsBAABglj7521dfmlkdzFgSk0eZk2fBxTfv/3ogeDhf3b3vy/0AAADAfpLsdQEAAADAriv6f7//BwAAAE+28vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YuZ8btYEoDsDPBgP5p6Ao97SSG5SREnLMMVBAmqAE0kIaoAYi5ZASVrDCnkXyLkirZYy16Psk2zvj1c8zwOWNpQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC79rdbz3z+//Lo0Z7e/TJ7ZAAAAAKdsq/W8/mPatN+l/g+p61NqFxFRRsSp2n0Qo1bmIOVUZ/6/ejSGPxF1wqF/nI63EfE1HXcfu/4UAAAA4HZtlqtZU603p7QE8K/fUXElzaJN+f5bprwiIqrp/0xp5eH0OVNY/fsexo9MafUC1iRTWLPkNjx9b5TrIW2D1uVhJov6S6xbZTfPBQAA+tSuBM5UIQAAANyA730PgGt4WtoXx9PxPeO4uaQXgm9aLQAAAOAVKvoeAAAAANC5uv7vZv+/yYv2/yvs/wcAAADZNfv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KVttZ5vlqvZufuLZ+bs9pfJNyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADu2Z9jFIZhKIiCm0RK4s7o/oc1C3bp2s0MCB5/KwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHde58v7ik9jTzJ6bcyeV5Jvp8avU+PfubHNZKynfwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsD8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW8/v1FUcQDA3+zsbmmFWKtpYtUg4aAXKQuCXI3RNB78E0yassXiIgo9CGnEXryZnrkYvZgYY6Kpt/4PnGnCBW8ceqiJJxNr5lc72y601HZ2pZ9P8vZ953V4P2Y2G777ZgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAorL0bXq3lcZy8jGZx0XZ/fWEmqVe31YmVpQcTSUniaKhoPXFqr2NvxAeyhEH1Wvng5Hj/JgIAAMCz4sSuZ8RFfh9CeNhYnkrq2mia/zeKc5Kc//u8qyhv2573r64vHMv/NFHk/7//9uilzYFG43ScpNPZuU777M6p1Pe9zP+553c9o55e+fS7lzi9IbUPF19ca6TXM/r23r33m2k4VMVsAYD9OFPUeVD8fyipW/2cGABHRr2UeBf5fzza3zkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVGFtMTxXxFEIYaK+FSdW1xdmetVfLz2YWMnLxbt3l8p9Jl00Qgizc5322a7Rhg59PQPi1NV/RkqHxdW8/el0p9O+cfNW1cHJEEKPP93Z2z+P8+k/9pxmCKGr5fTLPfr5eA9jbetnR5C/PUO113A4Wd+uJ0ddLdGOC/7eRqYfb4ADDpqPu021/P4cxqDDld/37qB47x18z0/z0XJkPkMBAPgPGnlJMtGHjeWppC0aC2Hjh+78/41SHLry/o07WUt2vFLK/x99cvF+eaxy/t/aaj5+2GscdJPz1z6fvHnr9ltz16avtK+0P3v7XOud1vlLFy5cmky/K5mcDbVt35gAAADA02jmpZz/D/fY/x8pxeEJ+//ZlnCW/3/xXeur8lhx7/z/yNva9Ov3TAAAAI6i5mb0wut//Rn1OCNqNsOX0/PzN1rZ6+bxuey10unu01Beyvl/PNbvWQEAAABVWFuMuvb/L5fi8IT9//Lz/8d/euWXcp9x9mzB9RBC+8zM9c7l6pYz0Lp/9PtjfBg/VE4HavZ7pQAAAPTLcF7K+/+NsST/r20+8lALIbx5OoS/89/whz3m//EH3/xcHqv8/P/5Slc5eGrj2fVI6/EQ6uP9nhEAAADPsmN5SZL9PxrLU1d/Hfmo6fl/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKr9GwAA//+jHSzy") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_ublk_setup_queues(r10, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) 2.759320961s ago: executing program 6 (id=605): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) close(0x3) socket$kcm(0x10, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4) mmap(0x0, 0x0, 0xc, 0x13, 0xffffffffffffffff, 0x0) ioctl$ECCGETSTATS(0xffffffffffffffff, 0x80104d12, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x123102) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f51116c280e300", "1e59ddbe", "06ed010001809f9b"}, 0x28) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0xc0302, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r4, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000280)) 2.407062546s ago: executing program 0 (id=606): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0xa, r2, 0x0, r1}) (fail_nth: 4) 1.274092896s ago: executing program 0 (id=607): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/214, 0xd6}], 0x1, 0x5, 0x1) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xfffffffffffffffd) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x501, 0x1001, 0xffffffff, {0x0, 0x0, 0x0, 0x1, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x80000000}]}}]}, 0x38}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000280)=[{0x3, 0x0, 0x9, {0xfffffffffffffff7, 0x2}, 0x58, 0xffffffffffffc}], 0x1, 0x40, 0xd, 0x1000000000de}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4}, {0x0, 0x0, 0x28, 0xd, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x1], 0x1, 0x8, 0x98f}}) (async, rerun: 32) socket(0xa, 0x80000, 0x9) (async, rerun: 32) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000140)) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 247.999812ms ago: executing program 6 (id=608): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x2d, 0x4442, &(0x7f00000088c0)="$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") 0s ago: executing program 0 (id=609): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ec0)='\f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)='3q', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="c846d745efa4474262ae445ce877cfd35940a148fa029bf68dc5d0935223309a7a28b01410eb2c50c80df5401a7861708e37ee6da0c59b956ad07b994aad8a32302639f74bbe336443c894b216e4f9dea0fe1dd44d9343b5d08b1586258e7ed145c26214545b8e562350acc8ee3d", 0x6e}], 0x1}}], 0x3, 0x4000001) kernel console output (not intermixed with test programs): probe with driver radio-usb-si4713 failed with error -71 [ 254.192346][ T980] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 254.203181][ T980] usb 1-1: USB disconnect, device number 11 [ 254.364086][ T5747] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 254.395720][ T5760] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 254.497871][ T5747] usb 5-1: device descriptor read/64, error -71 [ 254.523404][ T5760] usb 7-1: device descriptor read/64, error -71 [ 254.616414][ T5747] usb usb5-port1: attempt power cycle [ 256.418658][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.418725][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.419354][ T5760] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 256.514238][ T5747] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 256.553405][ T5760] usb 7-1: device descriptor read/64, error -71 [ 256.581526][ T5747] usb 5-1: device descriptor read/8, error -71 [ 256.663763][ T5760] usb usb7-port1: attempt power cycle [ 257.086788][ T5760] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 257.104122][ T5747] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 257.174224][ T5760] usb 7-1: device descriptor read/8, error -71 [ 257.181371][ T5747] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 257.237322][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 257.237464][ T5747] usb 5-1: Product: syz [ 257.237587][ T5747] usb 5-1: Manufacturer: syz [ 257.237682][ T5747] usb 5-1: SerialNumber: syz [ 257.317249][ T5747] usb 5-1: config 0 descriptor?? [ 257.424088][ T5760] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 257.652671][ T5760] usb 7-1: device descriptor read/8, error -71 [ 257.706840][ T5747] usb 5-1: USB disconnect, device number 15 [ 257.753692][ T5760] usb usb7-port1: unable to enumerate USB device [ 257.809569][ T6647] udevd[6647]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.105569][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 258.175997][ T7252] loop3: detected capacity change from 0 to 40427 [ 258.201560][ T7252] F2FS-fs (loop3): invalid crc value [ 258.277425][ T7252] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 258.280814][ T7252] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 258.280841][ T7252] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 258.281767][ T7252] F2FS-fs (loop3): Start checkpoint disabled! [ 258.293595][ T7252] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 258.306105][ T7252] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 258.337188][ T7252] syz.3.355: attempt to access beyond end of device [ 258.337188][ T7252] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 258.653413][ T7264] syz.3.355: attempt to access beyond end of device [ 258.653413][ T7264] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 258.659888][ T7264] syz.3.355: attempt to access beyond end of device [ 258.659888][ T7264] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 258.664289][ T7264] syz.3.355: attempt to access beyond end of device [ 258.664289][ T7264] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 258.666404][ T7264] syz.3.355: attempt to access beyond end of device [ 258.666404][ T7264] loop3: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 258.669556][ T7264] syz.3.355: attempt to access beyond end of device [ 258.669556][ T7264] loop3: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 258.675059][ T7264] syz.3.355: attempt to access beyond end of device [ 258.675059][ T7264] loop3: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 258.677362][ T7264] syz.3.355: attempt to access beyond end of device [ 258.677362][ T7264] loop3: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 258.680106][ T7264] syz.3.355: attempt to access beyond end of device [ 258.680106][ T7264] loop3: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 258.682850][ T7264] syz.3.355: attempt to access beyond end of device [ 258.682850][ T7264] loop3: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 259.312812][ T5910] CPU: 0 UID: 0 PID: 5910 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 259.312851][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 259.312870][ T5910] Workqueue: writeback wb_workfn (flush-7:3) [ 259.312915][ T5910] Call Trace: [ 259.312926][ T5910] [ 259.312937][ T5910] dump_stack_lvl+0xe8/0x150 [ 259.312981][ T5910] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 259.313031][ T5910] f2fs_write_end_bio+0x1211/0x16e0 [ 259.313067][ T5910] ? blkg_put+0x22/0x240 [ 259.313135][ T5910] __submit_merged_bio+0x258/0x6a0 [ 259.313175][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.313208][ T5910] ? rcu_is_watching+0x16/0xb0 [ 259.313252][ T5910] __submit_merged_write_cond+0x3c9/0x4e0 [ 259.313310][ T5910] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 259.313372][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.313417][ T5910] f2fs_write_data_pages+0x2a27/0x36f0 [ 259.313499][ T5910] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 259.313548][ T5910] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 259.313631][ T5910] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 259.313675][ T5910] ? irqentry_exit+0x218/0x910 [ 259.313720][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.313774][ T5910] ? __lock_acquire+0x747/0x2de0 [ 259.313815][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.313862][ T5910] ? f2fs_update_inode+0x1394/0x25c0 [ 259.313900][ T5910] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 259.313932][ T5910] do_writepages+0x338/0x560 [ 259.313974][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.314005][ T5910] ? reacquire_held_locks+0x117/0x1a0 [ 259.314040][ T5910] ? writeback_sb_inodes+0x450/0x1b00 [ 259.314088][ T5910] __writeback_single_inode+0x136/0x1220 [ 259.314132][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.314164][ T5910] ? do_raw_spin_unlock+0xf5/0x200 [ 259.314213][ T5910] writeback_sb_inodes+0x9de/0x1b00 [ 259.314251][ T5910] ? __lock_acquire+0x747/0x2de0 [ 259.314290][ T5910] ? current_time+0x22f/0x380 [ 259.314328][ T5910] ? do_raw_spin_unlock+0xf5/0x200 [ 259.314380][ T5910] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 259.314481][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.314513][ T5910] ? rcu_is_watching+0x16/0xb0 [ 259.314548][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.314580][ T5910] ? queue_io+0x2d3/0x470 [ 259.314625][ T5910] wb_writeback+0x41c/0xad0 [ 259.314668][ T5910] ? queue_io+0x241/0x470 [ 259.314722][ T5910] ? __pfx_wb_writeback+0x10/0x10 [ 259.314757][ T5910] ? do_raw_spin_lock+0x12b/0x2f0 [ 259.314824][ T5910] wb_workfn+0x431/0x10f0 [ 259.314884][ T5910] ? __pfx_wb_workfn+0x10/0x10 [ 259.314935][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.314967][ T5910] ? do_raw_spin_lock+0x12b/0x2f0 [ 259.315021][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.315053][ T5910] ? lock_acquire+0x115/0x350 [ 259.315085][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.315127][ T5910] ? rcu_is_watching+0x16/0xb0 [ 259.315162][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.315197][ T5910] ? process_scheduled_works+0x97a/0x1630 [ 259.315236][ T5910] process_scheduled_works+0xc3d/0x1630 [ 259.315273][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.315350][ T5910] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.315398][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.315430][ T5910] ? assign_work+0x3cf/0x5d0 [ 259.315475][ T5910] worker_thread+0xa47/0xfb0 [ 259.315518][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.315565][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.315597][ T5910] ? __kthread_parkme+0x71/0x1f0 [ 259.315654][ T5910] kthread+0x38b/0x480 [ 259.315683][ T5910] ? __pfx_worker_thread+0x10/0x10 [ 259.315726][ T5910] ? __pfx_kthread+0x10/0x10 [ 259.315757][ T5910] ret_from_fork+0x514/0xb70 [ 259.315789][ T5910] ? __pfx_ret_from_fork+0x10/0x10 [ 259.315816][ T5910] ? srso_alias_return_thunk+0x5/0xfbef5 [ 259.315847][ T5910] ? __switch_to+0xc89/0x1420 [ 259.315892][ T5910] ? __pfx_kthread+0x10/0x10 [ 259.315923][ T5910] ret_from_fork_asm+0x1a/0x30 [ 259.315991][ T5910] [ 259.515721][ T5910] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 259.588338][ T3209] loop3: lost filesystem error report for type 5 error -108 [ 261.295387][ T980] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 261.457426][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 261.464499][ T980] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 261.495561][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.495591][ T980] usb 5-1: Product: syz [ 261.495609][ T980] usb 5-1: Manufacturer: syz [ 261.495627][ T980] usb 5-1: SerialNumber: syz [ 261.529290][ T7283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.558348][ T980] usb 5-1: config 0 descriptor?? [ 261.579695][ T980] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 262.272018][ T7300] loop2: detected capacity change from 0 to 2048 [ 262.274436][ T7300] nilfs2: Unknown parameter '(?` [ 262.274436][ T7300] ' [ 263.716232][ T980] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 263.737266][ T980] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 264.303320][ T5760] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 264.534341][ T5760] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 264.714874][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 264.714930][ T5760] usb 1-1: Product: syz [ 264.714972][ T5760] usb 1-1: Manufacturer: syz [ 264.715014][ T5760] usb 1-1: SerialNumber: syz [ 264.744000][ T5760] usb 1-1: config 0 descriptor?? [ 264.909861][ T980] usb 5-1: USB disconnect, device number 16 [ 265.160963][ T5760] usb 1-1: USB disconnect, device number 12 [ 265.200886][ T7327] loop5: detected capacity change from 0 to 1024 [ 265.280094][ T6647] udevd[6647]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.289811][ T7327] hfsplus: invalid btree flag [ 265.290395][ T7327] hfsplus: failed to load catalog file [ 265.885386][ T7338] loop4: detected capacity change from 0 to 1024 [ 265.897110][ T7338] EXT4-fs: Ignoring removed bh option [ 265.987740][ T7338] EXT4-fs: Mount option(s) incompatible with ext3 [ 266.270725][ T3209] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 266.434171][ T3209] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 266.436908][ T3209] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 31309, setting to 64 [ 266.441354][ T3209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.441383][ T3209] usb 7-1: Product: syz [ 266.441401][ T3209] usb 7-1: Manufacturer: syz [ 266.441420][ T3209] usb 7-1: SerialNumber: syz [ 266.500878][ T7335] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 266.631771][ T7350] loop0: detected capacity change from 0 to 512 [ 266.642636][ T7350] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.652180][ T7350] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 267.129810][ T7350] EXT4-fs (loop0): orphan cleanup on readonly fs [ 267.192156][ T3209] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 267.314186][ T7350] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 267.314231][ T7350] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 267.808227][ T7350] EXT4-fs (loop0): 1 truncate cleaned up [ 267.977387][ T7350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.040740][ T7350] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.504216][ T980] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 268.596391][ T7366] loop0: detected capacity change from 0 to 512 [ 268.621049][ T7366] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 268.621076][ T7366] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 268.681062][ T980] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 268.684218][ T980] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 268.684246][ T980] usb 5-1: config 0 has no interface number 0 [ 268.697756][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.697787][ T980] usb 5-1: Product: syz [ 268.697805][ T980] usb 5-1: Manufacturer: syz [ 268.697824][ T980] usb 5-1: SerialNumber: syz [ 268.707640][ T7366] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 268.708721][ T7366] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 268.708831][ T7366] System zones: 0-2, 18-18, 34-35 [ 268.720287][ T980] usb 5-1: config 0 descriptor?? [ 268.747959][ T7366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.780499][ T980] usb 5-1: selecting invalid altsetting 1 [ 268.998437][ T980] dvb_ttusb_budget: ttusb_init_controller: error [ 268.998538][ T980] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 269.699168][ T7366] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 269.726499][ T7359] loop4: detected capacity change from 0 to 256 [ 269.912090][ T7366] netlink: 132 bytes leftover after parsing attributes in process `syz.0.383'. [ 269.919515][ T5739] usb 7-1: USB disconnect, device number 6 [ 269.938097][ T7359] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 269.990242][ T5739] usblp0: removed [ 270.078086][ T7359] exFAT-fs (loop4): error, data valid size is invalid(-281474976706560) [ 270.093403][ T5634] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 270.132164][ T7389] netlink: 24 bytes leftover after parsing attributes in process `syz.6.388'. [ 270.153791][ T7390] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 270.157033][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.6.388'. [ 270.171051][ T7392] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 270.178962][ T7394] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 270.255088][ T5634] usb 4-1: device descriptor read/64, error -71 [ 270.288672][ T980] DVB: Unable to find symbol stv0299_attach() [ 270.357414][ T980] DVB: Unable to find symbol tda8083_attach() [ 270.357430][ T980] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 270.690544][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.719097][ T5634] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 271.228871][ T980] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 271.444986][ T980] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 271.446490][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.449342][ T980] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 271.449408][ T980] usb 3-1: Product: syz [ 271.449427][ T980] usb 3-1: Manufacturer: syz [ 271.449446][ T980] usb 3-1: SerialNumber: syz [ 271.457806][ T980] usb 3-1: config 0 descriptor?? [ 271.469633][ T980] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 271.469953][ T980] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 271.470027][ T980] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 271.472859][ T5634] usb 4-1: device descriptor read/64, error -71 [ 271.479014][ T980] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 271.573629][ T5634] usb usb4-port1: attempt power cycle [ 271.637323][ T7418] FAULT_INJECTION: forcing a failure. [ 271.637323][ T7418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.637364][ T7418] CPU: 0 UID: 0 PID: 7418 Comm: syz.6.392 Not tainted syzkaller #0 PREEMPT(full) [ 271.637393][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 271.637410][ T7418] Call Trace: [ 271.637420][ T7418] [ 271.637431][ T7418] dump_stack_lvl+0xe8/0x150 [ 271.637484][ T7418] should_fail_ex+0x410/0x560 [ 271.637525][ T7418] _copy_from_iter+0x1d3/0x1660 [ 271.637560][ T7418] ? __alloc_skb+0x27a/0x7a0 [ 271.637595][ T7418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.637631][ T7418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.637667][ T7418] ? __alloc_skb+0x27a/0x7a0 [ 271.637702][ T7418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.637746][ T7418] ? __pfx__copy_from_iter+0x10/0x10 [ 271.637778][ T7418] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 271.637806][ T7418] ? __alloc_skb+0x27a/0x7a0 [ 271.637839][ T7418] ? __alloc_skb+0x27a/0x7a0 [ 271.637883][ T7418] ? netlink_sendmsg+0x650/0xb40 [ 271.637910][ T7418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.637942][ T7418] ? skb_put+0x112/0x210 [ 271.637987][ T7418] netlink_sendmsg+0x6c0/0xb40 [ 271.638029][ T7418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.638067][ T7418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.638099][ T7418] ? apparmor_socket_sendmsg+0x98/0x360 [ 271.638131][ T7418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.638167][ T7418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.638195][ T7418] sock_sendmsg_nosec+0x13a/0x180 [ 271.638231][ T7418] ____sys_sendmsg+0x54e/0x850 [ 271.638280][ T7418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.638324][ T7418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.638363][ T7418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.638395][ T7418] ? import_iovec+0x73/0xa0 [ 271.638437][ T7418] ___sys_sendmsg+0x2a5/0x360 [ 271.638477][ T7418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.638508][ T7418] ? __lock_acquire+0x747/0x2de0 [ 271.638544][ T7418] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.638628][ T7418] ? __fget_files+0x2a/0x420 [ 271.638668][ T7418] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.638699][ T7418] ? __fget_files+0x3a2/0x420 [ 271.638758][ T7418] __x64_sys_sendmsg+0x1b1/0x290 [ 271.638805][ T7418] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.638872][ T7418] do_syscall_64+0x166/0x520 [ 271.638911][ T7418] ? trace_irq_disable+0x3b/0x140 [ 271.638941][ T7418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.638976][ T7418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.639004][ T7418] RIP: 0033:0x7f316f39e159 [ 271.639027][ T7418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.639050][ T7418] RSP: 002b:00007f3170227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.639079][ T7418] RAX: ffffffffffffffda RBX: 00007f316f625fa0 RCX: 00007f316f39e159 [ 271.639100][ T7418] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 271.639117][ T7418] RBP: 00007f3170227090 R08: 0000000000000000 R09: 0000000000000000 [ 271.639135][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.639151][ T7418] R13: 00007f316f626038 R14: 00007f316f625fa0 R15: 00007fff58dd9658 [ 271.639193][ T7418] [ 271.734938][ T980] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 271.749996][ T980] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 271.761707][ T980] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 271.772524][ T980] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 271.783452][ T980] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 271.791275][ T980] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 271.806870][ T980] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 271.915907][ T5634] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 271.952804][ T5634] usb 4-1: device descriptor read/8, error -71 [ 272.222585][ T980] usb 5-1: USB disconnect, device number 17 [ 272.231462][ T5634] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 272.250689][ T5634] usb 4-1: device descriptor read/8, error -71 [ 272.353859][ T5634] usb usb4-port1: unable to enumerate USB device [ 272.538623][ T7431] loop6: detected capacity change from 0 to 2048 [ 272.578096][ T7431] loop6: p2 < > p3 < p5 > p4 [ 272.578186][ T7431] loop6: partition table partially beyond EOD, truncated [ 272.578609][ T7431] loop6: p2 start 4278190080 is beyond EOD, truncated [ 272.589534][ T7431] loop6: p4 size 8192 extends beyond EOD, truncated [ 272.591984][ T7431] loop6: p5 size 8192 extends beyond EOD, truncated [ 272.825337][ T7434] FAULT_INJECTION: forcing a failure. [ 272.825337][ T7434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.825367][ T7434] CPU: 1 UID: 0 PID: 7434 Comm: syz.4.395 Not tainted syzkaller #0 PREEMPT(full) [ 272.825389][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 272.825401][ T7434] Call Trace: [ 272.825409][ T7434] [ 272.825417][ T7434] dump_stack_lvl+0xe8/0x150 [ 272.825450][ T7434] should_fail_ex+0x410/0x560 [ 272.825480][ T7434] strncpy_from_user+0x36/0x2c0 [ 272.825511][ T7434] __se_sys_memfd_create+0x24d/0x410 [ 272.825544][ T7434] do_syscall_64+0x166/0x520 [ 272.825572][ T7434] ? trace_irq_disable+0x3b/0x140 [ 272.825594][ T7434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.825619][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.825639][ T7434] RIP: 0033:0x7fce5c99e159 [ 272.825657][ T7434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.825674][ T7434] RSP: 002b:00007fce5d79ae08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 272.825694][ T7434] RAX: ffffffffffffffda RBX: 000000000000044e RCX: 00007fce5c99e159 [ 272.825709][ T7434] RDX: 00007fce5d79aee0 RSI: 0000000000000000 RDI: 00007fce5ca3524b [ 272.825722][ T7434] RBP: 0000200000000900 R08: 00000000ffffffff R09: 0000000000000000 [ 272.825735][ T7434] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000480 [ 272.825748][ T7434] R13: 00007fce5d79aee0 R14: 00007fce5d79aea0 R15: 00002000000000c0 [ 272.825779][ T7434] [ 274.261329][ T5747] usb 3-1: USB disconnect, device number 10 [ 274.302827][ T5747] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 274.367735][ T5747] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 274.410262][ T5747] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 274.427602][ T5747] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 274.446562][ T5747] keyspan 3-1:0.0: device disconnected [ 275.037280][ T5760] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 275.197609][ T5760] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 275.198627][ T5760] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.198654][ T5760] usb 4-1: config 0 has no interface number 0 [ 275.206655][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.206682][ T5760] usb 4-1: Product: syz [ 275.206701][ T5760] usb 4-1: Manufacturer: syz [ 275.206719][ T5760] usb 4-1: SerialNumber: syz [ 275.223328][ T5760] usb 4-1: config 0 descriptor?? [ 275.236108][ T5760] usb 4-1: selecting invalid altsetting 1 [ 275.236295][ T5760] dvb_ttusb_budget: ttusb_init_controller: error [ 275.236309][ T5760] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 275.544726][ T5760] DVB: Unable to find symbol stv0299_attach() [ 275.565687][ T7448] loop3: detected capacity change from 0 to 256 [ 275.687740][ T7471] loop5: detected capacity change from 0 to 512 [ 275.705111][ T7448] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 275.717266][ T7471] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 275.717290][ T7471] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 275.736744][ T7471] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 275.738828][ T7471] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 275.738938][ T7471] System zones: 0-2, 18-18, 34-35 [ 275.792474][ T7448] exFAT-fs (loop3): error, data valid size is invalid(-281474976706560) [ 275.812513][ T7471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.882899][ T7471] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 275.895916][ T7469] fuse: Bad value for 'user_id' [ 275.895934][ T7469] fuse: Bad value for 'user_id' [ 275.975545][ T7469] fuse: Bad value for 'user_id' [ 275.975569][ T7469] fuse: Bad value for 'user_id' [ 276.011077][ T5760] DVB: Unable to find symbol tda8083_attach() [ 276.011097][ T5760] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 276.043084][ T7471] netlink: 132 bytes leftover after parsing attributes in process `syz.5.403'. [ 276.311713][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.549070][ T7500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.408'. [ 276.627587][ T7497] loop5: detected capacity change from 0 to 8 [ 277.234157][ T5634] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 277.384679][ T5634] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 277.385817][ T5634] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.385840][ T5634] usb 3-1: config 0 has no interface number 0 [ 277.388159][ T5634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.388186][ T5634] usb 3-1: Product: syz [ 277.388204][ T5634] usb 3-1: Manufacturer: syz [ 277.388222][ T5634] usb 3-1: SerialNumber: syz [ 277.391558][ T5634] usb 3-1: config 0 descriptor?? [ 277.450380][ T5634] usb 3-1: selecting invalid altsetting 1 [ 277.465041][ T5634] dvb_ttusb_budget: ttusb_init_controller: error [ 277.465060][ T5634] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 277.531122][ T7509] loop4: detected capacity change from 0 to 2048 [ 277.549581][ T5634] DVB: Unable to find symbol stv0299_attach() [ 277.561117][ T7509] loop4: p2 < > p3 < p5 > p4 [ 277.561145][ T7509] loop4: partition table partially beyond EOD, truncated [ 277.561344][ T7509] loop4: p2 start 4278190080 is beyond EOD, truncated [ 277.563142][ T7509] loop4: p4 size 8192 extends beyond EOD, truncated [ 277.574914][ T7509] loop4: p5 size 8192 extends beyond EOD, truncated [ 277.787154][ T7492] loop2: detected capacity change from 0 to 256 [ 277.826224][ T980] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 277.860926][ T7492] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 277.954353][ T980] usb 1-1: device descriptor read/64, error -71 [ 277.974363][ T5634] DVB: Unable to find symbol tda8083_attach() [ 277.974380][ T5634] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 278.501072][ T7492] exFAT-fs (loop2): error, data valid size is invalid(-281474976706560) [ 278.548836][ T5746] usb 4-1: USB disconnect, device number 10 [ 278.613910][ T980] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 278.746391][ T980] usb 1-1: device descriptor read/64, error -71 [ 278.854392][ T980] usb usb1-port1: attempt power cycle [ 279.203851][ T980] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 279.224259][ T980] usb 1-1: device descriptor read/8, error -71 [ 279.303404][ T3209] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 279.443352][ T3209] usb 6-1: device descriptor read/64, error -71 [ 279.463993][ T980] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 279.484585][ T980] usb 1-1: device descriptor read/8, error -71 [ 279.522455][ T7537] FAULT_INJECTION: forcing a failure. [ 279.522455][ T7537] name failslab, interval 1, probability 0, space 0, times 0 [ 279.522495][ T7537] CPU: 1 UID: 0 PID: 7537 Comm: syz.6.401 Not tainted syzkaller #0 PREEMPT(full) [ 279.522516][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 279.522528][ T7537] Call Trace: [ 279.522536][ T7537] [ 279.522545][ T7537] dump_stack_lvl+0xe8/0x150 [ 279.522579][ T7537] should_fail_ex+0x410/0x560 [ 279.522607][ T7537] ? alloc_slab_obj_exts+0x5c/0x180 [ 279.522639][ T7537] should_failslab+0xa8/0x100 [ 279.522667][ T7537] ? alloc_slab_obj_exts+0x5c/0x180 [ 279.522714][ T7537] __kmalloc_flags_noprof+0x128/0x7a0 [ 279.522741][ T7537] ? alloc_slab_obj_exts+0x5c/0x180 [ 279.522778][ T7537] alloc_slab_obj_exts+0x5c/0x180 [ 279.522812][ T7537] __memcg_slab_post_alloc_hook+0x60b/0xd90 [ 279.522852][ T7537] ? dst_alloc+0x105/0x170 [ 279.522874][ T7537] kmem_cache_alloc_noprof+0x367/0x600 [ 279.522893][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.522916][ T7537] ? dst_alloc+0x105/0x170 [ 279.522935][ T7537] ? kmem_cache_alloc_noprof+0x156/0x600 [ 279.522955][ T7537] ? dst_alloc+0x105/0x170 [ 279.522980][ T7537] ? __pfx_ip6_dst_gc+0x10/0x10 [ 279.523003][ T7537] dst_alloc+0x105/0x170 [ 279.523028][ T7537] ip6_pol_route+0xba1/0x14d0 [ 279.523051][ T7537] ? ip6_pol_route+0x163/0x14d0 [ 279.523078][ T7537] ? __pfx_ip6_pol_route+0x10/0x10 [ 279.523100][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.523131][ T7537] ? __local_bh_enable_ip+0xd6/0x140 [ 279.523158][ T7537] ? lockdep_hardirqs_on+0x7b/0x110 [ 279.523186][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.523210][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.523239][ T7537] fib6_rule_lookup+0x512/0x6e0 [ 279.523276][ T7537] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 279.523309][ T7537] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 279.523334][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.523357][ T7537] ? inet6_ehashfn+0x2f/0x3b0 [ 279.523381][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.523404][ T7537] ? __inet6_lookup_established+0xbc2/0xc60 [ 279.523433][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.523469][ T7537] ip6_route_input+0x78d/0xb20 [ 279.523499][ T7537] ? __pfx_ip6_route_input+0x10/0x10 [ 279.523538][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.523575][ T7537] ? tcp_v6_early_demux+0x56e/0x970 [ 279.523612][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.523635][ T7537] ? ip6_rcv_finish_core+0x222/0x420 [ 279.523668][ T7537] ip6_rcv_finish+0x141/0x280 [ 279.523700][ T7537] NF_HOOK+0x336/0x3c0 [ 279.523734][ T7537] ? __pfx_sock_wfree+0x10/0x10 [ 279.523763][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.523788][ T7537] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 279.523816][ T7537] ? NF_HOOK+0x9e/0x3c0 [ 279.523844][ T7537] ? __pfx_NF_HOOK+0x10/0x10 [ 279.523872][ T7537] ? ip6_rcv_core+0xa1/0x1870 [ 279.523903][ T7537] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 279.523938][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.523961][ T7537] ? netif_receive_skb+0x102/0xbf0 [ 279.523991][ T7537] netif_receive_skb+0x278/0xbf0 [ 279.524016][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.524042][ T7537] ? __pfx_netif_receive_skb+0x10/0x10 [ 279.524068][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.524091][ T7537] ? rcu_is_watching+0x16/0xb0 [ 279.524116][ T7537] ? tun_rx_batched+0x185/0x790 [ 279.524143][ T7537] tun_rx_batched+0x1de/0x790 [ 279.524173][ T7537] ? __pfx_tun_rx_batched+0x10/0x10 [ 279.524197][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.524224][ T7537] ? lock_acquire+0x115/0x350 [ 279.524247][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.524276][ T7537] ? tun_get_user+0x23ba/0x44d0 [ 279.524299][ T7537] ? __local_bh_enable_ip+0xd6/0x140 [ 279.524326][ T7537] ? tun_get_user+0x27b0/0x44d0 [ 279.524352][ T7537] tun_get_user+0x2be0/0x44d0 [ 279.524389][ T7537] ? tun_get_user+0x27b0/0x44d0 [ 279.524417][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.524440][ T7537] ? aa_file_perm+0x4ed/0x15f0 [ 279.524478][ T7537] ? __pfx_tun_get_user+0x10/0x10 [ 279.524504][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.524527][ T7537] ? __lock_acquire+0x747/0x2de0 [ 279.524562][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.524585][ T7537] ? ref_tracker_alloc+0x341/0x4b0 [ 279.524615][ T7537] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 279.524643][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.524666][ T7537] ? lock_acquire+0x115/0x350 [ 279.524688][ T7537] ? tun_get+0x1c/0x2f0 [ 279.524718][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.524744][ T7537] ? tun_get+0x1c/0x2f0 [ 279.524767][ T7537] ? tun_get+0x1c/0x2f0 [ 279.524789][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.524817][ T7537] tun_chr_write_iter+0x113/0x200 [ 279.524843][ T7537] vfs_write+0x612/0xba0 [ 279.524871][ T7537] ? __pfx_vfs_write+0x10/0x10 [ 279.524900][ T7537] ? __fget_files+0x2a/0x420 [ 279.524933][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.524961][ T7537] ksys_write+0x150/0x270 [ 279.524983][ T7537] ? __pfx_ksys_write+0x10/0x10 [ 279.525014][ T7537] do_syscall_64+0x166/0x520 [ 279.525042][ T7537] ? trace_irq_disable+0x3b/0x140 [ 279.525064][ T7537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.525089][ T7537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.525110][ T7537] RIP: 0033:0x7f316f35e98e [ 279.525128][ T7537] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 279.525144][ T7537] RSP: 002b:00007f3170226fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 279.525165][ T7537] RAX: ffffffffffffffda RBX: 00007f31702276c0 RCX: 00007f316f35e98e [ 279.525180][ T7537] RDX: 000000000000004a RSI: 0000200000000080 RDI: 00000000000000c8 [ 279.525193][ T7537] RBP: 00007f316f43506b R08: 0000000000000000 R09: 0000000000000000 [ 279.525206][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.525220][ T7537] R13: 00007f316f626038 R14: 00007f316f625fa0 R15: 00007fff58dd9658 [ 279.525252][ T7537] [ 279.528164][ T5746] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 279.594402][ T980] usb usb1-port1: unable to enumerate USB device [ 279.665294][ T5746] usb 4-1: device descriptor read/64, error -71 [ 279.760451][ T7539] loop6: detected capacity change from 0 to 512 [ 279.770923][ T7539] EXT4-fs (loop6): Test dummy encryption mode enabled [ 279.770947][ T7539] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 279.789621][ T3209] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 279.789962][ T7539] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.419: bad orphan inode 131083 [ 279.789993][ T7539] loop6: lost filesystem error report for type 5 error -117 [ 279.793335][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 279.793357][ C1] EXT4-fs (loop6): initial error at time 1790816757: ext4_orphan_get:1429 [ 279.793384][ C1] EXT4-fs (loop6): last error at time 1790816757: ext4_orphan_get:1429 [ 279.802433][ T7539] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.983351][ T3209] usb 6-1: device descriptor read/64, error -71 [ 280.059347][ T5746] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 280.154503][ T7541] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.419: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 280.167606][ T3209] usb usb6-port1: attempt power cycle [ 280.174387][ T7541] ip_tables: iptables: counters copy to user failed while replacing table [ 280.180218][ T7541] ip_tables: iptables: counters copy to user failed while replacing table [ 280.194117][ T5746] usb 4-1: device descriptor read/64, error -71 [ 280.304660][ T5746] usb usb4-port1: attempt power cycle [ 280.511648][ T980] usb 3-1: USB disconnect, device number 11 [ 280.646851][ T5746] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 280.667730][ T5746] usb 4-1: device descriptor read/8, error -71 [ 280.724698][ T3209] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 280.743893][ T3209] usb 6-1: device descriptor read/8, error -71 [ 280.797432][ T6771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.875344][ T7551] loop4: detected capacity change from 0 to 512 [ 280.892590][ T7551] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 280.892610][ T7551] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 280.903997][ T5746] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 280.922281][ T7551] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 280.925423][ T5746] usb 4-1: device descriptor read/8, error -71 [ 280.939876][ T7551] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 280.939986][ T7551] System zones: 0-2, 18-18, 34-35 [ 280.993805][ T3209] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 280.995946][ T7551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.024838][ T3209] usb 6-1: device descriptor read/8, error -71 [ 281.035989][ T5746] usb usb4-port1: unable to enumerate USB device [ 281.045643][ T7551] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 281.133601][ T3209] usb usb6-port1: unable to enumerate USB device [ 281.145512][ T7551] netlink: 132 bytes leftover after parsing attributes in process `syz.4.421'. [ 282.049734][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.276437][ T7574] loop0: detected capacity change from 0 to 2048 [ 282.763426][ T7575] loop2: detected capacity change from 0 to 4096 [ 284.357809][ T7574] loop0: p2 < > p3 < p5 > p4 [ 284.357832][ T7574] loop0: partition table partially beyond EOD, truncated [ 284.357986][ T7574] loop0: p2 start 4278190080 is beyond EOD, truncated [ 284.392106][ T7574] loop0: p4 size 8192 extends beyond EOD, truncated [ 284.413072][ T7574] loop0: p5 size 8192 extends beyond EOD, truncated [ 285.324072][ T7583] ALSA: mixer_oss: invalid OSS volume '' [ 285.442929][ T7575] ntfs3(loop2): Failed to read $UpCase (-4). [ 285.619311][ T7583] loop5: detected capacity change from 0 to 4096 [ 285.634708][ T7583] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.680468][ T7583] EXT4-fs (loop5): Test dummy encryption mode enabled [ 285.680511][ T7583] EXT4-fs (loop5): invalid inodes per group: 0 [ 286.624387][ T7590] netlink: 'syz.4.428': attribute type 39 has an invalid length. [ 287.081160][ T7591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.684311][ T5771] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 288.874821][ T5746] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 288.874963][ T5771] usb 7-1: device descriptor read/64, error -71 [ 289.027424][ T5746] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 289.028515][ T5746] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.028535][ T5746] usb 6-1: config 0 has no interface number 0 [ 289.049693][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.049722][ T5746] usb 6-1: Product: syz [ 289.049741][ T5746] usb 6-1: Manufacturer: syz [ 289.049758][ T5746] usb 6-1: SerialNumber: syz [ 289.062544][ T5746] usb 6-1: config 0 descriptor?? [ 289.101557][ T5746] usb 6-1: selecting invalid altsetting 1 [ 289.101672][ T5746] dvb_ttusb_budget: ttusb_init_controller: error [ 289.101683][ T5746] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 289.114925][ T5771] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 289.243880][ T5771] usb 7-1: device descriptor read/64, error -71 [ 289.308745][ T7602] loop5: detected capacity change from 0 to 256 [ 289.366260][ T5771] usb usb7-port1: attempt power cycle [ 289.386900][ T7602] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 289.468030][ T3209] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 289.477518][ T5746] DVB: Unable to find symbol stv0299_attach() [ 289.486157][ T7602] exFAT-fs (loop5): error, data valid size is invalid(-281474976706560) [ 289.644946][ T3209] usb 5-1: Using ep0 maxpacket: 16 [ 289.645713][ T3209] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 289.651564][ T3209] usb 5-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.651602][ T3209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 289.651640][ T3209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.705068][ T5771] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 289.705209][ T980] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 289.708823][ T3209] usb 5-1: config 0 descriptor?? [ 289.725224][ T5771] usb 7-1: device descriptor read/8, error -71 [ 289.777312][ T5746] DVB: Unable to find symbol tda8083_attach() [ 289.777331][ T5746] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 289.840425][ T980] usb 3-1: device descriptor read/64, error -71 [ 289.967851][ T5771] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 289.984748][ T5771] usb 7-1: device descriptor read/8, error -71 [ 290.084239][ T980] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 290.096647][ T5771] usb usb7-port1: unable to enumerate USB device [ 290.191523][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 290.201195][ T3209] usbhid 5-1:0.0: can't add hid device: -71 [ 290.201307][ T3209] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 290.215699][ T980] usb 3-1: device descriptor read/64, error -71 [ 290.248833][ T3209] usb 5-1: USB disconnect, device number 18 [ 290.325114][ T980] usb usb3-port1: attempt power cycle [ 290.577615][ T7629] loop6: detected capacity change from 0 to 512 [ 290.664878][ T980] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 290.685753][ T980] usb 3-1: device descriptor read/8, error -71 [ 290.697015][ T7629] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.697038][ T7629] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 290.736438][ T7629] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 290.737648][ T7629] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 290.738611][ T7629] System zones: 0-2, 18-18, 34-35 [ 290.751259][ T7629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.847984][ T7629] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 290.924253][ T980] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 290.944651][ T980] usb 3-1: device descriptor read/8, error -71 [ 290.989811][ T7629] netlink: 132 bytes leftover after parsing attributes in process `syz.6.440'. [ 291.056379][ T980] usb usb3-port1: unable to enumerate USB device [ 291.270693][ T6771] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.323961][ T980] usb 6-1: USB disconnect, device number 17 [ 291.538503][ T7641] loop4: detected capacity change from 0 to 512 [ 291.711959][ T7647] loop5: detected capacity change from 0 to 2048 [ 291.738364][ T7641] vcan0: tx drop: invalid da for name 0x0004000000400000 [ 291.759134][ T7647] loop5: p2 < > p3 < p5 > p4 [ 291.759163][ T7647] loop5: partition table partially beyond EOD, truncated [ 291.759385][ T7647] loop5: p2 start 4278190080 is beyond EOD, truncated [ 291.776736][ T7647] loop5: p4 size 8192 extends beyond EOD, truncated [ 291.778104][ T5634] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 291.786918][ T7647] loop5: p5 size 8192 extends beyond EOD, truncated [ 292.985186][ T5634] usb 7-1: device descriptor read/64, error -71 [ 293.088797][ T7641] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 293.088823][ T7641] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.094777][ T7650] vhci_hcd: connection closed [ 293.121510][ T7641] vhci_hcd vhci_hcd.0: Device attached [ 293.149728][ T78] vhci_hcd vhci_hcd.4: stop threads [ 293.150121][ T78] vhci_hcd vhci_hcd.4: release socket [ 293.150148][ T78] vhci_hcd vhci_hcd.4: disconnect device [ 293.243380][ T5634] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 293.403684][ T5634] usb 7-1: device descriptor read/64, error -71 [ 293.519901][ T5634] usb usb7-port1: attempt power cycle [ 293.713777][ T7659] overlayfs: fs on './proc' does not support file handles, falling back to index=off,nfs_export=off. [ 293.713802][ T7659] overlayfs: fs on './proc' does not support file handles, falling back to xino=off. [ 293.713817][ T7659] overlayfs: maximum fs stacking depth exceeded [ 293.874334][ T5634] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 293.894350][ T5634] usb 7-1: device descriptor read/8, error -71 [ 294.134332][ T5634] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 294.165616][ T5634] usb 7-1: device descriptor read/8, error -71 [ 294.276341][ T5634] usb usb7-port1: unable to enumerate USB device [ 294.643418][ T7672] loop3: detected capacity change from 0 to 4096 [ 299.513447][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 299.514676][ T7696] netlink: 28 bytes leftover after parsing attributes in process `syz.4.450'. [ 299.574319][ T5746] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 299.725569][ T5746] usb 3-1: Using ep0 maxpacket: 16 [ 299.726563][ T5746] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 299.732176][ T5746] usb 3-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.732214][ T5746] usb 3-1: config 0 interface 0 has no altsetting 0 [ 299.732257][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.747720][ T5746] usb 3-1: config 0 descriptor?? [ 299.826113][ T980] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 299.976518][ T980] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 299.988376][ T980] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.988406][ T980] usb 7-1: config 0 has no interface number 0 [ 299.995772][ T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.995827][ T980] usb 7-1: Product: syz [ 299.995846][ T980] usb 7-1: Manufacturer: syz [ 299.995864][ T980] usb 7-1: SerialNumber: syz [ 300.016260][ T980] usb 7-1: config 0 descriptor?? [ 300.046007][ T980] usb 7-1: selecting invalid altsetting 1 [ 300.046146][ T980] dvb_ttusb_budget: ttusb_init_controller: error [ 300.046158][ T980] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 300.198117][ T5746] usbhid 3-1:0.0: can't add hid device: -71 [ 300.198218][ T5746] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 300.226576][ T5746] usb 3-1: USB disconnect, device number 16 [ 300.258418][ T7709] loop6: detected capacity change from 0 to 256 [ 300.350794][ T7709] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 300.401378][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 300.405766][ T5739] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 300.480055][ T7709] exFAT-fs (loop6): error, data valid size is invalid(-281474976706560) [ 300.499720][ T980] DVB: Unable to find symbol stv0299_attach() [ 300.508925][ T7720] ipvlan2: entered allmulticast mode [ 300.508946][ T7720] syz_tun: entered allmulticast mode [ 300.566039][ T5739] usb 1-1: Using ep0 maxpacket: 32 [ 300.568970][ T5739] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 300.579123][ T5739] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 300.579154][ T5739] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 300.579184][ T5739] usb 1-1: config 0 interface 0 has no altsetting 0 [ 300.594052][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.594081][ T5739] usb 1-1: Product: syz [ 300.594100][ T5739] usb 1-1: Manufacturer: syz [ 300.594118][ T5739] usb 1-1: SerialNumber: syz [ 300.616837][ T5739] usb 1-1: config 0 descriptor?? [ 300.870317][ T980] DVB: Unable to find symbol tda8083_attach() [ 300.870336][ T980] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 300.886364][ T5746] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 301.041077][ T5746] usb 5-1: unable to get BOS descriptor or descriptor too short [ 301.054336][ T5746] usb 5-1: not running at top speed; connect to a high speed hub [ 301.054402][ T5746] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 301.059475][ T5746] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 301.059503][ T5746] usb 5-1: config 0 has no interface number 0 [ 301.059572][ T5746] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 301.059607][ T5746] usb 5-1: config 0 interface 88 has no altsetting 0 [ 301.067842][ T5739] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 301.067874][ T5739] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 301.100282][ T5746] usb 5-1: language id specifier not provided by device, defaulting to English [ 301.127144][ T5739] usb 1-1: USB disconnect, device number 17 [ 301.149616][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 301.149647][ T5746] usb 5-1: Product: syz [ 301.149666][ T5746] usb 5-1: SerialNumber: syz [ 301.202518][ T5746] usb 5-1: config 0 descriptor?? [ 301.203143][ T7725] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.429938][ T7734] loop3: detected capacity change from 0 to 1024 [ 301.438344][ T7734] EXT4-fs: Ignoring removed bh option [ 301.455410][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 301.495204][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.495888][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.520772][ T7736] ipvlan2: entered allmulticast mode [ 301.531040][ T7734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.540120][ T980] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 301.674307][ T980] usb 3-1: device descriptor read/64, error -71 [ 302.340550][ T980] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 302.465058][ T980] usb 3-1: device descriptor read/64, error -71 [ 302.574422][ T980] usb usb3-port1: attempt power cycle [ 302.690543][ T5746] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input8 [ 302.760291][ T5747] usb 7-1: USB disconnect, device number 15 [ 302.762611][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.867332][ T5746] usb 5-1: USB disconnect, device number 19 [ 302.867385][ C1] usb_acecad 5-1:0.88: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 302.936073][ T980] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 302.955724][ T980] usb 3-1: device descriptor read/8, error -71 [ 303.141213][ T6647] udevd[6647]: Error opening device "/dev/input/event4": No such file or directory [ 303.141476][ T6647] udevd[6647]: Unable to EVIOCGABS device "/dev/input/event4" [ 303.141585][ T6647] udevd[6647]: Unable to EVIOCGABS device "/dev/input/event4" [ 303.327617][ T980] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 303.346048][ T980] usb 3-1: device descriptor read/8, error -71 [ 304.232237][ T980] usb usb3-port1: unable to enumerate USB device [ 306.543757][ T7772] loop6: detected capacity change from 0 to 4096 [ 307.859875][ T7782] loop5: detected capacity change from 0 to 4096 [ 309.577711][ T7792] loop2: detected capacity change from 0 to 512 [ 309.601547][ T7789] loop0: detected capacity change from 0 to 512 [ 309.605492][ T7792] EXT4-fs (loop2): Test dummy encryption mode enabled [ 309.649340][ T7792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e0ad, mo2=0002] [ 309.651727][ T7792] System zones: 1-12 [ 309.679067][ T7789] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 309.679161][ T7789] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 310.369649][ T7789] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 310.373162][ T7789] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 310.374103][ T7789] System zones: 0-2, 18-18, 34-35 [ 310.416795][ T7792] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.496174][ T7789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.595310][ T7792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.472'. [ 310.595337][ T7792] netlink: 9456 bytes leftover after parsing attributes in process `syz.2.472'. [ 310.595359][ T7792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.472'. [ 312.373197][ T7811] EXT4-fs error (device loop2): __ext4_add_entry:2414: inode #2: comm syz.2.472: Directory hole found for htree leaf block 0 [ 312.451051][ T7811] EXT4-fs (loop2): Remounting filesystem read-only [ 312.469454][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.924514][ T5747] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 313.080943][ T5747] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 313.082456][ T5747] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 313.082485][ T5747] usb 6-1: config 0 has no interface number 0 [ 313.136472][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.136498][ T5747] usb 6-1: Product: syz [ 313.136512][ T5747] usb 6-1: Manufacturer: syz [ 313.136526][ T5747] usb 6-1: SerialNumber: syz [ 313.171215][ T5747] usb 6-1: config 0 descriptor?? [ 313.192672][ T5747] usb 6-1: selecting invalid altsetting 1 [ 313.192818][ T5747] dvb_ttusb_budget: ttusb_init_controller: error [ 313.192832][ T5747] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 313.556904][ T7816] loop5: detected capacity change from 0 to 256 [ 315.063613][ T7836] loop4: detected capacity change from 0 to 2048 [ 315.071082][ T7836] nilfs2: Unknown parameter '(?` [ 315.071082][ T7836] ' [ 316.255656][ T5747] DVB: Unable to find symbol stv0299_attach() [ 317.303782][ T7845] loop6: detected capacity change from 0 to 2048 [ 317.313370][ T7845] nilfs2: Unknown parameter '(?` [ 317.313370][ T7845] ' [ 318.249647][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.249713][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.307751][ T5747] DVB: Unable to find symbol tda8083_attach() [ 318.307777][ T5747] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 318.344790][ T5747] usb 6-1: USB disconnect, device number 18 [ 318.393732][ T5760] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 318.561792][ T5760] usb 1-1: Using ep0 maxpacket: 32 [ 318.562714][ T5760] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 318.582794][ T5760] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.582864][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.627947][ T5760] usb 1-1: config 0 descriptor?? [ 318.695894][ T5623] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 319.663734][ T7862] loop3: detected capacity change from 0 to 2048 [ 319.673433][ T7862] nilfs2: Unknown parameter '(?` [ 319.673433][ T7862] ' [ 320.727243][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 322.999941][ T5747] usb 1-1: USB disconnect, device number 18 [ 323.387061][ T7875] loop0: detected capacity change from 0 to 512 [ 323.410210][ T7875] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 323.410238][ T7875] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 323.434763][ T7875] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 323.437354][ T7875] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 323.437465][ T7875] System zones: 0-2, 18-18, 34-35 [ 323.465085][ T7875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.582934][ T7875] netlink: 132 bytes leftover after parsing attributes in process `syz.0.490'. [ 323.878627][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.854708][ T7891] loop4: detected capacity change from 0 to 40427 [ 324.983196][ T7891] F2FS-fs (loop4): invalid crc value [ 325.111779][ T7891] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 325.149883][ T7891] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 325.149919][ T7891] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 325.149950][ T7891] F2FS-fs (loop4): Start checkpoint disabled! [ 325.346969][ T7891] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 325.373971][ T7891] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 325.606035][ T7891] bio_check_eod: 72 callbacks suppressed [ 325.606062][ T7891] syz.4.483: attempt to access beyond end of device [ 325.606062][ T7891] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 325.933785][ T7901] syz.4.483: attempt to access beyond end of device [ 325.933785][ T7901] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 325.936926][ T7901] syz.4.483: attempt to access beyond end of device [ 325.936926][ T7901] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 325.941735][ T7901] syz.4.483: attempt to access beyond end of device [ 325.941735][ T7901] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 325.943511][ T7901] syz.4.483: attempt to access beyond end of device [ 325.943511][ T7901] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 325.943881][ T7901] syz.4.483: attempt to access beyond end of device [ 325.943881][ T7901] loop4: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 325.948979][ T7901] syz.4.483: attempt to access beyond end of device [ 325.948979][ T7901] loop4: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 325.951353][ T7901] syz.4.483: attempt to access beyond end of device [ 325.951353][ T7901] loop4: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 325.953601][ T7901] syz.4.483: attempt to access beyond end of device [ 325.953601][ T7901] loop4: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 325.953979][ T7901] syz.4.483: attempt to access beyond end of device [ 325.953979][ T7901] loop4: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 326.527865][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 326.527905][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 326.527923][ T68] Workqueue: writeback wb_workfn (flush-7:4) [ 326.527968][ T68] Call Trace: [ 326.527978][ T68] [ 326.527990][ T68] dump_stack_lvl+0xe8/0x150 [ 326.528035][ T68] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 326.528085][ T68] f2fs_write_end_bio+0x1211/0x16e0 [ 326.528122][ T68] ? blkg_put+0x22/0x240 [ 326.528186][ T68] __submit_merged_bio+0x258/0x6a0 [ 326.528227][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.528260][ T68] ? rcu_is_watching+0x16/0xb0 [ 326.528313][ T68] __submit_merged_write_cond+0x3c9/0x4e0 [ 326.528371][ T68] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 326.528433][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.528480][ T68] f2fs_write_data_pages+0x2a27/0x36f0 [ 326.528583][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 326.528633][ T68] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 326.528717][ T68] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 326.528793][ T68] ? __lock_acquire+0x747/0x2de0 [ 326.528835][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.528885][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.528918][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 326.528950][ T68] do_writepages+0x338/0x560 [ 326.528992][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.529025][ T68] ? reacquire_held_locks+0x117/0x1a0 [ 326.529061][ T68] ? writeback_sb_inodes+0x450/0x1b00 [ 326.529109][ T68] __writeback_single_inode+0x136/0x1220 [ 326.529153][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.529185][ T68] ? do_raw_spin_unlock+0xf5/0x200 [ 326.529234][ T68] writeback_sb_inodes+0x9de/0x1b00 [ 326.529272][ T68] ? __lock_acquire+0x747/0x2de0 [ 326.529344][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 326.529446][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.529478][ T68] ? rcu_is_watching+0x16/0xb0 [ 326.529513][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.529545][ T68] ? queue_io+0x2d3/0x470 [ 326.529590][ T68] wb_writeback+0x41c/0xad0 [ 326.529633][ T68] ? queue_io+0x241/0x470 [ 326.529681][ T68] ? __pfx_wb_writeback+0x10/0x10 [ 326.529718][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 326.529784][ T68] wb_workfn+0x431/0x10f0 [ 326.529844][ T68] ? __pfx_wb_workfn+0x10/0x10 [ 326.529884][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.529916][ T68] ? trace_hrtimer_start+0x82/0x200 [ 326.529950][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.529982][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 326.530036][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.530068][ T68] ? lock_acquire+0x115/0x350 [ 326.530099][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.530142][ T68] ? rcu_is_watching+0x16/0xb0 [ 326.530177][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.530211][ T68] ? process_scheduled_works+0x97a/0x1630 [ 326.530251][ T68] process_scheduled_works+0xc3d/0x1630 [ 326.530289][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.530373][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.530421][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.530453][ T68] ? assign_work+0x3cf/0x5d0 [ 326.530500][ T68] worker_thread+0xa47/0xfb0 [ 326.530586][ T68] kthread+0x38b/0x480 [ 326.530615][ T68] ? __pfx_worker_thread+0x10/0x10 [ 326.530652][ T68] ? __pfx_kthread+0x10/0x10 [ 326.530683][ T68] ret_from_fork+0x514/0xb70 [ 326.530716][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 326.530742][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.530774][ T68] ? __switch_to+0xc89/0x1420 [ 326.530820][ T68] ? __pfx_kthread+0x10/0x10 [ 326.530851][ T68] ret_from_fork_asm+0x1a/0x30 [ 326.530921][ T68] [ 328.728815][ T68] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 328.970984][ T7914] FAULT_INJECTION: forcing a failure. [ 328.970984][ T7914] name failslab, interval 1, probability 0, space 0, times 0 [ 328.971026][ T7914] CPU: 1 UID: 0 PID: 7914 Comm: syz.2.489 Not tainted syzkaller #0 PREEMPT(full) [ 328.971055][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 328.971071][ T7914] Call Trace: [ 328.971081][ T7914] [ 328.971092][ T7914] dump_stack_lvl+0xe8/0x150 [ 328.971142][ T7914] should_fail_ex+0x410/0x560 [ 328.971182][ T7914] should_failslab+0xa8/0x100 [ 328.971223][ T7914] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 328.971251][ T7914] ? __d_lookup+0x66/0x790 [ 328.971279][ T7914] ? __d_alloc+0x37/0x6f0 [ 328.971307][ T7914] ? __d_alloc+0x37/0x6f0 [ 328.971340][ T7914] __d_alloc+0x37/0x6f0 [ 328.971373][ T7914] d_alloc+0x4b/0x190 [ 328.971395][ T7914] ? lookup_one_qstr_excl+0xc4/0x360 [ 328.971426][ T7914] lookup_one_qstr_excl+0xd8/0x360 [ 328.971453][ T7914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.971492][ T7914] filename_create+0x20e/0x370 [ 328.971531][ T7914] ? __pfx_filename_create+0x10/0x10 [ 328.971574][ T7914] filename_mkdirat+0xd2/0x510 [ 328.971614][ T7914] ? __pfx_filename_mkdirat+0x10/0x10 [ 328.971650][ T7914] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.971683][ T7914] ? do_getname+0x151/0x250 [ 328.971723][ T7914] __se_sys_mkdirat+0x35/0x150 [ 328.971760][ T7914] do_syscall_64+0x166/0x520 [ 328.971799][ T7914] ? trace_irq_disable+0x3b/0x140 [ 328.971829][ T7914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.971864][ T7914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.971892][ T7914] RIP: 0033:0x7fe97b19e159 [ 328.971916][ T7914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.971938][ T7914] RSP: 002b:00007fe97c08c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 328.971966][ T7914] RAX: ffffffffffffffda RBX: 00007fe97b425fa0 RCX: 00007fe97b19e159 [ 328.971987][ T7914] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 328.972007][ T7914] RBP: 00007fe97c08c090 R08: 0000000000000000 R09: 0000000000000000 [ 328.972025][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.972041][ T7914] R13: 00007fe97b426038 R14: 00007fe97b425fa0 R15: 00007fff027ce838 [ 328.972083][ T7914] [ 330.381459][ T7921] loop0: detected capacity change from 0 to 4096 [ 333.197669][ T7960] loop5: detected capacity change from 0 to 512 [ 333.212587][ T7953] netlink: 'syz.2.503': attribute type 29 has an invalid length. [ 333.231571][ T7953] netlink: 'syz.2.503': attribute type 29 has an invalid length. [ 333.234394][ T5771] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 333.240018][ T7953] netlink: 'syz.2.503': attribute type 29 has an invalid length. [ 333.258146][ T7960] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 333.258173][ T7960] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 333.263184][ T7960] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 333.294305][ T7960] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 333.294410][ T7960] System zones: 0-2, 18-18, 34-35 [ 333.328041][ T7960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.462669][ T7960] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 333.512191][ T7973] netlink: 132 bytes leftover after parsing attributes in process `syz.5.505'. [ 333.594108][ T5771] usb 4-1: Using ep0 maxpacket: 32 [ 333.594866][ T5771] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 333.600386][ T5771] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.600439][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.609169][ T5771] usb 4-1: config 0 descriptor?? [ 333.874080][ T7976] loop6: detected capacity change from 0 to 40427 [ 333.980520][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 334.069303][ T7976] F2FS-fs (loop6): invalid crc value [ 334.092436][ T3209] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 334.302909][ T7976] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 334.305337][ T7976] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 334.305366][ T7976] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 334.305397][ T7976] F2FS-fs (loop6): Start checkpoint disabled! [ 334.311510][ T7976] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 334.330383][ T7976] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 334.431098][ T7976] bio_check_eod: 72 callbacks suppressed [ 334.431156][ T7976] syz.6.507: attempt to access beyond end of device [ 334.431156][ T7976] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 334.455815][ T3209] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 334.459108][ T3209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.459137][ T3209] usb 5-1: Product: syz [ 334.459164][ T3209] usb 5-1: Manufacturer: syz [ 334.459182][ T3209] usb 5-1: SerialNumber: syz [ 334.725851][ T3209] usb 5-1: config 0 descriptor?? [ 334.998134][ T7990] syz.6.507: attempt to access beyond end of device [ 334.998134][ T7990] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 334.999563][ T7990] syz.6.507: attempt to access beyond end of device [ 334.999563][ T7990] loop6: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 335.000346][ T7990] syz.6.507: attempt to access beyond end of device [ 335.000346][ T7990] loop6: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 335.000765][ T7990] syz.6.507: attempt to access beyond end of device [ 335.000765][ T7990] loop6: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 335.001195][ T7990] syz.6.507: attempt to access beyond end of device [ 335.001195][ T7990] loop6: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 335.002253][ T7990] syz.6.507: attempt to access beyond end of device [ 335.002253][ T7990] loop6: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 335.002672][ T7990] syz.6.507: attempt to access beyond end of device [ 335.002672][ T7990] loop6: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 335.003093][ T7990] syz.6.507: attempt to access beyond end of device [ 335.003093][ T7990] loop6: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 335.003560][ T7990] syz.6.507: attempt to access beyond end of device [ 335.003560][ T7990] loop6: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 335.953985][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.121965][ T7997] loop2: detected capacity change from 0 to 1024 [ 336.130899][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 336.140935][ T7997] ext4: Unknown parameter 'smackfshat' [ 336.146772][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 336.146805][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 336.146823][ T68] Workqueue: writeback wb_workfn (flush-7:6) [ 336.146866][ T68] Call Trace: [ 336.146876][ T68] [ 336.146887][ T68] dump_stack_lvl+0xe8/0x150 [ 336.146929][ T68] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 336.146976][ T68] f2fs_write_end_bio+0x1211/0x16e0 [ 336.147011][ T68] ? blkg_put+0x22/0x240 [ 336.147068][ T68] __submit_merged_bio+0x258/0x6a0 [ 336.147107][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.147140][ T68] ? rcu_is_watching+0x16/0xb0 [ 336.147182][ T68] __submit_merged_write_cond+0x3c9/0x4e0 [ 336.147233][ T68] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 336.147290][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.147336][ T68] f2fs_write_data_pages+0x2a27/0x36f0 [ 336.147408][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 336.147453][ T68] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 336.147530][ T68] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 336.147594][ T68] ? __lock_acquire+0x747/0x2de0 [ 336.147633][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.147673][ T68] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 336.147709][ T68] ? f2fs_update_inode+0x1394/0x25c0 [ 336.147746][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 336.147776][ T68] do_writepages+0x338/0x560 [ 336.147815][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.147847][ T68] ? reacquire_held_locks+0x117/0x1a0 [ 336.147881][ T68] ? writeback_sb_inodes+0x450/0x1b00 [ 336.147927][ T68] __writeback_single_inode+0x136/0x1220 [ 336.147969][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.148001][ T68] ? do_raw_spin_unlock+0xf5/0x200 [ 336.148046][ T68] writeback_sb_inodes+0x9de/0x1b00 [ 336.148083][ T68] ? __lock_acquire+0x747/0x2de0 [ 336.148130][ T68] ? lock_acquire+0x115/0x350 [ 336.148168][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 336.148256][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.148287][ T68] ? rcu_is_watching+0x16/0xb0 [ 336.148325][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.148357][ T68] ? queue_io+0x2d3/0x470 [ 336.148399][ T68] wb_writeback+0x41c/0xad0 [ 336.148441][ T68] ? queue_io+0x241/0x470 [ 336.148486][ T68] ? __pfx_wb_writeback+0x10/0x10 [ 336.148542][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 336.148602][ T68] wb_workfn+0x431/0x10f0 [ 336.148656][ T68] ? __pfx_wb_workfn+0x10/0x10 [ 336.148694][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.148724][ T68] ? trace_hrtimer_start+0x82/0x200 [ 336.148757][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.148788][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 336.148839][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.148870][ T68] ? lock_acquire+0x115/0x350 [ 336.148900][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.148940][ T68] ? rcu_is_watching+0x16/0xb0 [ 336.148974][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.149008][ T68] ? process_scheduled_works+0x97a/0x1630 [ 336.149046][ T68] process_scheduled_works+0xc3d/0x1630 [ 336.149083][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.149151][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 336.149195][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.149226][ T68] ? assign_work+0x3cf/0x5d0 [ 336.149269][ T68] worker_thread+0xa47/0xfb0 [ 336.149345][ T68] kthread+0x38b/0x480 [ 336.149373][ T68] ? __pfx_worker_thread+0x10/0x10 [ 336.149408][ T68] ? __pfx_kthread+0x10/0x10 [ 336.149439][ T68] ret_from_fork+0x514/0xb70 [ 336.149469][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 336.149495][ T68] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.149526][ T68] ? __switch_to+0xc89/0x1420 [ 336.149568][ T68] ? __pfx_kthread+0x10/0x10 [ 336.149598][ T68] ret_from_fork_asm+0x1a/0x30 [ 336.149660][ T68] [ 336.191369][ T68] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 336.287790][ T3209] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 020 [ 336.427715][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 336.458049][ T10] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 336.518123][ T10] usb 1-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.518165][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 336.518232][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.595453][ T3209] (null): failure reading functionality [ 337.547133][ T7970] udc dummy_udc.0: unsupported command 'c' [ 337.673219][ T10] usb 1-1: config 0 descriptor?? [ 337.678685][ T10] usb 1-1: can't set config #0, error -71 [ 337.680714][ T3209] i2c i2c-1: connected i2c-tiny-usb device [ 337.740181][ T980] usb 4-1: USB disconnect, device number 15 [ 337.801770][ T8009] loop2: detected capacity change from 0 to 1024 [ 337.815684][ T8009] EXT4-fs: Ignoring removed bh option [ 337.886571][ T8009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.597720][ T10] usb 1-1: USB disconnect, device number 19 [ 339.264275][ T5837] usb 5-1: USB disconnect, device number 20 [ 339.351154][ T8020] netlink: 'syz.0.515': attribute type 12 has an invalid length. [ 339.546124][ T8026] loop5: detected capacity change from 0 to 256 [ 339.766397][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.155177][ T8036] loop4: detected capacity change from 0 to 128 [ 340.228929][ T8036] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.249704][ T8036] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 340.529451][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.512'. [ 341.166104][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz.6.512'. [ 341.279045][ T8041] bond1: entered promiscuous mode [ 341.279516][ T8041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.368621][ T8055] bond1: entered allmulticast mode [ 341.538955][ T8051] bridge1: entered promiscuous mode [ 341.542207][ T8051] bridge1: entered allmulticast mode [ 341.542837][ T8051] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 341.577263][ T5626] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.693564][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 341.712272][ T8065] kernel profiling enabled (shift: 62) [ 341.712307][ T8065] profiling shift: 62 too large [ 341.843339][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 341.844204][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 341.844218][ T5747] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 341.847133][ T10] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 341.847162][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.848178][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 341.848207][ T10] usb 7-1: SerialNumber: syz [ 341.914305][ T10] usb 7-1: 0:2 : does not exist [ 341.996880][ T5747] usb 1-1: Using ep0 maxpacket: 8 [ 341.997761][ T5747] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 341.997810][ T5747] usb 1-1: no configurations [ 341.997824][ T5747] usb 1-1: can't read configurations, error -22 [ 342.083767][ T3209] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 342.127204][ T5747] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 342.244361][ T3209] usb 5-1: Using ep0 maxpacket: 16 [ 342.246296][ T3209] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 342.247709][ T3209] usb 5-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.247746][ T3209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 342.247784][ T3209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.284143][ T5747] usb 1-1: Using ep0 maxpacket: 8 [ 342.285158][ T5747] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 342.285200][ T5747] usb 1-1: no configurations [ 342.285215][ T5747] usb 1-1: can't read configurations, error -22 [ 342.285511][ T5747] usb usb1-port1: attempt power cycle [ 342.334260][ T3209] usb 5-1: config 0 descriptor?? [ 342.353467][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 342.404634][ T31] audit: type=1800 audit(1790816819.921:2): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.518" name="file1" dev="loop5" ino=1048664 res=0 errno=0 [ 342.445840][ T5739] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 342.513541][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 342.516942][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 342.540437][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.540483][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.566209][ T10] usb 4-1: config 0 descriptor?? [ 342.595155][ T5739] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 342.602769][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.602806][ T5739] usb 3-1: Product: syz [ 342.602824][ T5739] usb 3-1: Manufacturer: syz [ 342.602842][ T5739] usb 3-1: SerialNumber: syz [ 342.623440][ T5747] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 342.644793][ T5747] usb 1-1: Using ep0 maxpacket: 8 [ 342.646364][ T5747] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 342.646405][ T5747] usb 1-1: no configurations [ 342.646417][ T5747] usb 1-1: can't read configurations, error -22 [ 342.677074][ T5739] usb 3-1: config 0 descriptor?? [ 342.710761][ T5739] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 021 [ 342.774284][ T5747] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 342.796253][ T5747] usb 1-1: Using ep0 maxpacket: 8 [ 342.798323][ T5747] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 342.798370][ T5747] usb 1-1: no configurations [ 342.798410][ T5747] usb 1-1: can't read configurations, error -22 [ 342.825381][ T5747] usb usb1-port1: unable to enumerate USB device [ 343.040515][ T3209] usbhid 5-1:0.0: can't add hid device: -71 [ 343.040638][ T3209] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 343.062916][ T3209] usb 5-1: USB disconnect, device number 21 [ 343.116121][ T5739] (null): failure reading functionality [ 343.204835][ T5739] i2c i2c-1: connected i2c-tiny-usb device [ 343.330918][ T3209] usb 7-1: USB disconnect, device number 16 [ 343.455244][ T8076] udc dummy_udc.0: unsupported command 'c' [ 343.830442][ T8095] 9p: Bad value for 'rfdno' [ 343.961056][ T8099] input: syz0 as /devices/virtual/input/input9 [ 344.404109][ T5739] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 344.564742][ T5739] usb 7-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b [ 344.565957][ T5739] usb 7-1: config 227 has an invalid interface number: 20 but max is 0 [ 344.565986][ T5739] usb 7-1: config 227 has no interface number 0 [ 344.566032][ T5739] usb 7-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 344.566067][ T5739] usb 7-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024 [ 344.566100][ T5739] usb 7-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024 [ 344.566130][ T5739] usb 7-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 344.566164][ T5739] usb 7-1: config 227 interface 20 has no altsetting 0 [ 344.569873][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.569905][ T5739] usb 7-1: Product: syz [ 344.569923][ T5739] usb 7-1: Manufacturer: syz [ 344.569942][ T5739] usb 7-1: SerialNumber: syz [ 344.638092][ T8102] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 344.768884][ T8099] orangefs_mount: mount request failed with -4 [ 344.783669][ T5747] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 344.935018][ T5747] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 345.018692][ T8110] loop0: detected capacity change from 0 to 8192 [ 345.022410][ T8110] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 345.147928][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.147961][ T5747] usb 6-1: Product: syz [ 345.147997][ T5747] usb 6-1: Manufacturer: syz [ 345.148011][ T5747] usb 6-1: SerialNumber: syz [ 345.866368][ T5760] usb 4-1: USB disconnect, device number 16 [ 346.006833][ T3209] usb 3-1: USB disconnect, device number 21 [ 346.071970][ T5747] usb 6-1: config 0 descriptor?? [ 346.108227][ T5739] usb 7-1: USB disconnect, device number 17 [ 346.117709][ T5747] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 019 [ 346.131728][ T980] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 346.215605][ T8122] bridge_slave_0: left allmulticast mode [ 346.215637][ T8122] bridge_slave_0: left promiscuous mode [ 346.215871][ T8122] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.266121][ T8122] bridge_slave_1: left allmulticast mode [ 346.266150][ T8122] bridge_slave_1: left promiscuous mode [ 346.268072][ T8122] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.309000][ T980] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 346.311309][ T8122] bond0: (slave bond_slave_0): Releasing backup interface [ 346.322911][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.336351][ T980] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 346.336382][ T980] usb 1-1: Product: syz [ 346.336401][ T980] usb 1-1: Manufacturer: syz [ 346.336446][ T980] usb 1-1: SerialNumber: syz [ 346.663115][ T5747] (null): failure reading functionality [ 346.812394][ T8128] loop2: detected capacity change from 0 to 4096 [ 346.910281][ T8122] bond0: (slave bond_slave_1): Releasing backup interface [ 347.265596][ T980] usb 1-1: config 0 descriptor?? [ 348.140312][ T8105] udc dummy_udc.0: unsupported command 'c' [ 348.227544][ T8122] team0: Port device team_slave_0 removed [ 348.234116][ T980] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 348.234431][ T980] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 348.234503][ T980] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 348.241092][ T980] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 348.259419][ T5747] i2c i2c-1: connected i2c-tiny-usb device [ 348.280477][ T980] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 348.305784][ T980] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 348.344814][ T980] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 348.349921][ T8122] team0: Port device team_slave_1 removed [ 348.369295][ T8122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.369315][ T8122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.395119][ T980] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 348.409756][ T980] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 348.429985][ T8122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.430012][ T8122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.431340][ T980] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 348.521593][ T8122] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 348.525203][ T980] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 348.590200][ T8123] team0: Mode changed to "activebackup" [ 348.935666][ T8142] loop6: detected capacity change from 0 to 64 [ 348.980810][ T8142] hfs: invalid btree extent records (0 size) [ 348.980905][ T8142] hfs: unable to open catalog tree [ 348.980916][ T8142] hfs: can't find a HFS filesystem on dev loop6 [ 349.093551][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 349.256477][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 349.257855][ T10] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 349.257886][ T10] usb 3-1: config 0 has no interface number 0 [ 349.257930][ T10] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.261608][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.261631][ T10] usb 3-1: Product: syz [ 349.261645][ T10] usb 3-1: Manufacturer: syz [ 349.261658][ T10] usb 3-1: SerialNumber: syz [ 349.345902][ T10] usb 3-1: config 0 descriptor?? [ 349.364792][ T10] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 349.462090][ T5771] usb 6-1: USB disconnect, device number 19 [ 349.470100][ T5837] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 349.623499][ T5837] usb 7-1: Using ep0 maxpacket: 8 [ 349.628073][ T5837] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 349.630589][ T5837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.630617][ T5837] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 349.682875][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.682909][ T5837] usb 7-1: Product: syz [ 349.682929][ T5837] usb 7-1: Manufacturer: syz [ 349.682947][ T5837] usb 7-1: SerialNumber: syz [ 349.881541][ T5837] usb 7-1: config 0 descriptor?? [ 349.960232][ T5747] usb 3-1: USB disconnect, device number 22 [ 349.993145][ T5747] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 350.032500][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 350.256468][ T5771] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 350.406169][ T5771] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 350.418367][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 350.418397][ T5771] usb 6-1: Product: syz [ 350.418415][ T5771] usb 6-1: Manufacturer: syz [ 350.418434][ T5771] usb 6-1: SerialNumber: syz [ 350.461235][ T5771] usb 6-1: config 0 descriptor?? [ 350.738451][ T5739] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 350.858599][ T5771] usb 6-1: USB disconnect, device number 20 [ 350.877384][ T5837] usb 1-1: USB disconnect, device number 24 [ 350.884774][ T5739] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 350.914352][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.914378][ T5739] usb 4-1: Product: syz [ 350.914391][ T5739] usb 4-1: Manufacturer: syz [ 350.914405][ T5739] usb 4-1: SerialNumber: syz [ 351.022918][ T5739] usb 4-1: config 0 descriptor?? [ 351.055421][ T5747] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 351.099397][ T5739] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 017 [ 351.119621][ T5837] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 351.138559][ T5837] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 351.202960][ T5837] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 351.214233][ T5747] usb 3-1: Using ep0 maxpacket: 32 [ 351.215968][ T5747] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 351.218916][ T5747] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.218966][ T5747] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 351.219030][ T5747] usb 3-1: config 0 interface 0 has no altsetting 0 [ 351.219062][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.232409][ T5747] usb 3-1: config 0 descriptor?? [ 351.305150][ T5837] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 351.312646][ T5837] keyspan 1-1:0.0: device disconnected [ 351.382895][ T5747] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 351.525449][ T5739] (null): failure reading functionality [ 351.541078][ T5739] i2c i2c-1: connected i2c-tiny-usb device [ 351.811719][ T8159] udc dummy_udc.0: soft-connect without a gadget driver [ 352.026613][ T5837] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 352.173388][ T5837] usb 5-1: Using ep0 maxpacket: 32 [ 352.174276][ T5893] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 352.176010][ T5837] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 352.178479][ T5837] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.178520][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.229599][ T5837] usb 5-1: config 0 descriptor?? [ 352.325097][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 352.328762][ T5739] usb 7-1: USB disconnect, device number 18 [ 352.332173][ T5893] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 352.339635][ T5893] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 352.339674][ T5893] usb 1-1: can't read configurations, error -22 [ 352.474398][ T5893] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 352.623994][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 352.647382][ T5893] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 352.648738][ T5893] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 352.648785][ T5893] usb 1-1: can't read configurations, error -22 [ 352.649255][ T5893] usb usb1-port1: attempt power cycle [ 352.660520][ T5613] bridge0: port 3(syz_tun) entered disabled state [ 352.692858][ T5613] syz_tun (unregistering): left allmulticast mode [ 352.692889][ T5613] syz_tun (unregistering): left promiscuous mode [ 352.692984][ T5613] bridge0: port 3(syz_tun) entered disabled state [ 352.773984][ T5739] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 352.882483][ T3347] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.926016][ T5739] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 352.928747][ T5739] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.928805][ T5739] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.935144][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.935174][ T5739] usb 7-1: Product: syz [ 352.935193][ T5739] usb 7-1: Manufacturer: syz [ 352.935211][ T5739] usb 7-1: SerialNumber: syz [ 352.987247][ T5893] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 353.007301][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 353.008023][ T5893] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 353.029331][ T5893] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 353.029373][ T5893] usb 1-1: can't read configurations, error -22 [ 353.076828][ T3347] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.155834][ T5893] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 353.172217][ T3347] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.185818][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 353.186384][ T5893] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 353.188897][ T5893] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 353.188936][ T5893] usb 1-1: can't read configurations, error -22 [ 353.189340][ T5893] usb usb1-port1: unable to enumerate USB device [ 353.318240][ T3347] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.355449][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.362319][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.379440][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.394644][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.395325][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.468819][ T10] usb 4-1: USB disconnect, device number 17 [ 353.832561][ T3347] ip6gretap0: left allmulticast mode [ 353.832594][ T3347] ip6gretap0: left promiscuous mode [ 353.843724][ T3347] bridge0: port 4(ip6gretap0) entered disabled state [ 353.899640][ T3347] bridge_slave_1: left allmulticast mode [ 353.899672][ T3347] bridge_slave_1: left promiscuous mode [ 353.899901][ T3347] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.984664][ T8200] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5629] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[8200] [ 354.181488][ T3347] bridge_slave_0: left allmulticast mode [ 354.182242][ T3347] bridge_slave_0: left promiscuous mode [ 354.220718][ T3347] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.571365][ T5893] usb 3-1: USB disconnect, device number 23 [ 355.474822][ T4929] Bluetooth: hci0: command tx timeout [ 355.899745][ T5746] usb 5-1: USB disconnect, device number 22 [ 355.943756][ T5747] usb 7-1: USB disconnect, device number 19 [ 356.556466][ T8227] 9pnet_virtio: no channels available for device 127.0.0.1 [ 356.707181][ T8227] loop2: detected capacity change from 0 to 1024 [ 356.714991][ T8227] ext4: Unknown parameter 'smackfsfloor' [ 357.554430][ T4929] Bluetooth: hci0: command tx timeout [ 357.587829][ T3347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.631141][ T3347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.650146][ T3347] bond0 (unregistering): Released all slaves [ 357.900268][ T5746] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 357.915100][ T8236] loop0: detected capacity change from 0 to 40427 [ 357.930950][ T8236] F2FS-fs (loop0): invalid crc value [ 357.997723][ T8236] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 358.003683][ T8236] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 358.003714][ T8236] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 358.003744][ T8236] F2FS-fs (loop0): Start checkpoint disabled! [ 358.018066][ T8236] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 358.020502][ T8236] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 358.079554][ T8236] bio_check_eod: 72 callbacks suppressed [ 358.079578][ T8236] syz.0.573: attempt to access beyond end of device [ 358.079578][ T8236] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 358.240925][ T5746] usb 3-1: Using ep0 maxpacket: 8 [ 358.261311][ T5746] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 358.278367][ T5746] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.278398][ T5746] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 358.280478][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.280507][ T5746] usb 3-1: Product: syz [ 358.280525][ T5746] usb 3-1: Manufacturer: syz [ 358.280543][ T5746] usb 3-1: SerialNumber: syz [ 358.315772][ T5746] usb 3-1: config 0 descriptor?? [ 358.343172][ T8240] syz.0.573: attempt to access beyond end of device [ 358.343172][ T8240] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 358.344956][ T8240] syz.0.573: attempt to access beyond end of device [ 358.344956][ T8240] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 358.345636][ T8240] syz.0.573: attempt to access beyond end of device [ 358.345636][ T8240] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 358.345993][ T8240] syz.0.573: attempt to access beyond end of device [ 358.345993][ T8240] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 358.346357][ T8240] syz.0.573: attempt to access beyond end of device [ 358.346357][ T8240] loop0: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 358.347242][ T8240] syz.0.573: attempt to access beyond end of device [ 358.347242][ T8240] loop0: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 358.347608][ T8240] syz.0.573: attempt to access beyond end of device [ 358.347608][ T8240] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 358.347955][ T8240] syz.0.573: attempt to access beyond end of device [ 358.347955][ T8240] loop0: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 358.348322][ T8240] syz.0.573: attempt to access beyond end of device [ 358.348322][ T8240] loop0: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 358.648652][ T3260] CPU: 0 UID: 0 PID: 3260 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.648696][ T3260] Tainted: [L]=SOFTLOCKUP [ 358.648706][ T3260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 358.648724][ T3260] Workqueue: writeback wb_workfn (flush-7:0) [ 358.648769][ T3260] Call Trace: [ 358.648779][ T3260] [ 358.648791][ T3260] dump_stack_lvl+0xe8/0x150 [ 358.648843][ T3260] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 358.648892][ T3260] f2fs_write_end_bio+0x1211/0x16e0 [ 358.648928][ T3260] ? blkg_put+0x22/0x240 [ 358.648986][ T3260] __submit_merged_bio+0x258/0x6a0 [ 358.649026][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.649066][ T3260] ? rcu_is_watching+0x16/0xb0 [ 358.649109][ T3260] __submit_merged_write_cond+0x3c9/0x4e0 [ 358.649162][ T3260] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 358.649219][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.649261][ T3260] f2fs_write_data_pages+0x2a27/0x36f0 [ 358.649332][ T3260] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 358.649378][ T3260] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 358.649452][ T3260] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 358.649517][ T3260] ? __lock_acquire+0x747/0x2de0 [ 358.649557][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.649597][ T3260] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 358.649634][ T3260] ? f2fs_update_inode+0x1394/0x25c0 [ 358.649671][ T3260] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 358.649701][ T3260] do_writepages+0x338/0x560 [ 358.649740][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.649771][ T3260] ? reacquire_held_locks+0x117/0x1a0 [ 358.649813][ T3260] ? writeback_sb_inodes+0x450/0x1b00 [ 358.649860][ T3260] __writeback_single_inode+0x136/0x1220 [ 358.649904][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.649936][ T3260] ? do_raw_spin_unlock+0xf5/0x200 [ 358.649982][ T3260] writeback_sb_inodes+0x9de/0x1b00 [ 358.650020][ T3260] ? __lock_acquire+0x747/0x2de0 [ 358.650067][ T3260] ? lock_acquire+0x115/0x350 [ 358.650105][ T3260] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 358.650193][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.650225][ T3260] ? rcu_is_watching+0x16/0xb0 [ 358.650259][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.650291][ T3260] ? queue_io+0x2d3/0x470 [ 358.650333][ T3260] wb_writeback+0x41c/0xad0 [ 358.650375][ T3260] ? queue_io+0x241/0x470 [ 358.650421][ T3260] ? __pfx_wb_writeback+0x10/0x10 [ 358.650457][ T3260] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.650517][ T3260] wb_workfn+0x431/0x10f0 [ 358.650571][ T3260] ? __pfx_wb_workfn+0x10/0x10 [ 358.650609][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.650641][ T3260] ? trace_hrtimer_start+0x82/0x200 [ 358.650673][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.650706][ T3260] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.650757][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.650788][ T3260] ? lock_acquire+0x115/0x350 [ 358.650825][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.650866][ T3260] ? rcu_is_watching+0x16/0xb0 [ 358.650901][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.650934][ T3260] ? process_scheduled_works+0x97a/0x1630 [ 358.650973][ T3260] process_scheduled_works+0xc3d/0x1630 [ 358.651010][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.651079][ T3260] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.651123][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.651155][ T3260] ? assign_work+0x3cf/0x5d0 [ 358.651199][ T3260] worker_thread+0xa47/0xfb0 [ 358.651271][ T3260] kthread+0x38b/0x480 [ 358.651299][ T3260] ? __pfx_worker_thread+0x10/0x10 [ 358.651335][ T3260] ? __pfx_kthread+0x10/0x10 [ 358.651364][ T3260] ret_from_fork+0x514/0xb70 [ 358.651395][ T3260] ? __pfx_ret_from_fork+0x10/0x10 [ 358.651421][ T3260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.651453][ T3260] ? __switch_to+0xc89/0x1420 [ 358.651495][ T3260] ? __pfx_kthread+0x10/0x10 [ 358.651525][ T3260] ret_from_fork_asm+0x1a/0x30 [ 358.651588][ T3260] [ 358.835440][ T3260] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 358.951380][ T8242] ip_tables: iptables: counters copy to user failed while replacing table [ 359.258567][ T3347] hsr_slave_0: left promiscuous mode [ 359.270004][ T3347] hsr_slave_1: left promiscuous mode [ 359.281110][ T3347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.281136][ T3347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.284248][ T3347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.284271][ T3347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.340655][ T3347] veth1_macvtap: left promiscuous mode [ 359.340700][ T3347] veth0_macvtap: left promiscuous mode [ 359.340815][ T3347] veth1_vlan: left promiscuous mode [ 359.340891][ T3347] veth0_vlan: left promiscuous mode [ 359.503372][ T5760] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 359.520315][ T5893] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 359.623619][ T4929] Bluetooth: hci0: command tx timeout [ 359.663534][ T5760] usb 7-1: Using ep0 maxpacket: 32 [ 359.665584][ T5760] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 359.666625][ T5760] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.666675][ T5760] usb 7-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 359.666708][ T5760] usb 7-1: config 0 interface 0 has no altsetting 0 [ 359.666745][ T5760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.679476][ T5893] usb 4-1: New USB device found, idVendor=1477, idProduct=1026, bcdDevice= 0.00 [ 359.680734][ T5893] usb 4-1: config index 0 descriptor too short (expected 36, got 10) [ 359.680761][ T5893] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 359.680783][ T5893] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.680823][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.699537][ T5893] usb 4-1: config 0 descriptor?? [ 359.777210][ T5760] usb 7-1: config 0 descriptor?? [ 359.792817][ T5760] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 359.901341][ T8255] input: syz0 as /devices/virtual/input/input10 [ 359.913567][ T8249] netlink: 'syz.3.576': attribute type 8 has an invalid length. [ 361.441308][ T50] smbdirect: ib_dev[syz2] removed [ 361.475423][ T8264] loop0: detected capacity change from 0 to 2048 [ 361.476219][ T8264] nilfs2: Unknown parameter '(?` [ 361.476219][ T8264] ' [ 361.541870][ T5760] usb 3-1: USB disconnect, device number 24 [ 361.704525][ T4929] Bluetooth: hci0: command tx timeout [ 361.728942][ T8268] FAULT_INJECTION: forcing a failure. [ 361.728942][ T8268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.728980][ T8268] CPU: 1 UID: 0 PID: 8268 Comm: syz.2.579 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.729010][ T8268] Tainted: [L]=SOFTLOCKUP [ 361.729020][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 361.729034][ T8268] Call Trace: [ 361.729043][ T8268] [ 361.729053][ T8268] dump_stack_lvl+0xe8/0x150 [ 361.729093][ T8268] should_fail_ex+0x410/0x560 [ 361.729130][ T8268] _copy_from_iter+0x1d3/0x1660 [ 361.729160][ T8268] ? __alloc_skb+0x27a/0x7a0 [ 361.729192][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.729224][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.729257][ T8268] ? __alloc_skb+0x27a/0x7a0 [ 361.729285][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.729315][ T8268] ? __pfx__copy_from_iter+0x10/0x10 [ 361.729345][ T8268] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 361.729370][ T8268] ? __alloc_skb+0x27a/0x7a0 [ 361.729407][ T8268] ? __alloc_skb+0x27a/0x7a0 [ 361.729449][ T8268] ? netlink_sendmsg+0x650/0xb40 [ 361.729476][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.729507][ T8268] ? skb_put+0x112/0x210 [ 361.729548][ T8268] netlink_sendmsg+0x6c0/0xb40 [ 361.729588][ T8268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.729626][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.729657][ T8268] ? apparmor_socket_sendmsg+0x98/0x360 [ 361.729688][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.729724][ T8268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.729752][ T8268] sock_sendmsg_nosec+0x13a/0x180 [ 361.729787][ T8268] ____sys_sendmsg+0x54e/0x850 [ 361.729845][ T8268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.729889][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.729926][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.729958][ T8268] ? import_iovec+0x73/0xa0 [ 361.729999][ T8268] ___sys_sendmsg+0x2a5/0x360 [ 361.730037][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.730067][ T8268] ? __lock_acquire+0x747/0x2de0 [ 361.730101][ T8268] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.730173][ T8268] ? __fget_files+0x2a/0x420 [ 361.730208][ T8268] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.730236][ T8268] ? __fget_files+0x3a2/0x420 [ 361.730282][ T8268] __x64_sys_sendmsg+0x1b1/0x290 [ 361.730324][ T8268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.730384][ T8268] do_syscall_64+0x166/0x520 [ 361.730418][ T8268] ? trace_irq_disable+0x3b/0x140 [ 361.730446][ T8268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.730481][ T8268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.730509][ T8268] RIP: 0033:0x7fe97b19e159 [ 361.730534][ T8268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.730556][ T8268] RSP: 002b:00007fe97c08c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.730589][ T8268] RAX: ffffffffffffffda RBX: 00007fe97b425fa0 RCX: 00007fe97b19e159 [ 361.730608][ T8268] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 361.730622][ T8268] RBP: 00007fe97c08c090 R08: 0000000000000000 R09: 0000000000000000 [ 361.730637][ T8268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.730651][ T8268] R13: 00007fe97b426038 R14: 00007fe97b425fa0 R15: 00007fff027ce838 [ 361.730686][ T8268] [ 361.970245][ T3347] team0 (unregistering): Port device team_slave_1 removed [ 362.048636][ T3347] team0 (unregistering): Port device team_slave_0 removed [ 362.355159][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 362.360766][ T5746] infiniband syz2: ib_query_port failed (-19) [ 362.377173][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.578'. [ 362.487685][ T5747] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 362.780534][ T5760] usb 4-1: USB disconnect, device number 18 [ 362.796384][ T5747] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 362.799445][ T5747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.799496][ T5747] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.824977][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.825007][ T5747] usb 3-1: Product: syz [ 362.825025][ T5747] usb 3-1: Manufacturer: syz [ 362.825043][ T5747] usb 3-1: SerialNumber: syz [ 362.900091][ T5747] usb 7-1: USB disconnect, device number 20 [ 363.564581][ T8289] 9pnet_virtio: no channels available for device 127.0.0.1 [ 363.575262][ T8289] loop3: detected capacity change from 0 to 1024 [ 363.576539][ T8289] ext4: Unknown parameter 'smackfsfloor' [ 363.589312][ T8289] fuse: Unknown parameter '5aDޙB fdVަaD~2v @\4|XHY:~$P3/iԷB8U )+xAIp[ͨӞAf)^Eh!mvHOʁǦc9hɸL}H#"ʇ%JsG5Ƈ-;op' [ 363.856958][ T8284] loop4: detected capacity change from 0 to 4096 [ 365.411238][ T5747] usb 3-1: USB disconnect, device number 25 [ 367.120779][ T8284] ntfs3(loop4): Failed to read $AttrDef (-4). [ 368.198766][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 368.212018][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.212102][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.212211][ T8189] bridge_slave_0: entered allmulticast mode [ 368.244302][ T8189] bridge_slave_0: entered promiscuous mode [ 368.273484][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.273600][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.273744][ T8189] bridge_slave_1: entered allmulticast mode [ 368.290868][ T8189] bridge_slave_1: entered promiscuous mode [ 368.550702][ T8189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.574914][ T8189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.920402][ T8189] team0: Port device team_slave_0 added [ 368.935950][ T8189] team0: Port device team_slave_1 added [ 369.127493][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.127515][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.127548][ T8189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.184570][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.184586][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.184610][ T8189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.321303][ T8314] loop4: detected capacity change from 0 to 32768 [ 369.403155][ T8314] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 369.731507][ T8189] hsr_slave_0: entered promiscuous mode [ 369.744340][ T8189] hsr_slave_1: entered promiscuous mode [ 369.745138][ T8189] debugfs: 'hsr0' already exists in 'hsr' [ 369.745160][ T8189] Cannot create hsr debugfs directory [ 371.074042][ T8341] loop0: detected capacity change from 0 to 2048 [ 371.074774][ T8341] nilfs2: Unknown parameter '(?` [ 371.074774][ T8341] ' [ 371.274503][ T5747] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 371.427007][ T5747] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 371.429078][ T5747] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.465166][ T5626] ocfs2: Unmounting device (7,4) on (node local) [ 371.505912][ T5747] usb 7-1: config 0 descriptor?? [ 371.728149][ T5747] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 371.852474][ T8351] loop3: detected capacity change from 0 to 4096 [ 371.890109][ T8355] loop4: detected capacity change from 0 to 1024 [ 371.891297][ T8355] EXT4-fs: Ignoring removed bh option [ 371.942999][ T5747] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 371.943028][ T5747] [drm] Initialized udl on minor 1 [ 371.994204][ T8355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.062879][ T8350] null_blk: disk my_zoned_dev created [ 373.111439][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.123780][ T8189] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 373.192693][ T8189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.207762][ T8189] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 373.266915][ T8189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.280447][ T8189] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 373.306597][ T8369] FAULT_INJECTION: forcing a failure. [ 373.306597][ T8369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.306638][ T8369] CPU: 0 UID: 0 PID: 8369 Comm: syz.2.598 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.306673][ T8369] Tainted: [L]=SOFTLOCKUP [ 373.306683][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 373.306700][ T8369] Call Trace: [ 373.306710][ T8369] [ 373.306720][ T8369] dump_stack_lvl+0xe8/0x150 [ 373.306765][ T8369] should_fail_ex+0x410/0x560 [ 373.306805][ T8369] _copy_from_user+0x2d/0xb0 [ 373.306845][ T8369] sg_new_write+0x361/0x7f0 [ 373.306889][ T8369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.306929][ T8369] ? __pfx_sg_new_write+0x10/0x10 [ 373.307010][ T8369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.307042][ T8369] ? hook_file_ioctl+0x1f2/0x600 [ 373.307082][ T8369] sg_ioctl+0x10c8/0x21b0 [ 373.307136][ T8369] ? __pfx_sg_ioctl+0x10/0x10 [ 373.307179][ T8369] ? __fget_files+0x2a/0x420 [ 373.307224][ T8369] ? __fget_files+0x2a/0x420 [ 373.307263][ T8369] ? __fget_files+0x3a2/0x420 [ 373.307302][ T8369] ? __fget_files+0x2a/0x420 [ 373.307350][ T8369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.307382][ T8369] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.307416][ T8369] ? __pfx_sg_ioctl+0x10/0x10 [ 373.307457][ T8369] __se_sys_ioctl+0xfc/0x170 [ 373.307492][ T8369] do_syscall_64+0x166/0x520 [ 373.307531][ T8369] ? trace_irq_disable+0x3b/0x140 [ 373.307560][ T8369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.307597][ T8369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.307625][ T8369] RIP: 0033:0x7fe97b19e159 [ 373.307648][ T8369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.307671][ T8369] RSP: 002b:00007fe97c08c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.307699][ T8369] RAX: ffffffffffffffda RBX: 00007fe97b425fa0 RCX: 00007fe97b19e159 [ 373.307719][ T8369] RDX: 00002000000005c0 RSI: 0000000000002285 RDI: 0000000000000003 [ 373.307737][ T8369] RBP: 00007fe97c08c090 R08: 0000000000000000 R09: 0000000000000000 [ 373.307754][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.307770][ T8369] R13: 00007fe97b426038 R14: 00007fe97b425fa0 R15: 00007fff027ce838 [ 373.307812][ T8369] [ 373.318853][ T8189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.333478][ T8189] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 373.387803][ T8189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.939920][ T8380] loop4: detected capacity change from 0 to 32768 [ 373.991280][ T8380] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 374.002018][ T8380] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 374.037680][ T8387] loop0: detected capacity change from 0 to 1024 [ 374.039069][ T8387] EXT4-fs: Ignoring removed bh option [ 374.074136][ T5760] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 374.078880][ T8387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.106909][ T8380] XFS (loop4): Ending clean mount [ 374.133055][ T8380] XFS (loop4): Quotacheck needed: Please wait. [ 374.173427][ T8395] loop2: detected capacity change from 0 to 2048 [ 374.217174][ T8395] loop2: p2 < > p3 < p5 > p4 [ 374.217201][ T8395] loop2: partition table partially beyond EOD, truncated [ 374.217400][ T8395] loop2: p2 start 4278190080 is beyond EOD, truncated [ 374.220021][ T8395] loop2: p4 size 8192 extends beyond EOD, truncated [ 374.252823][ T5760] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 374.254652][ T8395] loop2: p5 size 8192 extends beyond EOD, truncated [ 374.275161][ T5760] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.275220][ T5760] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.279478][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.279507][ T5760] usb 4-1: Product: syz [ 374.279525][ T5760] usb 4-1: Manufacturer: syz [ 374.279544][ T5760] usb 4-1: SerialNumber: syz [ 376.992743][ T5747] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 376.993194][ T5747] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 376.994440][ T5893] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 377.018129][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 377.020263][ T5893] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 377.020488][ T5893] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 377.064877][ T8189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.113021][ T4979] loop2: p2 < > p3 < p5 > p4 [ 377.113055][ T4979] loop2: partition table partially beyond EOD, truncated [ 377.113368][ T4979] loop2: p2 start 4278190080 is beyond EOD, truncated [ 377.117778][ T4979] loop2: p4 size 8192 extends beyond EOD, truncated [ 377.123575][ T4979] loop2: p5 size 8192 extends beyond EOD, truncated [ 377.133607][ T8380] XFS (loop4): Quotacheck: Done. [ 377.141611][ T5747] usb 7-1: USB disconnect, device number 21 [ 377.188606][ T5837] usb 4-1: USB disconnect, device number 19 [ 377.226597][ T8189] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.227324][ T5626] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 377.297098][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.297182][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.320233][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.320343][ T3260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.762740][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.953872][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.953995][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.325282][ T8416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.411494][ T8417] FAULT_INJECTION: forcing a failure. [ 378.411494][ T8417] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 378.411526][ T8417] CPU: 1 UID: 0 PID: 8417 Comm: syz.0.606 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.411552][ T8417] Tainted: [L]=SOFTLOCKUP [ 378.411559][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 378.411571][ T8417] Call Trace: [ 378.411579][ T8417] [ 378.411587][ T8417] dump_stack_lvl+0xe8/0x150 [ 378.411620][ T8417] should_fail_ex+0x410/0x560 [ 378.411650][ T8417] iommufd_get_object+0x78/0x4b0 [ 378.411676][ T8417] ? __pfx_iommufd_get_object+0x10/0x10 [ 378.411709][ T8417] iommufd_test+0xfac/0x6360 [ 378.411748][ T8417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.411771][ T8417] ? __lock_acquire+0x747/0x2de0 [ 378.411793][ T8417] ? __pfx_iommufd_test+0x10/0x10 [ 378.411834][ T8417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.411859][ T8417] ? tomoyo_path_number_perm+0x219/0x5f0 [ 378.411886][ T8417] ? tomoyo_path_number_perm+0x219/0x5f0 [ 378.411912][ T8417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.411939][ T8417] ? lock_acquire+0x115/0x350 [ 378.411970][ T8417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.412005][ T8417] iommufd_fops_ioctl+0x465/0x600 [ 378.412034][ T8417] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 378.412063][ T8417] ? __fget_files+0x2a/0x420 [ 378.412098][ T8417] ? __fget_files+0x2a/0x420 [ 378.412129][ T8417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.412152][ T8417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.412176][ T8417] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 378.412200][ T8417] __se_sys_ioctl+0xfc/0x170 [ 378.412226][ T8417] do_syscall_64+0x166/0x520 [ 378.412253][ T8417] ? trace_irq_disable+0x3b/0x140 [ 378.412275][ T8417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.412301][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.412324][ T8417] RIP: 0033:0x7f415d39e159 [ 378.412342][ T8417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.412359][ T8417] RSP: 002b:00007f415e24f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.412379][ T8417] RAX: ffffffffffffffda RBX: 00007f415d626090 RCX: 00007f415d39e159 [ 378.412394][ T8417] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 378.412407][ T8417] RBP: 00007f415e24f090 R08: 0000000000000000 R09: 0000000000000000 [ 378.412420][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.412432][ T8417] R13: 00007f415d626128 R14: 00007f415d626090 R15: 00007ffcc23dc698 [ 378.412462][ T8417] [ 379.068127][ T8427] X.509: Couldn't decode AuthKeyIdentifier [ 379.173578][ T5837] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 379.228125][ T8427] loop0: detected capacity change from 0 to 2048 [ 379.280968][ T8427] NILFS (loop0): invalid segment: Magic number mismatch [ 379.280999][ T8427] NILFS (loop0): trying rollback from an earlier position [ 379.323556][ T5837] usb 5-1: Using ep0 maxpacket: 8 [ 379.324284][ T5837] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 379.327360][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.327388][ T5837] usb 5-1: Product: syz [ 379.327406][ T5837] usb 5-1: Manufacturer: syz [ 379.327424][ T5837] usb 5-1: SerialNumber: syz [ 379.374021][ T5837] usb 5-1: config 0 descriptor?? [ 379.382280][ T8427] NILFS (loop0): recovery complete [ 379.396711][ T8434] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.445599][ T8435] warning: `syz.0.607' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 379.467132][ T8427] NILFS (loop0): nilfs_dat_move: invalid vblocknr = 9, [0, 0) [ 379.467164][ T8427] NILFS error (device loop0): nilfs_bmap_assign: broken bmap (inode number=3) [ 379.498941][ T8427] Remounting filesystem read-only [ 379.501107][ T8427] NILFS (loop0): error -5 cleaning segments [ 379.916866][ T8427] NILFS (loop0): error -30 cleaning segments [ 379.918335][ T8401] loop3: detected capacity change from 0 to 40427 [ 379.952680][ T8401] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 379.952712][ T8401] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 379.969700][ T8401] F2FS-fs (loop3): invalid crc value [ 380.033105][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 380.238368][ T5612] VFS: Busy inodes after unmount of loop0 (nilfs2) [ 380.238731][ T5612] ------------[ cut here ]------------ [ 380.238744][ T5612] kernel BUG at fs/super.c:761! [ 380.238771][ T5612] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 380.247528][ T8189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.268702][ T5612] CPU: 1 UID: 0 PID: 5612 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 380.279731][ T5612] Tainted: [L]=SOFTLOCKUP [ 380.284051][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 380.294106][ T5612] RIP: 0010:generic_shutdown_super+0x2c7/0x2d0 [ 380.300279][ T5612] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 83 1a ec ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 20 a8 1f 8c 48 89 de e8 9a eb db fe 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 380.319886][ T5612] RSP: 0018:ffffc9000356fd10 EFLAGS: 00010246 [ 380.325963][ T5612] RAX: 0000000000000030 RBX: ffff888077a426a8 RCX: 6593cdf8cf667c00 [ 380.333939][ T5612] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 380.341911][ T5612] RBP: 1ffff1100ef484f7 R08: ffffc9000356fa87 R09: 1ffff920006adf50 [ 380.349886][ T5612] R10: dffffc0000000000 R11: fffff520006adf51 R12: 0000000000000000 [ 380.357859][ T5612] R13: dffffc0000000000 R14: ffffffff8f316f80 R15: ffff888077a427b8 [ 380.365834][ T5612] FS: 000055557d970500(0000) GS:ffff888124dc8000(0000) knlGS:0000000000000000 [ 380.374768][ T5612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.381352][ T5612] CR2: 00007f3eedd94000 CR3: 000000005b8de000 CR4: 0000000000350ef0 [ 380.389327][ T5612] Call Trace: [ 380.392606][ T5612] [ 380.395535][ T5612] kill_block_super+0x44/0xa0 [ 380.400215][ T5612] deactivate_locked_super+0xbe/0x110 [ 380.405601][ T5612] cleanup_mnt+0x3d3/0x460 [ 380.410018][ T5612] task_work_run+0x1d9/0x270 [ 380.414622][ T5612] ? __pfx_task_work_run+0x10/0x10 [ 380.419734][ T5612] exit_to_user_mode_loop+0x204/0x770 [ 380.425102][ T5612] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.430735][ T5612] ? rcu_is_watching+0x16/0xb0 [ 380.435500][ T5612] do_syscall_64+0x328/0x520 [ 380.440094][ T5612] ? trace_irq_disable+0x3b/0x140 [ 380.445119][ T5612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.451184][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.457071][ T5612] RIP: 0033:0x7f415d39f397 [ 380.461477][ T5612] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 380.481073][ T5612] RSP: 002b:00007ffcc23db908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 380.489483][ T5612] RAX: 0000000000000000 RBX: 00007f415d4344bb RCX: 00007f415d39f397 [ 380.497446][ T5612] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc23db9c0 [ 380.505405][ T5612] RBP: 00007ffcc23db9c0 R08: 00007ffcc23dc9c0 R09: 00000000ffffffff [ 380.513367][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc23dca50 [ 380.521325][ T5612] R13: 00007f415d4344bb R14: 000000000005cba9 R15: 00007ffcc23dca90 [ 380.529297][ T5612] [ 380.532303][ T5612] Modules linked in: [ 380.537724][ T5612] ---[ end trace 0000000000000000 ]--- [ 380.549833][ T5612] RIP: 0010:generic_shutdown_super+0x2c7/0x2d0 [ 380.549890][ T5612] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 83 1a ec ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 20 a8 1f 8c 48 89 de e8 9a eb db fe 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 380.549913][ T5612] RSP: 0018:ffffc9000356fd10 EFLAGS: 00010246 [ 380.549936][ T5612] RAX: 0000000000000030 RBX: ffff888077a426a8 RCX: 6593cdf8cf667c00 [ 380.549956][ T5612] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 380.549974][ T5612] RBP: 1ffff1100ef484f7 R08: ffffc9000356fa87 R09: 1ffff920006adf50 [ 380.549994][ T5612] R10: dffffc0000000000 R11: fffff520006adf51 R12: 0000000000000000 [ 380.550013][ T5612] R13: dffffc0000000000 R14: ffffffff8f316f80 R15: ffff888077a427b8 [ 380.550037][ T5612] FS: 000055557d970500(0000) GS:ffff888124dc8000(0000) knlGS:0000000000000000 [ 380.550060][ T5612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.550078][ T5612] CR2: 00007f3eedd94000 CR3: 000000005b8de000 CR4: 0000000000350ef0 [ 380.550102][ T5612] Kernel panic - not syncing: Fatal exception [ 380.651252][ T5612] Kernel Offset: disabled [ 380.655561][ T5612] Rebooting in 86400 seconds..