last executing test programs: 14m58.778153883s ago: executing program 32 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_lower}, {@utf8}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@rodir}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@uni_xlate}]}, 0x1, 0x281, &(0x7f0000000440)="$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") 13m40.619501002s ago: executing program 5 (id=1098): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0xff73) 13m39.491052558s ago: executing program 5 (id=1101): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) getpgid(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) tee(r0, 0xffffffffffffffff, 0x0, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 13m38.863582831s ago: executing program 5 (id=1105): linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file2\x00', 0x2f, 0x8) 13m38.441554095s ago: executing program 5 (id=1109): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfba000) syz_open_procfs(0x0, 0x0) r4 = memfd_create(0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r4, 0xff64000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000140)={0x1d}) listen(r3, 0x1) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 13m37.895820719s ago: executing program 5 (id=1113): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44084}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x8f) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() syz_pidfd_open(r1, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400"], 0x48) add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r3, 0xb) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x0, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 13m36.315898936s ago: executing program 5 (id=1118): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_lower}, {@utf8}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@rodir}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@uni_xlate}]}, 0x1, 0x281, &(0x7f0000000440)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 13m20.597617816s ago: executing program 33 (id=1118): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_lower}, {@utf8}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@rodir}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@uni_xlate}]}, 0x1, 0x281, &(0x7f0000000440)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 12m9.478818277s ago: executing program 4 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) 12m7.28183327s ago: executing program 4 (id=1429): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) r1 = syz_io_uring_setup(0x1d6f, &(0x7f0000000400)={0x0, 0x3ffffff, 0x10, 0x2, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, 0x0) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 12m5.728579714s ago: executing program 4 (id=1434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c1234400040"], 0x1c) 12m3.373002335s ago: executing program 4 (id=1441): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) getpgid(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) open$dir(0x0, 0x4003, 0xb0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 12m2.097012848s ago: executing program 4 (id=1447): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000005c0)=[{0x0}], 0x1) 11m58.472866456s ago: executing program 4 (id=1456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xdf0}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(0x3) 11m56.964805317s ago: executing program 34 (id=1456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xdf0}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(0x3) 10m36.703400955s ago: executing program 8 (id=1856): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x3c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa6c, 0x0, 0x0, 0x0, 0xaa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x5e}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3d}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @ldst={0x2, 0x0, 0x3, 0x6, 0x6, 0x30, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x11}, @tail_call, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000900)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000019c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001a00)={0x2, 0xf, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001ac0)=[{0x1, 0x2, 0xd, 0xc}, {0x3, 0x3, 0x3, 0x5}, {0x4, 0x4, 0x5, 0x2}, {0x0, 0x4, 0xe}, {0x3, 0x3, 0x1, 0xa}], 0x10, 0x7f83}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073113000000000008510000002000000850000007600000095000000000000009500a5050000000048ba034279b92d459280cc10da7ef2aec2030e99fea601ba8a0303580b894b65a8dfacd7e8c9e628ad7833825c0482810a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000100)=r1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x1, 0x6, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0xe, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x30}}}}}) 10m35.641497076s ago: executing program 8 (id=1860): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 10m35.336762805s ago: executing program 8 (id=1863): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x9}}, 0x20) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 10m35.121602114s ago: executing program 8 (id=1865): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) unshare(0x22020600) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(0x0, 0xa) 10m34.780875701s ago: executing program 8 (id=1867): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m33.573635819s ago: executing program 8 (id=1874): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa20000000000000702", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 10m32.990589261s ago: executing program 35 (id=1874): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa20000000000000702", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m50.647249475s ago: executing program 3 (id=3719): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000c40)={0x0, "7453dd2d721b0a48339f69c8d529fef9"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001c40)={r2, 0x5, 0x3, 0x1}) capset(&(0x7f00000025c0)={0x20080522}, &(0x7f0000002600)={0x10001, 0x30001}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x20002005}) ppoll(&(0x7f0000000480)=[{r0, 0x298}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0xffff, 0x0, 0x0, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0x3, "f4"}, @timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty}, {@empty, 0x1}]}, @ssrr={0x89, 0x3, 0x3b}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x5}}}}}}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m49.593982315s ago: executing program 3 (id=3725): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socket$kcm(0x10, 0x2, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x700, 0x3, 0x132}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ba0, 0x20000, 0x2100, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7301, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8, 0x2, 0x250, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x3, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2m49.431712529s ago: executing program 3 (id=3727): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_clone3(&(0x7f0000000400)={0x206300, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m49.2306213s ago: executing program 3 (id=3728): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905", 0x558, 0x0) syz_clone3(&(0x7f00000001c0)={0x2041000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x4) io_submit(0x0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 2m45.64553916s ago: executing program 3 (id=3741): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002700090025fd7000fddbdf251100000008000100eaf84e6de6409802cf74d878ea969f9cf41995fc8f70721ff64440b99bb7a5736b0d3bdadae1a5e8230be466cd1742720baf7dcb08f1e84d699d32bc700f5f3c0c1389c5f12216efa809ed43b54cc7c6e05ea7acb2c7a6683b8728f4634fea0d742e5b80b14f1f15bbd6728aa9542f51e5c4ff24", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r7 = dup(0xffffffffffffffff) syz_ublk_add_dev(r0, r4, 0x0, r5, &(0x7f0000000400)={0x2e, 0x61, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x700, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x2, 0xb04, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r7, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 2m44.204640697s ago: executing program 3 (id=3744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x14, 0x6, 0x6, 0x4}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) 2m29.160233431s ago: executing program 36 (id=3744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x14, 0x6, 0x6, 0x4}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) 18.871115535s ago: executing program 2 (id=4240): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4000}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0xf, 0x10, 0x0, @void, @value=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.767906474s ago: executing program 2 (id=4242): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':\x00'/18, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) 17.77871469s ago: executing program 2 (id=4251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) 17.4189255s ago: executing program 2 (id=4254): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4000}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0xf, 0x10, 0x0, @void, @value=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.117019887s ago: executing program 2 (id=4257): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0, @ANYBLOB="050026bd0400000000000f00000008000380", @ANYRES32=r1, @ANYBLOB="4c000e0080000000ffffffffffff08021100000050505050505000000000000000000000640001002d1a01001d00000000000000a60200fe0004000000000009000000037206030303030303080026006c09000008000c006400"], 0x80}}, 0x20000014) 16.874401425s ago: executing program 2 (id=4260): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x24040094) 10.680453829s ago: executing program 9 (id=4292): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4004, &(0x7f0000005800)={[{@adaptive_mode}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@noinline_xattr}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@fastboot}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@fastboot}]}, 0x21, 0x5533, &(0x7f00000002c0)="$eJzs3EtvG1UUAOBjp+mbEiEW7DqoQkqk2qrTh2BXoBUP0aoqsGAFju1abm1PFLtuyIoFS8SCf4JAYsWS38CCNTvEAsQOCeS5E2gKlVDjxKT5Pml85t65c+beURTpzFgO4NBayn77pRJn4kRELETE6Yhiv1JuhaspvBARZyOi+tBWKfv/6jgaEScj4sw0ecpZKQ99cX5y7vLPb//67ffHjpz68psf5rdqYEaqT3riSxExWE/7DwYp5t0U75b9zUmviINLkzKmA4N7ZTtP8UFnrcjwoLk9rlnEi900Pl+/P5rGO/1maxq7vTtF//owXXA06W7nKU6429wo2u3OWhF7o7yI3a00r82t9L9tazROedplvo+L9DEeb8fU39nspPWs3ytiazgu+1PevN3ZnMZJGcvLRSvvt4t5rD3pXf7fe/Gd3vD+ZjbpbIx6+TC7XG+8XG9cqTU28nZn3LlUaw7aVy5ly93+dFht3GkOrnbzvNvv1Fv5YCVb7rZatUYjW77WWes1h1mjUb9Yv1C7vFLunc/euPl+1m9ny9P4Wm94f9zrj7I7+UaWzljJVusXX1nJzjWyd2/cym7dvn79xq33Prz2wc1Xb7z1ejnoH9PKllcvrK7WGhdqq42V3d2AA7X+T8tJz3D9sCuVeU8A4OBR/wPzsHf1/8btiL2v/0P9PxMHqv497PX/HqwfdkX9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwaP24+NWbxc5Sap8q+58pu54r25WIqEbEH/9iIY7uyLlQ5ll8zPjFR+bwXSWKDNNrHCu3kxFxtdx+f3av7wIAAAA8vb7+5OznqVpPH0vznhD7KT20qZ7+aEb5KhGxuPTTjLJVpx/PzyhZ8fd9JDZnlK14gHV8RsnSI7cjs8r2nyzsCMcfCpUUqo+eMbPVAgAAc7OzEtjfKgQAAID99Nljj9zb13mwzyqx/Spz+11w8c37v1/2nUhtr/4AAADg4KrMewIAAADAnivqf7//BwAAAE+39Pt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCf7NxLbtpAHAfgvw0u9KWiqvtepTs4Ro/QZZcVB+glOAK5Qi7AGcguR4ggwuOgEJEH8Rgr0fdJ9mDL/GaGx2JmpAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALl1Vy9nFv5//2+Zstu3k6Q0AAABwzLpazuoXk3T9ubn/tbn1vbkuIqKMiGNj90F8OMgcNDnVI89XD9pwGVEn7OoYNceniPiVjm186/pTAAAAgHdpuDut5otpGq2n06TvVtHaCd9hmrQpv/zOVHUREdXkOlNaucv7kSms/n0P42+mtHoCa5wpLE25DXOlvUj9d9/P2o3vFUUqyqffn63vAADAGQ0OivOOQgAAADinP303gC58fPaJIu6WMvdLgaNUjA8iLPYBAADA21X03QAAAACgc/X4/5T9/6Kf/f/ixv5/AAAA8Gpp/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6tK6Ws9V8MW2bs9m2k6c3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMv+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xs3FQcA/Nk+X38A4gjohiAEEgMs9HotLd0QAyhi4E9AitJrCb3yo81AqwopCxvK3AXBiBASKGz9B5i6IbVSl7J1uKFILCyH7LNzToPEpVHsS/L5SM/v64vj9322FOXr5wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS6L1pnGSbziSOi8/uPb61kvX3n+gzdzYeLGYti6M6kz4YXqnuRN3mEgEAAODoSMr6PoTwMN1cyvq4k9f/aXlMVvN//9wkLuv5J+v+si9r/6z99uujl7YG6kzGyU56aXU4OL0zldb+zXK+Pf+/R7TyK58/e0nyGxJ/uP7iKM2vZ/Tt3bvvt/PwWB3ZAgBP41TZF0H5+1DW95tMDIAjo1UpvMv6P+k0mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHUbr4ZkyjkIIi61pnLn/+NbKf/V3Nh4slu387dsb1XNmp0hDCJdWh4PTNc5l3l2/cfPK8nA4uFZ/8GoIoanR3y2mf+XjGQ4OoZHrs1/BP+PxeFffdbz5nPcUxMXNnpd8DkbQ4A8lAAAOpbRoWV3/MN1cyj6LFkIY/7C9/n+jEocZ6/9Hn5y/Vx2rWv/3a5vh/OutXf2id/3GzbdWry5fHlwefPb2mf47/bMXzp270MuflfQ8MQEAAGBv2kWr1v/xws71/5OVOMxY/3/5Xf/r6Uh/5Fv1/07TRb+mMwEAADjaXnjt77+iyn676KN2O3y1vLZ2rT/Zbu2fmWwbSndXjhWtWv8nC01nBQAAANRhtB5tW/+/WInDjOv/z/748s/VcyYhhBPF+v+plc+HF+ubzlyr48+Jm54jAAAAzTpRtOr6f5q//x9vvfIQhxDefH0SF/8GcKb6P/ngm5+qYyWV9//P1jfFuRR3J9cj77shtLrbvvx7Y4kBAABwKB0vWlbs/5luLn36y8mP2t7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjbvwEAAP//1opCqA==") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) 8.847864699s ago: executing program 9 (id=4309): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000f40)=""/4088, 0x26, 0xff8, 0x8}, 0x28) 8.135387561s ago: executing program 0 (id=4311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x48}}, 0x0) 7.913613564s ago: executing program 0 (id=4313): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.054346311s ago: executing program 9 (id=4319): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) getpgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 6.660808851s ago: executing program 9 (id=4321): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4004, &(0x7f0000005800)={[{@adaptive_mode}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@noinline_xattr}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@fastboot}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@fastboot}]}, 0x21, 0x5533, &(0x7f00000002c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) 5.611725839s ago: executing program 0 (id=4328): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x1c30c0) ioctl$EVIOCGNAME(r1, 0x80404506, 0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b04, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES8=r2, @ANYRES64, @ANYRES16, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x80015b1a, 0x0) 5.418746541s ago: executing program 7 (id=4330): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 5.035786913s ago: executing program 7 (id=4333): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000002200)='wchan\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) 4.568110379s ago: executing program 7 (id=4337): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) 4.523359722s ago: executing program 1 (id=4338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.343689126s ago: executing program 6 (id=4339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.34328364s ago: executing program 7 (id=4340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x48}}, 0x0) 4.252977631s ago: executing program 1 (id=4341): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8a000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) 4.180844947s ago: executing program 1 (id=4342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000140)="2bc4", 0x4b}], 0x4}, 0x20008b88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 4.090969348s ago: executing program 7 (id=4343): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0xff03, 0x260, 0xffffffff, 0x130, 0x130, 0x98, 0x98, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0xff, 'ipvlan1\x00', 'sit0\x00', {}, {}, 0x62, 0x1c6a0dc5b9630812, 0x30}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'macsec0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x2) keyctl$negate(0xd, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) socket$inet6(0xa, 0x3, 0xff) ftruncate(0xffffffffffffffff, 0x200004) 4.004137159s ago: executing program 1 (id=4344): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 3.931003275s ago: executing program 9 (id=4345): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 3.900539305s ago: executing program 6 (id=4346): r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0xfff) mkdirat(r0, 0x0, 0xd) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setns(0xc9, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 2.708910735s ago: executing program 7 (id=4347): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r0, &(0x7f00000004c0)='\n', 0x1) 2.521474672s ago: executing program 1 (id=4348): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) write(r0, &(0x7f0000000200), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='8\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100", 0x3e) close(r4) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='dummy_udc.0\n', 0xc) close(r5) r6 = syz_open_dev$hidraw(&(0x7f0000000580), 0x0, 0x2) write$hidraw(r6, &(0x7f00000005c0)='12345678', 0x8) 2.49548469s ago: executing program 6 (id=4349): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14", 0x3}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, "b8155244614427c8", "6120cc39c039a8222816358a7d0637f0dd5d60d0d3ec50524456c96e4db1b2f7", "75223cec", "ae1b8a64b7c9bf3c"}, 0x38) 2.342836532s ago: executing program 0 (id=4350): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2.311857972s ago: executing program 6 (id=4351): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0xff03, 0x260, 0xffffffff, 0x130, 0x130, 0x98, 0x98, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0xff, 'ipvlan1\x00', 'sit0\x00', {}, {}, 0x62, 0x1c6a0dc5b9630812, 0x30}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'macsec0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x2) keyctl$negate(0xd, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) socket$inet6(0xa, 0x3, 0xff) ftruncate(0xffffffffffffffff, 0x200004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000045c131c2569de1cb02122256bc01f338c2d6794bab09efc963b75a76958c1fe6193bbd3879291687f7fe6214797d759c33b451035a455c66b798c9d10ddc9516d9211c85a784cabbb1826e81ebc6adab206831c83282e92abf6ac46c1e299a2b4f5eeca296b5204083b38b61c8cbfc604bddbe67db8a", @ANYRES16=r2, @ANYBLOB="170900000000030000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff06001b004e220000"], 0x4c}}, 0x0) 1.261001615s ago: executing program 37 (id=4260): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x24040094) 1.258312986s ago: executing program 6 (id=4353): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='addr=127.0.0.1,soft,timeo=1,retrans=1,sec=krb5,']) 1.257945489s ago: executing program 1 (id=4354): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='cmdline\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$kcm(0xa, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x90, 0xf2, 0xc3, 0x10, 0x13d8, 0x22, 0xebaa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x7, 0x40, 0x8, "", [{{0x9, 0x4, 0x42, 0x4, 0x0, 0xf5, 0xbe, 0xf4, 0x10}}]}}]}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) writev(r2, 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x6700000000000000) sendmsg$sock(r1, 0x0, 0x0) 1.257383862s ago: executing program 0 (id=4355): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x12, 0xffffffffffffffff, 0xff64000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x88) 462.784558ms ago: executing program 0 (id=4356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000140)="2bc4", 0x4b}], 0x4}, 0x20008b88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 378.816204ms ago: executing program 9 (id=4357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) pselect6(0x40, &(0x7f0000000000)={0x4, 0xa5, 0x1, 0x9, 0x10, 0x7, 0xb96f, 0x8}, 0x0, &(0x7f0000000080)={0x8, 0x6, 0x4, 0x8, 0x2, 0x3ab1, 0x7, 0x80000001}, &(0x7f0000000100), 0x0) setsockopt(r0, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r0, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) setsockopt(r0, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) setsockopt(r0, 0x0, 0x484, &(0x7f0000000600)="060000007f00000100150000000000006d6800"/44, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000340)={0x0, 0x79fb, 0x40000, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r1, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0xa84e5475952f9a3}], 0x1}, 0x40001002, 0x40c1, 0x1, {0x1}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 0s ago: executing program 6 (id=4358): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x1000, 0x8, 0x5) keyctl$get_keyring_id(0x0, 0x0, 0x9947) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x64, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x800) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r2, 0x5207, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nombcache}, {@noauto_da_alloc}, {@discard}, {@norecovery}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_journal}, {@nodelalloc}, {@errors_continue}]}, 0xfc, 0x591, &(0x7f0000000900)="$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") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f00000019c0)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}}], 0x1, 0x20064884) statx(0xffffffffffffff9c, 0x0, 0x0, 0x20, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000016c0)={[{@block_validity}, {@errors_remount}]}, 0x0, 0x452, &(0x7f0000000600)="$eJzs281vFOUfAPDvTLsFfsCvFfGFF7WKxsaXlgIqBw9qNPGAiYke9Ni0hSALNbQmQoiCMXgyxsS78ei/4Ekvxngy8ap3Q0IMF8DTmtmZobvLdqHLbhfZzyeZ7vPMPNPn+e7Ms/vMPDsBDK3J7E8SsS0i/oiI8TzbXGAyf7l25dz89Svn5pOo1d75O6mXu3rl3HxZtNxva5GZSiPSz5PY06be5TNnT8xVq4uni/zMyskPZ5bPnH3++Mm5Y4vHFk8dOHz40MHZl1488EJP4szadHX3J0t7d735/tdvHfmyKf6WOHpkstPGp2q1Hlc3WNsb0snoABvCuoxERHa4KvX+Px4jsXrwxuONzwbaOKCvarVabWvxmmnZfL4G3MOSaM7r8jAsyi/67Pq3XFrHCK9syEhkMC6/ml8AZXFfK5Z8y2ikRZlKy/VtL01GxHvn//k2W6I/9yEAAJr8mI1/nms3/kvjwYZy/y/mhiYi4r6I2BER90fEzoh4IKJe9qGIeHid9bdOktw8/kkvdRXYbcrGfy8Xc1vN479y9BcTI0Vuez3+SnL0eHVxf/GeTEVlU5af7VDHT6///tVa2xrHf9mS1V+OBYt2XBrd1LzPwtzK3J3E3OjyhYjdo+3iT27MBCQRsSsidndZx/Fnvt+71rZbx99BD+aZat9FPJ0f//PREn8p6Tw/ObM5qov7Z8qz4ma//nbx7bXqv6P4eyA7/v9re/7fiH8iaZyvXV5/HRf//GLNa5puz/+x5N16eqxY9/Hcysrp2Yix5Eje6Mb1B1b3LfNl+Sz+qX3t+/+OWH0n9kREdhI/EhGPRsRjRdsfj4gnImJfh/h/ee3JD7qPv7+y+BfWdfxXE2PRuqZ9YuTEzz80VTpxU/zXOx//Q/XUVLHmdj7/bqdd3Z3NAAAA8N+TRsS2SNLpLLM5S6fp9HT+e/mdEWl1aXnl2aNLH51ayJ8RmIhKWt7pGm+4HzpbXNbn+QsRkf+0oNx+sLhv/M3Ilnp+en6pujDo4GHIbW3o//lnQd7/M3+NDLp1QN95XguGl/4Pw0v/h+Gl/8PwatP/twyiHcDGa/f9/+kA2gFsvJb+b9oPhojrfxhe+j8ML/0fhtLylrj1Q/IdE+V/6nL3ezYRlbuiGX1LRHpXNEOiT4nBfi4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0yr8BAAD//6P06NA=") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x10, @desc1}) landlock_create_ruleset(&(0x7f00000001c0)={0x2, 0x1, 0x3}, 0x18, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001980)) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000280)={0x0, [[0x400007ff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x2], [0x4, 0x40000000, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0x2], [0x0, 0x20000232, 0x6, 0x0, 0x0, 0xfffffffd, 0x1, 0x6]], '\x00', [{0x0, 0x1, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x400000, 0x3}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x100080}, {0x7, 0x40004000}, {0x2}]}) r4 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r4, 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f00000000c0)={0x20, 0x30, 0x10, 0x70bd2b, 0x25dfdbfb, "", [@generic="b6650128079c5123a1c3e614d6"]}, 0x20}, {&(0x7f00000003c0)={0x1010, 0x1c, 0x400, 0x70bd25, 0x25dfdbfe, "", [@generic="4f1ce1d3c6dc344cfe86cf8101c04443790f244e28f127f7d95f9643009c97d27ea8d34b64f12678227913a770018719642c2fbb904e9a7dc9fd3266ae920904e544f8be9b0aefbff35d5eb187dc504e5d7bdcd1daa01db425d36886d30aa26bde29318a66258653d1cc1f486c733905c1d40ea81e597b3d0ecdb5638c53f5f0876655565f19de78870de16e90b5dfe9fd16cfd30159fcde1788d3ea89f635669ceb7b9d0edc4f888170d72471e9b7a9a76acf46b948616077d6abb27132901d5187c8d07070c0bc1c7bd4050535946d883f3e2c3907ec0295391c5e994530a06c143180a0e284c19c8c5d4b65b127ec0e63e4d2a2200b8bbfcbc1390b3a4ca8f1be59aff1b8667bb6ccf8c3f3d8351866f021bcc6c2b9e471f0a338e954128f3d6e9f196162a40464ae5ed7f219656462a147f0836ffb1785ac93cd2b200cb88db8a954cfc801d2e5140f4e1c88ad45de600cdc46bd0dd8833369262478bb70f1a59fca8e315c85bc63514ed7db358587e09e76c9131c655c24fca6db46c45c1442cbcd71e7aa2393400ff5e336a03d9249e8dd57078a47b5078c372e28860eb971f2e7827e2793daa177f33f6bd20a6ee2fe7fa59d54b83452409cc66298a51002549077029821c01e2c00c8b3fa15a27ba159fc585120cf355790deffd187979624c2006dd1d3b0466876123222c245956df32b524bba5c4645b7ea0c836e812cdb0aef7ef915c499ca760c95cad479108aaa8336170f9a939c12e11df57f38646cbdd24c3afee17fa70939125baee0601062ff7638f671486113af6feef8282898f7fbb9c032335cec429d63ce735dc4726cc9d0aa6e9e087dfdda3f37fc61bf34d2b87b090c5f52b46ae668bc357f16f4c8bbb52835e552a752eb6fadb32e5b2b0268f08b3ede70cb6da7635f298844fe5b1c0c657321c5a6be87ed3a85818b0884e746c77da413b913137f77e38a9642cc879f334d6642274afee2d7b133a06c65a42cf02585539aad10ff6759791eab72e9f240a6ee7581b853bda3827bf8d10072dbd1d92db0a4e846bde8ce9e6669261cfc4be85b8330f26c4899beaec0337cd07bdbcd2b346ab6a1a1b52ad95072955250de70eb6f4b3ba99db21c5c42e0fa1b44f2348b6f98a147768a7ebf7690a5c4bf4fd037fddd404f69b2c8c212e1b0458437d483ce93c7c5d65cfc5c0dfb3a17074580fef495f87cea0cc032b7746425304c613b97cb70d60f579ded837bfb9472607bfd028a9ebff8f7f9a31f2f562a60b98ce4442a996b50d31054764baf71630710ea723df78eb31bede23298cd241dde4a873014c246353219e68d674f41f51f4ab00d39dd8ccfef69892960d0fee325efb1b891ff2533685e91d2173678c1914d4a81f975f3d45b7b9c44ec1d5a9316d4e6fd6b65eff4fa36cc64d52808fc2286e1b9e8d311cccba23f904deba4448f2589d377705e3f5308a0ad40d81925340f1f6bd030183947c62d2de0ea97eb719f8e176f14eea4b25597fd9bdd536d64c269e30076a119fd2214e43991129692ff16a073f073712cf75e30050d02903e941ac8867ed34845dd293717ebb9101d091ac86ba28d47be85d1bd62f89b3c40e6f4d7a9ac8ecb8f900259404e48cf7041faa40cc4b01aa7d85ab3812fcc62572bd44557d9095a48fb39ed6d476932953a6dd7b4db5b5d2779b2559e619ecf8b7d52042eee027e3194d91b6020ca4b027e9d6578204548056f7f7df21c8626190a42580a7c6ed3e796babdd57f2703ff70bd16efa1d852fee4c09aa00829bf0738998dbcf253297a7cc1d4e8bd6fcf7ac79a9accfb5288af5539825dd58bd891f668b11d765335f087a80d12e5050a4bb963b918e0308093c0e4d8a0c9ddd8915f1510d0c3d191272e4d68fe0eb8244792730dcb46338ae79c887d0a568e5e7eee834792e0390d2fdbb891acd688de5d69c8857e282088731e2d9ccc6a3b978008786603143f40631bc8b2b87e3c8e70cb568c79f122184a4e0793fe050e979fa83ed8e55b2e62e369ea3c63c7b30437dafa670d1cb06557a5093528844faeb3932f02d030c6671d5a3126b9c492ea30c6141e7504fe5a1c1f175516f5922ac7ff81280437193d41a98eafd31d7d40b3fe4e6cf276cc42e43c0c066d47e32e14eae2fb0d7d55f43fe0165868c526080a8f68ae4f032786436009292329b38e1a2ad5d47858cb41f2397f9a525bb9b0c743aff9b043aabb948159bf448aa69657953a5d2e0cb58bfc3004d1f6fa5df4ac785d8075bfb7ccc7f3922291060bdbab284b5be0dc12ff2c272dd669af9a1e8408c2fab8f01f8c15d088f96ac6fbbced7cd599b69761674fa04c0e866455ac370f20e87af1b8f195fb19638f0beba150daae56031b0a203b5e324024119ba196b648b2c859cc5a5a419af0496657f19852a281e5e065f54280dc2020e1946cb8cd5c9aa55d7885edef17941e5400d2d1259ebdca03d08dea1e7857a35ec4036cc2a48decb451c0159c5c10dea07fd46b8744a646fcd0153e1d29794ed67a786981c196d769da7c6df135b5ba0695b2855c94979c5281591a1c7b6a4aee75b50cb7904df4bea0d0b072b671b7d981d2bb0a9bb9761f1791514e3f2f3f6b8ea60615ac2afe075eb370bccaa5d91fb9652c46051973c9e9314889c87ae001d585a245c218573265c25466a98aacf5872c14ecbae0700b250f13bdde9ade6fd046765135ee79e617f5273379ecd8643de70b4c1ff1ab4b83e01fe264177148303233c4e77a9c36a5f1bcc4dc3d96b36f1a9019fdda920166fc3513d346c6d244b55b61d721a90569d814701ca98b5b78157530335fafe49ddca0b5a1cf125be2719d28b218aeed1c1adcf2b2765cb2f663acaa9a89e81a17352a00d8c0d791a4b7ae66ef51c3f66127ba475251fd9d852d0c998491c79dd0f8d69f18ee794cf1c679997a0a9c9bac9d793171925fdc193db58edf94840efbe2793f218a8e341935d109768e304361fbcd5d54ac76229aa290e811b9a754fb9e948715336b0027c3f495f4551c9b4f2c9252b3eca4948ff0af781a3b70227457fbd400fce665a64f6fc3e66b241bc6b9916c7d2325850528dcb1ae64fa2f7213252c046fe63658e95f69cc95b163184ad3b205f61d7c23db5a7f1fc856af35d219e99a46ec31d1f3235214b5cbb18d7bcdbe0c3d0cc18f323131fa8eb90b6cb879607ea30ee108b0249618ae5168d633d7b91830dbfdfd334b4c7eb533b80d57790f32d788f8538c19f45c63e3b5757176c4f022272e833d0951e7d53128eca4a89767723292093dfb693429ef4023bde7ee3336437a1ec3eb1757450e6d2897bcf18915f023e085ff591ccc49d6cf117fd64f002a0e0885bc15b0bd8a00589f18f7d7a283f19b0424527fe82282d16990c93cd03a00b2ad20892d91a89df569490ebcfddb194a9ca740c50ff911f325c9b245b7d5683861590b7d5c8a3bac1808d09cbc8eb32b0c3e88dbad6b59e3e2d0f0d1de8f9f9b852f65823f5e9b9560d49c2ce6f7f301c6211d9776fbbc728a38c274473b745de5e0dd3285c1f1c1a038ab59ebaddd080583671f7474d00094ecf24c56074bc913fc4487c4fad448f5153bd18a780b2f31f733c71becd9aaca1c564cc98af712e3a617cfef6449b1ab85490bb6f56be4df9ee17291db9b010015c540f3cdaba87f6d2fc8e30d8d1cc37288bd459225ecbceb9e3006332a8805896e68e6c7e7878c309ae304e7600bfa1157972692cfc5b7ebac6673b3ec2813e66b48d540081fa89da8e34686f37aa808a8b7b61d2bc62b469b93c92c543b6e9bbba01cdaf457ff2a87d44a1df4f46d65eb3cd4ecee9d096bd09aad9fec377a765c7d12df2956bcf44f42830167f7776ae5233ddeb663901a24bb9edaadc727b28788d17a86e3b13e3b5908996f136e5e39bf5aace2c3cda9c74956a087aa520db6ce7e71b206e4b632cc19a3e7e425c0f062338c6035297dc8d93927121f1ca81b31ef079ce68ab016fb1ecb22abc4b4b69c39fa5beb3635bacc9ba1f2c47e6992871878849e1510996f2b9c48537b6094684fd5d55bcc1586de194ce3c0f47d8bb9994290583809695363bf41820114bc45f0de1b74a0818dfdc6b95dd282be017abe55150dcf08d381989ca091d1ab4edd7a684a461a11d1d1d386a9b061963bdffb303ceeb2439ee1a13655ecf75f24d1913fba7a565947541d20ed067344b4eb67e3f473591e1b8d25aef88b50714dff01047a2d7a0e74386505d2d08741a6b55d3d9064831947b5633ccf1711356f8463ebc4228bf2044a521a8d95dd21a4f194c2e4431cd92724d3924d9fb223a9725d329dbe446d92df387287cab51592cff1d328e5648eff0837d4bc72f3b8d40129e3086307a8488df6da3dade48729fed8ad5841cc1368408d8c6293fd2ac27e34f5808a217d300de4fc9cdc3f6dadeb709a9ee957119d4ad8ee94d9d6304e1532a472c14f6bd085403c6a0b9e586186d0e8f1fe1ab7507c620f6b0857cccab86f2a39f5abb07b645c339ea0a796ec42ab2610c9b44adab5de60a36d23ea548071201df8da5073a414ccbf5a7666c80a9978c747aaf03d4c3c7e2ce717cbdbdb7d37a9ac5f05858f4112d70c72bbb9223f0a2323cb22f2babf587f7bd92ff95dd28803bbab1fac11e1b8773eb2cdd68c5e5842c44d13c64e68470efbfac85e79dd835feeafed73d4c4c0c9c7150fa1bc52868959b394af15e19f6aff349a38cfaea836b900884a9ee3e59ce4257a41a67cafc6baa24301502766eeac0b1d4683aaba7126eb945dbee01536b5a0b3f841efe7fc6541544949b1cbe1c29d30d0e078d1cfc76620ead672ea0db181f2623e1cce8bfd726667ee5062e82ec055f49a812cd42733d584eb1d54d4ea72e954e230f4c84f054520a701a48619013bff3b178181ddde3a28f401c22197eaafa3edc30279550244a3d663554fc16f32acb9e9b4ec67c838ee03059950afa619459931934478b432861e2be1a3a8b7c098348b89503e349cf3c5416809e111140ff48d0f77b5fe49004e4837a46f9ed79e67cb19d3981d9567e46f554d813fafb4c55dd2f6b90dcb7a9983bd4b1939630fa2c0ccb3036727cc141ab470f140db50950d3e0cbad2473eaedab3fcad1a95ffa59140d252aca78e546ab5fccbcdb00edb468ffe8e0012b830512eb5e9d94a2555748ca640d2d33381bc389696d82fffc1b3a0b73456662822aa2f5d006956f38b21253293a6baf45ec98e0fccb5ea53cd47da6da03b9c15127880e7d114356888d8b17ee9cc355205a49d80c687ae2670d6b56ad9ee7c8500e2969bf7c839c4d59236c3c9c0d2c9e313cd61ee19d0b87ca1dab2071f19b4501371a2a87c70d1b5c36a88f0293097e351ca814a3fa302435a9b5304880e52d225e5d62dcb66958115aa07510572ed141a07911ad566e238e093617e895ae1a3629c3c644d1a8a32fc067e56bf925abbab5ac9bed4f3864face3ef7e2659e28c6d9a2f49213938231e10fab7d97f58206652f1af7af0215dfed304206573f6f69b79b0f6942b2aec5ea67dad7b73e77cf01bf5cbf97a0777dcfee559d582e914202638ca3111ffad69ea59b7bda0040b084614837babfc6f3ae8e0d4d6a80b1bc4b73a1beafc6dfe87b9005934985af628ae3588840c77576fd416c03d157f03d185601df6578f9e41a67cd1f9d852f8ebef471de92a77e1a41d34363028c11946fcfc21430d6a3aa87501e6dca405d2a4e75b1592d05302a98bba8e354ad79887d8e382863edf"]}, 0x1010}, {&(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x330}, {&(0x7f0000001b00)={0x80, 0x38, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x79, 0x0, 0x0, @uid}, @nested={0x5c, 0x96, 0x0, 0x1, [@nested={0x18, 0x85, 0x0, 0x1, [@typed={0x14, 0x148, 0x0, 0x0, @ipv6=@empty}]}, @nested={0x4, 0x3f}, @nested={0x4, 0x47}, @typed={0x8, 0xb0, 0x0, 0x0, @pid=r5}, @nested={0x4, 0xad}, @nested={0x4, 0x36}, @nested={0x4, 0x3d}, @typed={0xe, 0xa4, 0x0, 0x0, @str='![@.,-{\\-\x00'}, @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@empty}]}, @typed={0xc, 0xb, 0x0, 0x0, @u64=0x7}]}, 0x80}, {&(0x7f0000001400)={0x290, 0x21, 0x400, 0x70bd2b, 0x25dfdbff, "", [@nested={0x118, 0x12e, 0x0, 0x1, [@generic="c995cc98f7de832484a11d4b850599a0393936315d1e6efd097dd11fafdaa1f68b9eca45df56dcb0dc0864a299f4947565da232173f6cb0029e10a3397ed0287f08401214e20029582744c0bcff65666bdac2eb859b987426610c6542c7c2c1cf8d0d6f1938c534db2b90cb4be28b8d93fb389a32154a76b6a0af411761be2887762827873e3e8f4547124397af4105e28fd363fe699e9b92deb759b60cbed239ab173dc1010e875b4100f5e5daf7f5d7b866445435a8bad4064157fe7d6c9c3576455bdc3f08c3eb2c174812d38c6c471240b3a9394c9078fec6f91dad8ada5cf7fe6", @typed={0x8, 0xfa, 0x0, 0x0, @str=']$\xec\x00'}, @nested={0x4, 0xcc}, @generic="b2313f3053168c726a3b216cecba6a049ad57b72c92d59692c99bae68c56f31a0d", @nested={0x4, 0x59}]}, @generic="106293172015b8a7c3cb0cc5acf0dcfef23cfaa5e5e4a1fab21abf56d66a7a0d4641f6bbbe0e826489568fb0a5a68a84b7b1646d153cf26cc7ad0e0e3eadde0bc18aae989e2c98ba0bd5c25aaf951a7ba11ada7954f68556c225015c9bb510455ba44ad919b6242b77342ff88c822a99990d397a1a421c50693c83d9b541492d6a7db75223391cf4095683dfde843a805a2282594d125c5853a6edfd243a40dbf9310247101e2e8c10c7cf71ec974d02223b45b3344542c7c92c0bea474e4d723df2c86271ed84153f8e2279fb355f2a923b091cc05704e948635792eb467b", @generic="ed2e521548e79126a1dffdc62ff0d78100a0ee150c7f06d259", @nested={0x6e, 0x53, 0x0, 0x1, [@typed={0x8, 0x69, 0x0, 0x0, @str=')){\x00'}, @generic="062fa499406a5e8ae777ff8c4706790be40f7b5b676d2ccd56419fb9aec49fa438722fb65a0eb6f1c4fef7277ede8eb96804434025c612e4dd05605fe703c417bb56d120b7779f2813bbbc606200d6bc21b4f78fbb71e96b7ccf1b4c4257b530718c"]}]}, 0x290}, {&(0x7f0000001a00)=ANY=[@ANYBLOB="f8000000240000032cbd7000fedbdf2508009e00", @ANYRES32, @ANYRES32=r3, @ANYBLOB="08000e00ac1e0001b8006a00e1e4672b38bca6efea904b40a0bdd50e86e402232b3b2c50696ca10c98fe993aaf0e9c0c7ca270eb966b3f4a63e8181b9e80bf1ffd03a0385de6562a7bf801d6a84a381851c97150d861c27cd9706bbf72f475d4fadfeee5f4d4984b74cb974f32907f65af5837bd0d0cb3bde6a7ac637911e3d68ca5afadedb6aec9d704d738eeab36bb702a560a980fe87910bacb41c386ccc575a806753c9a295f380f910515412edd0b6c9f9780ab5bd01385340288a2d8840c00b5000400000000000000100b12ba291f328109347600"], 0xf8}, {&(0x7f0000001c80)={0x10, 0x25, 0x8, 0x70bd29, 0x25dfdbfd}, 0x10}], 0x7, 0x0, 0x0, 0x400c041}, 0x508f9e78fc80dbd8) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a02003209058121000007fd0709"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): rts, unusable: 0 [ 1121.684652][T20250] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1121.684685][T20250] F2FS-fs (loop6): Start checkpoint disabled! [ 1121.786373][ T879] usb 2-1: selecting invalid altsetting 3 [ 1121.786396][ T879] comedi comedi5: could not set alternate setting 3 in high speed [ 1121.786415][ T879] usbduxsigma 2-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 1121.825121][ T879] usbduxsigma 2-1:0.66: probe with driver usbduxsigma failed with error -22 [ 1121.830326][ T879] usb 2-1: USB disconnect, device number 84 [ 1121.890295][T20250] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 1122.447146][ T5767] usb 10-1: new full-speed USB device number 90 using dummy_hcd [ 1122.621841][ T5767] usb 10-1: not running at top speed; connect to a high speed hub [ 1122.621873][ T5767] usb 10-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 1122.623511][ T5767] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1122.623544][ T5767] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.623609][ T5767] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.690852][ T5767] hub 10-1:1.0: USB hub found [ 1122.912583][ T5767] hub 10-1:1.0: 27 ports detected [ 1122.913218][ T5767] hub 10-1:1.0: insufficient power available to use all downstream ports [ 1123.014908][ C0] net_ratelimit: 80 callbacks suppressed [ 1123.318054][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1123.318076][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1123.318104][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1123.318121][ T52] Workqueue: hci1 hci_rx_work [ 1123.318151][ T52] Call Trace: [ 1123.318162][ T52] [ 1123.318173][ T52] dump_stack_lvl+0xe8/0x150 [ 1123.318214][ T52] sysfs_create_dir_ns+0x271/0x2a0 [ 1123.318259][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1123.318304][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1123.318335][ T52] ? do_raw_spin_unlock+0xf5/0x200 [ 1123.318378][ T52] kobject_add_internal+0x622/0xcd0 [ 1123.318433][ T52] kobject_add+0x163/0x240 [ 1123.318468][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1123.318506][ T52] ? __pfx_kobject_add+0x10/0x10 [ 1123.318541][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1123.318574][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1123.318609][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1123.318639][ T52] ? get_device_parent+0x366/0x3a0 [ 1123.318677][ T52] device_add+0x3fa/0xb80 [ 1123.318709][ T52] hci_conn_add_sysfs+0xd5/0x210 [ 1123.318756][ T52] le_conn_complete_evt+0xfe3/0x16d0 [ 1123.318800][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1123.318843][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1123.318874][ T52] ? skb_pull_data+0xf0/0x200 [ 1123.318921][ T52] hci_le_conn_complete_evt+0x187/0x470 [ 1123.318963][ T52] hci_event_packet+0x67a/0xf10 [ 1123.319000][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1123.319030][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 1123.319065][ T52] ? audit_filter_rules+0x4f70/0x5d10 [ 1123.319103][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1123.319134][ T52] ? hci_send_to_monitor+0xe2/0x590 [ 1123.319175][ T52] hci_rx_work+0x3ee/0x1020 [ 1123.319212][ T52] ? process_scheduled_works+0x97a/0x1630 [ 1123.319250][ T52] process_scheduled_works+0xc3d/0x1630 [ 1123.319285][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1123.319354][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 1123.319403][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1123.319433][ T52] ? assign_work+0x3cf/0x5d0 [ 1123.319474][ T52] worker_thread+0xa47/0xfb0 [ 1123.319544][ T52] kthread+0x38b/0x480 [ 1123.319572][ T52] ? __pfx_worker_thread+0x10/0x10 [ 1123.319605][ T52] ? __pfx_kthread+0x10/0x10 [ 1123.319633][ T52] ret_from_fork+0x514/0xb70 [ 1123.319662][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 1123.319686][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1123.319717][ T52] ? __switch_to+0xc89/0x1420 [ 1123.319758][ T52] ? __pfx_kthread+0x10/0x10 [ 1123.319786][ T52] ret_from_fork_asm+0x1a/0x30 [ 1123.319847][ T52] [ 1123.319942][ T52] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1123.319977][ T52] Bluetooth: hci1: failed to register connection device [ 1123.450454][T19871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.790780][T19871] veth0_vlan: entered promiscuous mode [ 1123.863785][T19871] veth1_vlan: entered promiscuous mode [ 1123.980655][ T5767] hub 10-1:1.0: config failed, can't get hub status (err -32) [ 1124.050032][T19871] veth0_macvtap: entered promiscuous mode [ 1124.082371][T19871] veth1_macvtap: entered promiscuous mode [ 1124.188734][T19871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1124.269889][T19871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.655676][T20361] loop6: detected capacity change from 0 to 64 [ 1125.278700][T20361] hfs: unable to locate alternate MDB [ 1125.278713][T20361] hfs: continuing without an alternate MDB [ 1125.296666][T19655] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.299261][T19655] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.488916][T19655] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.246698][ T5739] usb 10-1: USB disconnect, device number 90 [ 1126.317490][T20204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.585101][T11186] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1127.835415][T20384] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1127.909652][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.909671][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.294870][ C1] net_ratelimit: 177 callbacks suppressed [ 1129.568266][T19602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.568296][T19602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.235997][ T5739] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1130.467837][ T5739] usb 1-1: Using ep0 maxpacket: 32 [ 1130.470939][ T5739] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1130.866524][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.866592][ T5739] usb 1-1: Product: syz [ 1130.866649][ T5739] usb 1-1: Manufacturer: syz [ 1130.866712][ T5739] usb 1-1: SerialNumber: syz [ 1131.059244][ T5739] usb 1-1: config 0 descriptor?? [ 1131.830909][ T5739] airspy 1-1:0.0: Board ID: 00 [ 1131.830932][ T5739] airspy 1-1:0.0: Firmware version: [ 1132.058037][ T5739] airspy 1-1:0.0: usb_control_msg() failed -32 request 11 [ 1132.098263][ T5739] airspy 1-1:0.0: Registered as swradio24 [ 1132.098282][ T5739] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1132.143262][T11186] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1133.334848][ C1] net_ratelimit: 160 callbacks suppressed [ 1133.929739][ T5774] usb 1-1: USB disconnect, device number 11 [ 1134.084627][T20448] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3926'. [ 1134.441273][ T5739] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1134.747402][ T5739] usb 2-1: Using ep0 maxpacket: 16 [ 1134.872346][ T5739] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1135.073483][ T5739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.073558][ T5739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1135.073613][ T5739] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1135.078641][ T5739] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1135.078664][ T5739] usb 2-1: Manufacturer: syz [ 1135.102586][ T5739] usb 2-1: config 0 descriptor?? [ 1135.215563][ T879] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1135.366744][ T879] usb 1-1: not running at top speed; connect to a high speed hub [ 1135.366778][ T879] usb 1-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 1135.368474][ T879] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1135.368508][ T879] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.368571][ T879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.462327][ T879] hub 1-1:1.0: USB hub found [ 1135.613780][T20475] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3935'. [ 1135.766849][ T31] audit: type=1326 audit(1789797672.128:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20451 comm="syz.1.3927" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba79e159 code=0x7ffc0000 [ 1135.769740][ T31] audit: type=1326 audit(1789797672.128:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20451 comm="syz.1.3927" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba79e159 code=0x7ffc0000 [ 1135.770647][ T31] audit: type=1326 audit(1789797672.128:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20451 comm="syz.1.3927" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba79e159 code=0x7ffc0000 [ 1135.772896][ T31] audit: type=1326 audit(1789797672.128:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20451 comm="syz.1.3927" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3aba79e159 code=0x7ffc0000 [ 1135.794968][ T31] audit: type=1326 audit(1789797672.138:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20451 comm="syz.1.3927" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba79e159 code=0x7ffc0000 [ 1135.795033][ T31] audit: type=1326 audit(1789797672.148:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20451 comm="syz.1.3927" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba79e159 code=0x7ffc0000 [ 1135.795086][ T31] audit: type=1326 audit(1789797672.148:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20451 comm="syz.1.3927" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba79e159 code=0x7ffc0000 [ 1135.799537][ T31] audit: type=1326 audit(1789797672.158:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20451 comm="syz.1.3927" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba79e159 code=0x7ffc0000 [ 1135.799788][ T31] audit: type=1326 audit(1789797672.158:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20451 comm="syz.1.3927" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba79e159 code=0x7ffc0000 [ 1135.803552][ T31] audit: type=1326 audit(1789797672.158:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20451 comm="syz.1.3927" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3aba79ddeb code=0x7ffc0000 [ 1135.926997][T20475] loop7: detected capacity change from 0 to 1024 [ 1136.056572][T20475] EXT4-fs (loop7): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1136.056606][T20475] EXT4-fs (loop7): can't mount with both data=journal and delalloc [ 1136.525102][ T5739] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1136.696634][ T5739] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1136.719471][ T5739] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.719497][ T5739] usb 10-1: Product: syz [ 1136.719515][ T5739] usb 10-1: Manufacturer: syz [ 1136.719533][ T5739] usb 10-1: SerialNumber: syz [ 1137.221365][ T879] hub 1-1:1.0: config failed, can't read hub descriptor (err -22) [ 1137.287663][ T879] usb 1-1: USB disconnect, device number 12 [ 1137.343535][ T5739] rtl8150 10-1:1.0: couldn't reset the device [ 1137.343843][ T5739] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 1137.384006][ T5739] usb 10-1: USB disconnect, device number 91 [ 1137.413894][ T5774] usb 2-1: USB disconnect, device number 85 [ 1138.454842][ C0] net_ratelimit: 67 callbacks suppressed [ 1140.306269][T20517] loop1: detected capacity change from 0 to 40427 [ 1140.322846][T20517] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 1140.322869][T20517] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1140.436557][T20537] fuse: fd is not a fuse device [ 1140.726906][T20552] netlink: 'syz.7.3952': attribute type 1 has an invalid length. [ 1140.727018][T20552] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3952'. [ 1141.965865][T20517] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1142.255034][ T5774] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 1142.426838][ T5774] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1142.428233][ T5774] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.428258][ T5774] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1142.428337][ T5774] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.485349][ T5774] usb 10-1: config 0 descriptor?? [ 1142.535092][ T5739] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1142.663209][T20581] fuse: fd is not a fuse device [ 1142.713003][ T5739] usb 1-1: Using ep0 maxpacket: 8 [ 1142.723006][ T5739] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1142.735024][ T5739] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 1142.735051][ T5739] usb 1-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 1142.735121][ T5739] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1142.735152][ T5739] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1142.735180][ T5739] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1142.735251][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.816094][ T5739] usbtmc 1-1:16.0: bulk endpoints not found [ 1143.175578][T20576] loop6: detected capacity change from 0 to 40427 [ 1143.494939][ C1] net_ratelimit: 117 callbacks suppressed [ 1143.533050][T20576] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1143.533077][T20576] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1143.572697][T20576] F2FS-fs (loop6): build fault injection rate: 64 [ 1143.572727][T20576] F2FS-fs (loop6): build fault injection type: 0x5 [ 1143.665631][T20576] F2FS-fs (loop6): invalid crc value [ 1144.660615][T20612] loop1: detected capacity change from 0 to 64 [ 1144.822834][T20612] hfs: unable to locate alternate MDB [ 1144.822852][T20612] hfs: continuing without an alternate MDB [ 1145.267994][ T879] usb 10-1: USB disconnect, device number 92 [ 1145.429205][T20576] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1145.496952][T20625] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1145.527709][T20576] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 1145.527737][T20576] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1145.527767][T20576] F2FS-fs (loop6): Start checkpoint disabled! [ 1145.578772][T13123] usb 1-1: USB disconnect, device number 13 [ 1145.757488][T20576] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 1147.662252][T20662] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3980'. [ 1147.986818][T20666] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1148.614841][ C0] net_ratelimit: 88 callbacks suppressed [ 1149.544906][T20683] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3977'. [ 1149.874949][ T5774] usb 10-1: new full-speed USB device number 93 using dummy_hcd [ 1150.027933][ T5774] usb 10-1: not running at top speed; connect to a high speed hub [ 1150.027966][ T5774] usb 10-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 1150.029503][ T5774] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1150.029536][ T5774] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.029600][ T5774] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.158475][ T5739] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1150.160401][ T5774] hub 10-1:1.0: USB hub found [ 1150.284491][T20698] device-mapper: ioctl: name not supplied when creating device [ 1150.342028][ T5739] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1150.343677][ T5739] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1150.343701][ T5739] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1150.352860][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.352883][ T5739] usb 2-1: Product: syz [ 1150.352901][ T5739] usb 2-1: Manufacturer: syz [ 1150.352918][ T5739] usb 2-1: SerialNumber: syz [ 1150.366855][ T5739] usb 2-1: config 0 descriptor?? [ 1150.408922][ T5774] hub 10-1:1.0: 27 ports detected [ 1150.409587][ T5774] hub 10-1:1.0: insufficient power available to use all downstream ports [ 1150.566442][ T5774] hub 10-1:1.0: config failed, can't get hub status (err -71) [ 1150.597874][ T5774] usb 10-1: USB disconnect, device number 93 [ 1150.618387][T20681] loop1: detected capacity change from 0 to 64 [ 1150.663851][T20681] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 1150.663953][T20681] hfs: get root inode failed [ 1150.736757][T20681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.746541][T20681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.785252][T20681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.818548][T20681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.843677][T20681] loop1: detected capacity change from 0 to 2 [ 1150.853689][T20681] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1150.861626][ T879] usb 2-1: USB disconnect, device number 86 [ 1151.725108][T20730] loop6: detected capacity change from 0 to 64 [ 1151.888866][T20730] hfs: unable to locate alternate MDB [ 1151.888907][T20730] hfs: continuing without an alternate MDB [ 1153.084122][T20752] loop6: detected capacity change from 0 to 64 [ 1153.118924][T20752] hfs: unable to locate alternate MDB [ 1153.118969][T20752] hfs: continuing without an alternate MDB [ 1153.809346][T20732] loop1: detected capacity change from 0 to 40427 [ 1153.811416][T20732] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 1153.811443][T20732] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1153.894866][ C0] net_ratelimit: 99 callbacks suppressed [ 1154.002257][T20732] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1154.038342][T20732] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1154.038366][T20732] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1154.218356][T18946] syz-executor: attempt to access beyond end of device [ 1154.218356][T18946] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1154.236996][T18946] CPU: 0 UID: 0 PID: 18946 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1154.237031][T18946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1154.237047][T18946] Call Trace: [ 1154.237058][T18946] [ 1154.237068][T18946] dump_stack_lvl+0xe8/0x150 [ 1154.237110][T18946] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1154.237154][T18946] f2fs_write_end_bio+0x1211/0x16e0 [ 1154.237185][T18946] ? blkg_put+0x22/0x240 [ 1154.237239][T18946] __submit_merged_bio+0x258/0x6a0 [ 1154.237274][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.237304][T18946] ? rcu_is_watching+0x16/0xb0 [ 1154.237342][T18946] __submit_merged_write_cond+0x3c9/0x4e0 [ 1154.237390][T18946] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1154.237443][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.237483][T18946] f2fs_write_data_pages+0x2a27/0x36f0 [ 1154.237573][T18946] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1154.237610][T18946] ? is_bpf_text_address+0x26/0x2b0 [ 1154.237656][T18946] ? arch_stack_walk+0xfb/0x150 [ 1154.237719][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.237749][T18946] ? add_lock_to_list+0xc7/0x100 [ 1154.237784][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.237814][T18946] ? __lock_acquire+0x1511/0x2de0 [ 1154.237871][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.237904][T18946] ? do_raw_spin_lock+0x12b/0x2f0 [ 1154.237946][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.237980][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.238009][T18946] ? do_raw_spin_unlock+0xf5/0x200 [ 1154.238045][T18946] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1154.238087][T18946] do_writepages+0x338/0x560 [ 1154.238117][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.238149][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.238183][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.238213][T18946] ? do_raw_spin_unlock+0xf5/0x200 [ 1154.238254][T18946] filemap_fdatawrite+0x1e9/0x2f0 [ 1154.238287][T18946] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1154.238357][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.238390][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.238425][T18946] ? do_raw_spin_unlock+0xf5/0x200 [ 1154.238466][T18946] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1154.238515][T18946] f2fs_write_checkpoint+0xa3d/0x2710 [ 1154.238541][T18946] ? __lock_acquire+0x747/0x2de0 [ 1154.238605][T18946] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1154.238630][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.238722][T18946] kill_f2fs_super+0x2dd/0x700 [ 1154.238759][T18946] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1154.238800][T18946] ? call_rcu+0x64d/0x8b0 [ 1154.238830][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.238860][T18946] ? lockdep_hardirqs_on+0x7b/0x110 [ 1154.238891][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.238937][T18946] deactivate_locked_super+0xbc/0x110 [ 1154.238977][T18946] cleanup_mnt+0x3d3/0x460 [ 1154.239009][T18946] task_work_run+0x1d9/0x270 [ 1154.239045][T18946] ? __pfx_task_work_run+0x10/0x10 [ 1154.239086][T18946] exit_to_user_mode_loop+0x204/0x770 [ 1154.239117][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.239146][T18946] ? rcu_is_watching+0x16/0xb0 [ 1154.239182][T18946] do_syscall_64+0x328/0x520 [ 1154.239214][T18946] ? trace_irq_disable+0x3b/0x140 [ 1154.239240][T18946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.239273][T18946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.239299][T18946] RIP: 0033:0x7f3aba79f397 [ 1154.239323][T18946] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1154.239344][T18946] RSP: 002b:00007ffecebbae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1154.239371][T18946] RAX: 0000000000000000 RBX: 00007f3aba8344bb RCX: 00007f3aba79f397 [ 1154.239389][T18946] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecebbaf20 [ 1154.239406][T18946] RBP: 00007ffecebbaf20 R08: 00007ffecebbbf20 R09: 00000000ffffffff [ 1154.239424][T18946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffecebbbfb0 [ 1154.239441][T18946] R13: 00007f3aba8344bb R14: 0000000000119c28 R15: 00007ffecebbbff0 [ 1154.239481][T18946] [ 1154.243266][T18946] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1154.243375][T18946] CPU: 0 UID: 0 PID: 18946 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1154.243402][T18946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1154.243417][T18946] Call Trace: [ 1154.243427][T18946] [ 1154.243438][T18946] dump_stack_lvl+0xe8/0x150 [ 1154.243476][T18946] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1154.243525][T18946] f2fs_write_end_bio+0x1211/0x16e0 [ 1154.243577][T18946] __submit_merged_bio+0x258/0x6a0 [ 1154.243611][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.243641][T18946] ? rcu_is_watching+0x16/0xb0 [ 1154.243678][T18946] __submit_merged_write_cond+0x3c9/0x4e0 [ 1154.243724][T18946] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1154.243776][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.243816][T18946] f2fs_write_data_pages+0x2a27/0x36f0 [ 1154.243898][T18946] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1154.243936][T18946] ? is_bpf_text_address+0x26/0x2b0 [ 1154.243982][T18946] ? arch_stack_walk+0xfb/0x150 [ 1154.244044][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.244073][T18946] ? add_lock_to_list+0xc7/0x100 [ 1154.244107][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.244136][T18946] ? __lock_acquire+0x1511/0x2de0 [ 1154.244194][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.244223][T18946] ? do_raw_spin_lock+0x12b/0x2f0 [ 1154.244265][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.244299][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.244328][T18946] ? do_raw_spin_unlock+0xf5/0x200 [ 1154.244365][T18946] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1154.244407][T18946] do_writepages+0x338/0x560 [ 1154.244436][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.244468][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.244508][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.244538][T18946] ? do_raw_spin_unlock+0xf5/0x200 [ 1154.244580][T18946] filemap_fdatawrite+0x1e9/0x2f0 [ 1154.244612][T18946] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1154.244683][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.244715][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.244750][T18946] ? do_raw_spin_unlock+0xf5/0x200 [ 1154.244795][T18946] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1154.244839][T18946] f2fs_write_checkpoint+0xa3d/0x2710 [ 1154.244866][T18946] ? __lock_acquire+0x747/0x2de0 [ 1154.244928][T18946] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1154.244954][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.245046][T18946] kill_f2fs_super+0x2dd/0x700 [ 1154.245083][T18946] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1154.245124][T18946] ? call_rcu+0x64d/0x8b0 [ 1154.245154][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.245183][T18946] ? lockdep_hardirqs_on+0x7b/0x110 [ 1154.245213][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.245259][T18946] deactivate_locked_super+0xbc/0x110 [ 1154.245297][T18946] cleanup_mnt+0x3d3/0x460 [ 1154.245327][T18946] task_work_run+0x1d9/0x270 [ 1154.245360][T18946] ? __pfx_task_work_run+0x10/0x10 [ 1154.245400][T18946] exit_to_user_mode_loop+0x204/0x770 [ 1154.245427][T18946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.245456][T18946] ? rcu_is_watching+0x16/0xb0 [ 1154.245492][T18946] do_syscall_64+0x328/0x520 [ 1154.245528][T18946] ? trace_irq_disable+0x3b/0x140 [ 1154.245554][T18946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.245587][T18946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.245613][T18946] RIP: 0033:0x7f3aba79f397 [ 1154.245635][T18946] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1154.245656][T18946] RSP: 002b:00007ffecebbae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1154.245681][T18946] RAX: 0000000000000000 RBX: 00007f3aba8344bb RCX: 00007f3aba79f397 [ 1154.245699][T18946] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecebbaf20 [ 1154.245716][T18946] RBP: 00007ffecebbaf20 R08: 00007ffecebbbf20 R09: 00000000ffffffff [ 1154.245734][T18946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffecebbbfb0 [ 1154.245751][T18946] R13: 00007f3aba8344bb R14: 0000000000119c28 R15: 00007ffecebbbff0 [ 1154.245791][T18946] [ 1154.260147][T18946] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1155.975875][T20772] loop6: detected capacity change from 0 to 32768 [ 1156.028082][T20772] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1156.082406][T20772] XFS (loop6): Ending clean mount [ 1156.199436][ T879] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1156.471255][ T879] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1156.487535][ T879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.487559][ T879] usb 2-1: Product: syz [ 1156.487576][ T879] usb 2-1: Manufacturer: syz [ 1156.487593][ T879] usb 2-1: SerialNumber: syz [ 1156.586157][T13123] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1156.753612][ T8770] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1156.782318][T13123] usb 1-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 1156.794399][T13123] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1156.794455][T13123] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1156.794487][T13123] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1156.794550][T13123] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1156.794640][T13123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.854089][T13123] usb 1-1: config 0 descriptor?? [ 1156.856479][T20793] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1156.919064][T20781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.919814][T20781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.269856][ T879] (unnamed net_device) (uninitialized): Assigned a random MAC address: 62:36:17:d0:fb:be [ 1157.295905][ T879] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 1157.305703][ T879] usb 2-1: USB disconnect, device number 87 [ 1158.135466][T13123] hid_parser_main: 24 callbacks suppressed [ 1158.135500][T13123] logitech-djreceiver 0003:046D:C539.0006: unknown main item tag 0x0 [ 1158.135528][T13123] logitech-djreceiver 0003:046D:C539.0006: unknown main item tag 0x0 [ 1158.140278][T13123] logitech-djreceiver 0003:046D:C539.0006: unknown main item tag 0x0 [ 1158.140306][T13123] logitech-djreceiver 0003:046D:C539.0006: unknown main item tag 0x0 [ 1158.140331][T13123] logitech-djreceiver 0003:046D:C539.0006: unknown main item tag 0x0 [ 1158.140356][T13123] logitech-djreceiver 0003:046D:C539.0006: unknown main item tag 0x0 [ 1158.140381][T13123] logitech-djreceiver 0003:046D:C539.0006: unknown main item tag 0x0 [ 1158.140406][T13123] logitech-djreceiver 0003:046D:C539.0006: unbalanced collection at end of report description [ 1158.141258][T13123] logitech-djreceiver 0003:046D:C539.0006: logi_dj_probe: parse failed [ 1158.141333][T13123] logitech-djreceiver 0003:046D:C539.0006: probe with driver logitech-djreceiver failed with error -22 [ 1158.159309][T13123] usb 1-1: USB disconnect, device number 14 [ 1159.015068][ C1] net_ratelimit: 90 callbacks suppressed [ 1159.214897][T20827] loop1: detected capacity change from 0 to 8 [ 1159.273323][T20827] SQUASHFS error: Unable to read inode 0xa7 ** 13 printk messages dropped ** [ 1162.017083][T20844] loop9: detected capacity change from 0 to 32768 [ 1162.150822][T20844] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1162.355053][T20844] XFS (loop9): Ending clean mount ** 712 printk messages dropped ** ** 43 printk messages dropped ** ** 30 printk messages dropped ** ** 11 printk messages dropped ** [ 1163.485915][T12677] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd ** 970 printk messages dropped ** ** 55 printk messages dropped ** ** 48 printk messages dropped ** [ 1164.004213][T20871] loop1: detected capacity change from 0 to 32768 [ 1164.075460][T18830] net_ratelimit: 72 callbacks suppressed [ 1164.128405][T20871] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd ** 548 printk messages dropped ** [ 1164.261066][T20888] fuse: fd is not a fuse device [ 1164.303033][T20871] XFS (loop1): Ending clean mount [ 1165.295224][T18946] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd ** 8022 printk messages dropped ** [ 1169.158049][T20932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4029'. [ 1169.414858][ C1] net_ratelimit: 98 callbacks suppressed [ 1169.605609][T11186] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1169.605664][T11186] CPU: 0 UID: 0 PID: 11186 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1169.605693][T11186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1169.605712][T11186] Workqueue: hci4 hci_rx_work [ 1169.605743][T11186] Call Trace: [ 1169.605754][T11186] [ 1169.605766][T11186] dump_stack_lvl+0xe8/0x150 [ 1169.605806][T11186] sysfs_create_dir_ns+0x271/0x2a0 [ 1169.605842][T11186] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1169.605875][T11186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.605898][T11186] ? do_raw_spin_unlock+0xf5/0x200 [ 1169.605931][T11186] kobject_add_internal+0x622/0xcd0 [ 1169.605967][T11186] kobject_add+0x163/0x240 [ 1169.606000][T11186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.606030][T11186] ? __pfx_kobject_add+0x10/0x10 [ 1169.606055][T11186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.606080][T11186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.606106][T11186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.606132][T11186] ? get_device_parent+0x366/0x3a0 [ 1169.606169][T11186] device_add+0x3fa/0xb80 [ 1169.606199][T11186] hci_conn_add_sysfs+0xd5/0x210 [ 1169.606234][T11186] le_conn_complete_evt+0xfe3/0x16d0 [ 1169.606267][T11186] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1169.606303][T11186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.606326][T11186] ? skb_pull_data+0xf0/0x200 [ 1169.606361][T11186] hci_le_conn_complete_evt+0x187/0x470 [ 1169.606393][T11186] hci_event_packet+0x67a/0xf10 [ 1169.606412][T11186] ? trace_irq_disable+0x3b/0x140 [ 1169.606439][T11186] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1169.606462][T11186] ? __pfx_hci_event_packet+0x10/0x10 [ 1169.606494][T11186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.606517][T11186] ? hci_send_to_monitor+0xe2/0x590 [ 1169.606548][T11186] hci_rx_work+0x3ee/0x1020 [ 1169.606576][T11186] ? process_scheduled_works+0x97a/0x1630 [ 1169.606603][T11186] process_scheduled_works+0xc3d/0x1630 [ 1169.606629][T11186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.606681][T11186] ? __pfx_process_scheduled_works+0x10/0x10 [ 1169.606713][T11186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.606735][T11186] ? assign_work+0x3cf/0x5d0 [ 1169.606766][T11186] worker_thread+0xa47/0xfb0 [ 1169.606795][T11186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.606827][T11186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.606850][T11186] ? __kthread_parkme+0x71/0x1f0 [ 1169.606888][T11186] kthread+0x38b/0x480 [ 1169.606908][T11186] ? __pfx_worker_thread+0x10/0x10 [ 1169.606934][T11186] ? __pfx_kthread+0x10/0x10 [ 1169.606955][T11186] ret_from_fork+0x514/0xb70 [ 1169.606984][T11186] ? __pfx_ret_from_fork+0x10/0x10 [ 1169.607002][T11186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1169.607025][T11186] ? __switch_to+0xc89/0x1420 [ 1169.607055][T11186] ? __pfx_kthread+0x10/0x10 [ 1169.607076][T11186] ret_from_fork_asm+0x1a/0x30 [ 1169.607124][T11186] [ 1169.607177][T11186] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1169.607208][T11186] Bluetooth: hci4: failed to register connection device [ 1170.388711][T20955] FAULT_INJECTION: forcing a failure. [ 1170.388711][T20955] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.388749][T20955] CPU: 1 UID: 0 PID: 20955 Comm: syz.9.4042 Not tainted syzkaller #0 PREEMPT(full) [ 1170.388779][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1170.388795][T20955] Call Trace: [ 1170.388806][T20955] [ 1170.388817][T20955] dump_stack_lvl+0xe8/0x150 [ 1170.388862][T20955] should_fail_ex+0x410/0x560 [ 1170.388899][T20955] should_failslab+0xa8/0x100 [ 1170.388935][T20955] __kmalloc_noprof+0xfe/0x720 [ 1170.388963][T20955] ? tomoyo_encode+0x2ad/0x570 [ 1170.388998][T20955] ? tomoyo_encode+0x2ad/0x570 [ 1170.389042][T20955] tomoyo_encode+0x2ad/0x570 [ 1170.389088][T20955] tomoyo_realpath_from_path+0x5fa/0x640 [ 1170.389147][T20955] tomoyo_realpath_nofollow+0xc3/0x110 [ 1170.389185][T20955] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 1170.389231][T20955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1170.389268][T20955] tomoyo_find_next_domain+0x259/0x1a90 [ 1170.389297][T20955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1170.389346][T20955] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 1170.389387][T20955] ? tomoyo_bprm_check_security+0xef/0x180 [ 1170.389428][T20955] tomoyo_bprm_check_security+0x11b/0x180 [ 1170.389472][T20955] security_bprm_check+0x85/0x240 [ 1170.389514][T20955] bprm_execve+0x888/0x1590 [ 1170.389576][T20955] ? __pfx_bprm_execve+0x10/0x10 [ 1170.389615][T20955] ? do_raw_spin_unlock+0xf5/0x200 [ 1170.389659][T20955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1170.389689][T20955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1170.389726][T20955] do_execveat_common+0x4f4/0x670 [ 1170.389762][T20955] __x64_sys_execve+0x97/0xc0 [ 1170.389806][T20955] do_syscall_64+0x166/0x520 [ 1170.389840][T20955] ? trace_irq_disable+0x3b/0x140 [ 1170.389868][T20955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.389902][T20955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.389929][T20955] RIP: 0033:0x7f9eb299e159 [ 1170.389954][T20955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.389976][T20955] RSP: 002b:00007f9eb3817028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1170.390004][T20955] RAX: ffffffffffffffda RBX: 00007f9eb2c25fa0 RCX: 00007f9eb299e159 [ 1170.390024][T20955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 1170.390042][T20955] RBP: 00007f9eb2a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1170.390059][T20955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1170.390075][T20955] R13: 00007f9eb2c26038 R14: 00007f9eb2c25fa0 R15: 00007fff1b07b5c8 [ 1170.390117][T20955] [ 1170.391283][T20955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1171.225335][T20965] FAULT_INJECTION: forcing a failure. [ 1171.225335][T20965] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.225375][T20965] CPU: 0 UID: 0 PID: 20965 Comm: syz.9.4043 Not tainted syzkaller #0 PREEMPT(full) [ 1171.225405][T20965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1171.225422][T20965] Call Trace: [ 1171.225433][T20965] [ 1171.225444][T20965] dump_stack_lvl+0xe8/0x150 [ 1171.225487][T20965] should_fail_ex+0x410/0x560 [ 1171.225524][T20965] should_failslab+0xa8/0x100 [ 1171.225560][T20965] __kmalloc_noprof+0xfe/0x720 [ 1171.225585][T20965] ? prepare_creds+0x30/0x820 [ 1171.225616][T20965] ? security_prepare_creds+0x52/0x360 [ 1171.225645][T20965] ? security_prepare_creds+0x52/0x360 [ 1171.225677][T20965] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1171.225756][T20965] security_prepare_creds+0x52/0x360 [ 1171.225791][T20965] prepare_creds+0x57d/0x820 [ 1171.225826][T20965] prepare_exec_creds+0x18/0x220 [ 1171.225860][T20965] bprm_execve+0xe7/0x1590 [ 1171.225902][T20965] ? copy_string_kernel+0x5b4/0x5f0 [ 1171.225956][T20965] ? __pfx_bprm_execve+0x10/0x10 [ 1171.226001][T20965] ? do_raw_spin_unlock+0xf5/0x200 [ 1171.226044][T20965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.226076][T20965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.226113][T20965] do_execveat_common+0x4f4/0x670 [ 1171.226149][T20965] __x64_sys_execve+0x97/0xc0 [ 1171.226192][T20965] do_syscall_64+0x166/0x520 [ 1171.226226][T20965] ? trace_irq_disable+0x3b/0x140 [ 1171.226254][T20965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.226288][T20965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.226315][T20965] RIP: 0033:0x7f9eb299e159 [ 1171.226338][T20965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.226361][T20965] RSP: 002b:00007f9eb3817028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1171.226389][T20965] RAX: ffffffffffffffda RBX: 00007f9eb2c25fa0 RCX: 00007f9eb299e159 [ 1171.226414][T20965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 1171.226432][T20965] RBP: 00007f9eb2a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1171.226450][T20965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1171.226466][T20965] R13: 00007f9eb2c26038 R14: 00007f9eb2c25fa0 R15: 00007fff1b07b5c8 [ 1171.226508][T20965] [ 1171.231751][T20959] loop1: detected capacity change from 0 to 32768 [ 1171.247966][ T5767] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1171.436835][ T5767] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1171.438271][ T5767] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1171.438297][ T5767] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1171.452971][ T5767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.453003][ T5767] usb 1-1: Product: syz [ 1171.453021][ T5767] usb 1-1: Manufacturer: syz [ 1171.453039][ T5767] usb 1-1: SerialNumber: syz [ 1171.596053][T20966] loop6: detected capacity change from 0 to 32768 [ 1171.603697][T20959] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1171.632351][ T5767] usb 1-1: config 0 descriptor?? [ 1171.669734][T20966] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1171.686985][T20959] XFS (loop1): Ending clean mount [ 1171.739517][T20966] XFS (loop6): Ending clean mount [ 1173.153298][T20962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.154164][T20962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.177560][T20962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.180378][T20962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.216222][ T8770] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1173.330350][T18946] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1173.401927][ T5774] usb 1-1: USB disconnect, device number 15 [ 1174.614877][ C0] net_ratelimit: 65 callbacks suppressed [ 1176.085167][T18330] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1176.272055][T18330] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1176.284106][T18330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.284130][T18330] usb 2-1: Product: syz [ 1176.284147][T18330] usb 2-1: Manufacturer: syz [ 1176.284164][T18330] usb 2-1: SerialNumber: syz [ 1176.647958][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.649121][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.239379][T21020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.240307][T21020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.468013][T18330] (unnamed net_device) (uninitialized): Assigned a random MAC address: d2:b5:4d:e5:49:50 [ 1177.543835][T18330] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 1177.562205][T18330] usb 2-1: USB disconnect, device number 88 [ 1177.850815][T21043] No control pipe specified [ 1178.254995][T11186] Bluetooth: hci6: command 0x0406 tx timeout [ 1178.426973][T21048] loop6: detected capacity change from 0 to 512 [ 1178.487932][T21048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1178.805959][T21056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1178.809261][T21056] fuse: fd is not a fuse device [ 1179.802652][T11186] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1179.912182][ T8770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.294958][T21088] Bluetooth: hci6: command 0x0406 tx timeout [ 1180.465683][ C1] net_ratelimit: 91 callbacks suppressed [ 1181.964365][T21117] No control pipe specified [ 1182.785442][ T5774] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1182.916436][ T5774] usb 1-1: device descriptor read/64, error -71 [ 1183.366270][ T5774] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1183.713902][ T5774] usb 1-1: device descriptor read/64, error -71 [ 1183.859835][ T5774] usb usb1-port1: attempt power cycle [ 1184.226095][ T5774] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1184.248952][ T5774] usb 1-1: device descriptor read/8, error -71 [ 1184.540112][ T5774] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1184.601453][ T5774] usb 1-1: device descriptor read/8, error -71 [ 1184.706639][ T5774] usb usb1-port1: unable to enumerate USB device [ 1185.494857][ C0] net_ratelimit: 110 callbacks suppressed [ 1185.632162][T21157] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4094'. [ 1185.710911][T21162] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4094'. [ 1185.789406][T21138] loop6: detected capacity change from 0 to 40427 [ 1185.791835][T21138] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1185.791860][T21138] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1185.792536][T21138] F2FS-fs (loop6): build fault injection rate: 64 [ 1185.792586][T21138] F2FS-fs (loop6): build fault injection type: 0x5 [ 1185.824409][T21138] F2FS-fs (loop6): invalid crc value [ 1186.405286][T21138] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1186.480422][T21138] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 1186.480457][T21138] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1186.480487][T21138] F2FS-fs (loop6): Start checkpoint disabled! [ 1186.604313][T21138] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 1188.056188][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1188.373565][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1188.397830][T21195] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4104'. [ 1188.428917][T21195] loop1: detected capacity change from 0 to 1024 [ 1188.442491][T21195] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1188.442524][T21195] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 1188.496098][T21197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4103'. [ 1188.725923][ T1557] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1188.884953][ T1557] usb 2-1: Using ep0 maxpacket: 16 [ 1188.892971][ T1557] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1188.893018][ T1557] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1188.894353][ T1557] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.894376][ T1557] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1188.894448][ T1557] usb 2-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 1188.953519][ T1557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.953552][ T1557] usb 2-1: Product: syz [ 1188.953569][ T1557] usb 2-1: Manufacturer: syz [ 1188.953587][ T1557] usb 2-1: SerialNumber: syz [ 1189.206503][T21217] FAULT_INJECTION: forcing a failure. [ 1189.206503][T21217] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.206545][T21217] CPU: 1 UID: 0 PID: 21217 Comm: syz.9.4109 Not tainted syzkaller #0 PREEMPT(full) [ 1189.206574][T21217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1189.206594][T21217] Call Trace: [ 1189.206605][T21217] [ 1189.206616][T21217] dump_stack_lvl+0xe8/0x150 [ 1189.206659][T21217] should_fail_ex+0x410/0x560 [ 1189.206695][T21217] should_failslab+0xa8/0x100 [ 1189.206728][T21217] ? anon_vma_fork+0x158/0x540 [ 1189.206767][T21217] kmem_cache_alloc_noprof+0xa1/0x600 [ 1189.206807][T21217] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1189.206844][T21217] ? anon_vma_fork+0x88/0x540 [ 1189.206878][T21217] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1189.206918][T21217] ? anon_vma_fork+0x158/0x540 [ 1189.206963][T21217] anon_vma_fork+0x158/0x540 [ 1189.207001][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.207037][T21217] ? dup_mmap+0x875/0x1dc0 [ 1189.207080][T21217] dup_mmap+0x954/0x1dc0 [ 1189.207142][T21217] ? __pfx_dup_mmap+0x10/0x10 [ 1189.207181][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.207211][T21217] ? do_raw_spin_lock+0x12b/0x2f0 [ 1189.207262][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.207293][T21217] ? lock_acquire+0x115/0x350 [ 1189.207320][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.207359][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.207400][T21217] copy_mm+0x11a/0x480 [ 1189.207437][T21217] ? copy_process+0xd3c/0x43e0 [ 1189.207470][T21217] copy_process+0x1e75/0x43e0 [ 1189.207516][T21217] ? copy_process+0xd3c/0x43e0 [ 1189.207580][T21217] ? __pfx_copy_process+0x10/0x10 [ 1189.207619][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.207648][T21217] ? futex_private_hash_put+0x132/0x160 [ 1189.207688][T21217] kernel_clone+0x2d7/0x940 [ 1189.207725][T21217] ? __pfx_futex_wake+0x10/0x10 [ 1189.207767][T21217] ? __pfx_kernel_clone+0x10/0x10 [ 1189.207817][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.207848][T21217] ? do_futex+0x458/0x4e0 [ 1189.207889][T21217] __x64_sys_clone+0x1b6/0x230 [ 1189.207932][T21217] ? __pfx___x64_sys_clone+0x10/0x10 [ 1189.207988][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.208018][T21217] ? rcu_is_watching+0x16/0xb0 [ 1189.208049][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.208095][T21217] do_syscall_64+0x166/0x520 [ 1189.208128][T21217] ? trace_irq_disable+0x3b/0x140 [ 1189.208155][T21217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.208189][T21217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.208216][T21217] RIP: 0033:0x7f9eb299e159 [ 1189.208238][T21217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.208259][T21217] RSP: 002b:00007f9eb3816fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1189.208286][T21217] RAX: ffffffffffffffda RBX: 00007f9eb2c25fa0 RCX: 00007f9eb299e159 [ 1189.208306][T21217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1189.208321][T21217] RBP: 00007f9eb2a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1189.208337][T21217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.208353][T21217] R13: 00007f9eb2c26038 R14: 00007f9eb2c25fa0 R15: 00007fff1b07b5c8 [ 1189.208409][T21217] [ 1189.453561][T21217] FAULT_INJECTION: forcing a failure. [ 1189.453561][T21217] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.453600][T21217] CPU: 0 UID: 0 PID: 21217 Comm: syz.9.4109 Not tainted syzkaller #0 PREEMPT(full) [ 1189.453628][T21217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1189.453645][T21217] Call Trace: [ 1189.453655][T21217] [ 1189.453666][T21217] dump_stack_lvl+0xe8/0x150 [ 1189.453710][T21217] should_fail_ex+0x410/0x560 [ 1189.453746][T21217] should_failslab+0xa8/0x100 [ 1189.453782][T21217] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1189.453813][T21217] ? blkg_alloc+0xcc/0x8f0 [ 1189.453840][T21217] ? blkg_alloc+0xcc/0x8f0 [ 1189.453875][T21217] blkg_alloc+0xcc/0x8f0 [ 1189.453903][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.453937][T21217] ? xas_store+0x9f5/0x17f0 [ 1189.453979][T21217] blkcg_init_disk+0x1cf/0x2e0 [ 1189.454014][T21217] ? __pfx_blkcg_init_disk+0x10/0x10 [ 1189.454049][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.454082][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.454117][T21217] ? do_raw_spin_unlock+0xf5/0x200 [ 1189.454160][T21217] __alloc_disk_node+0x317/0x600 [ 1189.454205][T21217] __blk_alloc_disk+0x105/0x1d0 [ 1189.454244][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.454280][T21217] ? __pfx___blk_alloc_disk+0x10/0x10 [ 1189.454317][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.454374][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.454408][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.454438][T21217] ? __raw_spin_lock_init+0x45/0x100 [ 1189.454477][T21217] dm_create+0x476/0xf70 [ 1189.454522][T21217] dev_create+0x1f7/0x400 [ 1189.454556][T21217] ? __pfx_dev_create+0x10/0x10 [ 1189.454599][T21217] dm_ctl_ioctl+0x9ec/0xe10 [ 1189.454640][T21217] ? __pfx_dev_create+0x10/0x10 [ 1189.454672][T21217] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1189.454737][T21217] ? __fget_files+0x2a/0x420 [ 1189.454772][T21217] ? __fget_files+0x3a2/0x420 [ 1189.454807][T21217] ? __fget_files+0x2a/0x420 [ 1189.454846][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.454875][T21217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.454907][T21217] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1189.454938][T21217] __se_sys_ioctl+0xfc/0x170 [ 1189.454970][T21217] do_syscall_64+0x166/0x520 [ 1189.455001][T21217] ? trace_irq_disable+0x3b/0x140 [ 1189.455036][T21217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.455070][T21217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.455096][T21217] RIP: 0033:0x7f9eb299e159 [ 1189.455121][T21217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.455142][T21217] RSP: 002b:00007f9eb3817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1189.455170][T21217] RAX: ffffffffffffffda RBX: 00007f9eb2c25fa0 RCX: 00007f9eb299e159 [ 1189.455190][T21217] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 1189.455208][T21217] RBP: 00007f9eb2a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1189.455226][T21217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.455242][T21217] R13: 00007f9eb2c26038 R14: 00007f9eb2c25fa0 R15: 00007fff1b07b5c8 [ 1189.455283][T21217] [ 1189.464668][T21220] FAULT_INJECTION: forcing a failure. [ 1189.464668][T21220] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.464700][T21220] CPU: 0 UID: 0 PID: 21220 Comm: syz.6.4110 Not tainted syzkaller #0 PREEMPT(full) [ 1189.464728][T21220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1189.464744][T21220] Call Trace: [ 1189.464754][T21220] [ 1189.464764][T21220] dump_stack_lvl+0xe8/0x150 [ 1189.464808][T21220] should_fail_ex+0x410/0x560 [ 1189.464845][T21220] should_failslab+0xa8/0x100 [ 1189.464877][T21220] ? vm_area_dup+0x28/0x760 [ 1189.464917][T21220] kmem_cache_alloc_noprof+0xa1/0x600 [ 1189.464960][T21220] ? vm_area_dup+0x28/0x760 [ 1189.465008][T21220] vm_area_dup+0x28/0x760 [ 1189.465051][T21220] ? dup_mmap+0x875/0x1dc0 [ 1189.465093][T21220] dup_mmap+0x87d/0x1dc0 [ 1189.465155][T21220] ? __pfx_dup_mmap+0x10/0x10 [ 1189.465193][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.465223][T21220] ? do_raw_spin_lock+0x12b/0x2f0 [ 1189.465276][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.465306][T21220] ? lock_acquire+0x115/0x350 [ 1189.465334][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.465373][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.465413][T21220] copy_mm+0x11a/0x480 [ 1189.465451][T21220] ? copy_process+0xd3c/0x43e0 [ 1189.465484][T21220] copy_process+0x1e75/0x43e0 [ 1189.465530][T21220] ? copy_process+0xd3c/0x43e0 [ 1189.465587][T21220] ? __pfx_copy_process+0x10/0x10 [ 1189.465624][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.465667][T21220] kernel_clone+0x2d7/0x940 [ 1189.465711][T21220] ? __pfx_kernel_clone+0x10/0x10 [ 1189.465761][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.465804][T21220] ? do_futex+0x3e7/0x4e0 [ 1189.465850][T21220] __x64_sys_clone+0x1b6/0x230 [ 1189.465892][T21220] ? __pfx___x64_sys_clone+0x10/0x10 [ 1189.465947][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.465978][T21220] ? rcu_is_watching+0x16/0xb0 [ 1189.466009][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.466061][T21220] do_syscall_64+0x166/0x520 [ 1189.466092][T21220] ? trace_irq_disable+0x3b/0x140 [ 1189.466119][T21220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.466153][T21220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.466179][T21220] RIP: 0033:0x7fe89af9e159 [ 1189.466202][T21220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.466224][T21220] RSP: 002b:00007fe89be86fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1189.466251][T21220] RAX: ffffffffffffffda RBX: 00007fe89b225fa0 RCX: 00007fe89af9e159 [ 1189.466271][T21220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1189.466287][T21220] RBP: 00007fe89b03506b R08: 0000000000000000 R09: 0000000000000000 [ 1189.466304][T21220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.466320][T21220] R13: 00007fe89b226038 R14: 00007fe89b225fa0 R15: 00007fffc0aa3ca8 [ 1189.466362][T21220] [ 1189.561562][T21220] FAULT_INJECTION: forcing a failure. [ 1189.561562][T21220] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.561600][T21220] CPU: 0 UID: 0 PID: 21220 Comm: syz.6.4110 Not tainted syzkaller #0 PREEMPT(full) [ 1189.561628][T21220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1189.561645][T21220] Call Trace: [ 1189.561655][T21220] [ 1189.561666][T21220] dump_stack_lvl+0xe8/0x150 [ 1189.561708][T21220] should_fail_ex+0x410/0x560 [ 1189.561745][T21220] should_failslab+0xa8/0x100 [ 1189.561781][T21220] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1189.561812][T21220] ? blkg_alloc+0xcc/0x8f0 [ 1189.561839][T21220] ? blkg_alloc+0xcc/0x8f0 [ 1189.561884][T21220] blkg_alloc+0xcc/0x8f0 [ 1189.561912][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.561945][T21220] ? xas_store+0x9f5/0x17f0 [ 1189.561983][T21220] blkcg_init_disk+0x1cf/0x2e0 [ 1189.562018][T21220] ? __pfx_blkcg_init_disk+0x10/0x10 [ 1189.562055][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.562087][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.562123][T21220] ? do_raw_spin_unlock+0xf5/0x200 [ 1189.562166][T21220] __alloc_disk_node+0x317/0x600 [ 1189.562210][T21220] __blk_alloc_disk+0x105/0x1d0 [ 1189.562253][T21220] ? __pfx___blk_alloc_disk+0x10/0x10 [ 1189.562289][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.562345][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.562379][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.562409][T21220] ? __raw_spin_lock_init+0x45/0x100 [ 1189.562449][T21220] dm_create+0x476/0xf70 [ 1189.562494][T21220] dev_create+0x1f7/0x400 [ 1189.562528][T21220] ? __pfx_dev_create+0x10/0x10 [ 1189.562571][T21220] dm_ctl_ioctl+0x9ec/0xe10 [ 1189.562613][T21220] ? __pfx_dev_create+0x10/0x10 [ 1189.562644][T21220] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1189.562708][T21220] ? __fget_files+0x2a/0x420 [ 1189.562744][T21220] ? __fget_files+0x3a2/0x420 [ 1189.562778][T21220] ? __fget_files+0x2a/0x420 [ 1189.562817][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.562847][T21220] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1189.562879][T21220] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1189.562910][T21220] __se_sys_ioctl+0xfc/0x170 [ 1189.562942][T21220] do_syscall_64+0x166/0x520 [ 1189.562973][T21220] ? trace_irq_disable+0x3b/0x140 [ 1189.563000][T21220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.563038][T21220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.563065][T21220] RIP: 0033:0x7fe89af9e159 [ 1189.563088][T21220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.563110][T21220] RSP: 002b:00007fe89be87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1189.563137][T21220] RAX: ffffffffffffffda RBX: 00007fe89b225fa0 RCX: 00007fe89af9e159 [ 1189.563157][T21220] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 1189.563175][T21220] RBP: 00007fe89b03506b R08: 0000000000000000 R09: 0000000000000000 [ 1189.563191][T21220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.563208][T21220] R13: 00007fe89b226038 R14: 00007fe89b225fa0 R15: 00007fffc0aa3ca8 [ 1189.563249][T21220] [ 1190.183054][ T1557] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1190.183100][ T1557] cdc_ncm 2-1:1.0: bind() failure [ 1190.694875][ C0] net_ratelimit: 108 callbacks suppressed [ 1193.451205][ T1557] usb 2-1: USB disconnect, device number 89 [ 1194.034899][ T5767] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1194.043264][T21256] FAULT_INJECTION: forcing a failure. [ 1194.043264][T21256] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.043299][T21256] CPU: 0 UID: 0 PID: 21256 Comm: syz.0.4123 Not tainted syzkaller #0 PREEMPT(full) [ 1194.043327][T21256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1194.043342][T21256] Call Trace: [ 1194.043353][T21256] [ 1194.043364][T21256] dump_stack_lvl+0xe8/0x150 [ 1194.043405][T21256] should_fail_ex+0x410/0x560 [ 1194.043443][T21256] should_failslab+0xa8/0x100 [ 1194.043477][T21256] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1194.043506][T21256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.043536][T21256] ? lockdep_hardirqs_on+0x7b/0x110 [ 1194.043568][T21256] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 1194.043594][T21256] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 1194.043629][T21256] kmemdup_nul+0x36/0xf0 [ 1194.043661][T21256] vfs_parse_monolithic_sep+0x21b/0x360 [ 1194.043688][T21256] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 1194.043715][T21256] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 1194.043740][T21256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.043775][T21256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.043804][T21256] ? v9fs_init_fs_context+0x174/0x540 [ 1194.043836][T21256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.043866][T21256] ? alloc_fs_context+0x9b7/0xd00 [ 1194.043903][T21256] do_new_mount+0x2e2/0xdc0 [ 1194.043938][T21256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.043977][T21256] ? __pfx_do_new_mount+0x10/0x10 [ 1194.044026][T21256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.044056][T21256] ? ns_capable+0x89/0xe0 [ 1194.044093][T21256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.044123][T21256] ? path_mount+0x647/0x1050 [ 1194.044160][T21256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.044190][T21256] ? user_path_at+0xd4/0x160 [ 1194.044232][T21256] __se_sys_mount+0x31d/0x420 [ 1194.044275][T21256] ? __pfx___se_sys_mount+0x10/0x10 [ 1194.044318][T21256] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1194.044347][T21256] ? __x64_sys_mount+0x20/0xc0 [ 1194.044386][T21256] do_syscall_64+0x166/0x520 [ 1194.044417][T21256] ? trace_irq_disable+0x3b/0x140 [ 1194.044444][T21256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.044478][T21256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.044503][T21256] RIP: 0033:0x7f8e6bd9e159 [ 1194.044527][T21256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.044549][T21256] RSP: 002b:00007f8e6cb7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1194.044575][T21256] RAX: ffffffffffffffda RBX: 00007f8e6c025fa0 RCX: 00007f8e6bd9e159 [ 1194.044595][T21256] RDX: 0000200000000300 RSI: 0000200000000180 RDI: 0000000000000000 [ 1194.044613][T21256] RBP: 00007f8e6be3506b R08: 0000200000000340 R09: 0000000000000000 [ 1194.044630][T21256] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.044647][T21256] R13: 00007f8e6c026038 R14: 00007f8e6c025fa0 R15: 00007fff8d15acf8 [ 1194.044687][T21256] [ 1194.192141][ T5767] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1194.195602][ T5767] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.195632][ T5767] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.195698][ T5767] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.221470][ T5767] usb 10-1: config 0 descriptor?? [ 1194.614253][T21261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1194.633036][T21262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1194.866348][ T5767] usbhid 10-1:0.0: can't add hid device: -71 [ 1194.866497][ T5767] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1194.891402][ T5767] usb 10-1: USB disconnect, device number 94 [ 1195.224997][ T879] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1195.387643][ T879] usb 1-1: Using ep0 maxpacket: 8 [ 1195.388766][ T879] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1195.390085][ T879] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1195.390108][ T879] usb 1-1: config 179 has no interface number 0 [ 1195.390151][ T879] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1195.390182][ T879] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1195.390213][ T879] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1195.390243][ T879] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1195.390274][ T879] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1195.390342][ T879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.538964][T21278] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1195.754955][T20280] net_ratelimit: 52 callbacks suppressed [ 1195.865328][ T1557] usb 1-1: USB disconnect, device number 20 [ 1195.865446][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1195.865654][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1197.118175][T21322] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 1197.374303][T21334] syzkaller1: entered promiscuous mode [ 1197.374324][T21334] syzkaller1: entered allmulticast mode [ 1197.732580][T21344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4161'. [ 1197.753200][T21344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4161'. [ 1199.166905][T21355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4165'. [ 1199.512964][ T31] kauditd_printk_skb: 606 callbacks suppressed [ 1199.512986][ T31] audit: type=1804 audit(1789797735.868:3860): pid=21365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4172" name="/newroot/41/file1" dev="tmpfs" ino=252 res=1 errno=0 [ 1199.774087][T21373] can0: slcan on ttyprintk. [ 1199.976381][T21372] can0 (unregistered): slcan off ttyprintk. [ 1200.505021][ T5767] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1200.655972][ T5767] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1200.658434][ T5767] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1200.658466][ T5767] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1200.663271][ T5767] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1200.663303][ T5767] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1200.724388][ T5767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.724412][ T5767] usb 1-1: Product: syz [ 1200.724430][ T5767] usb 1-1: Manufacturer: syz [ 1200.724448][ T5767] usb 1-1: SerialNumber: syz [ 1200.771181][ T5767] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 1200.794050][ T5767] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1200.808540][ T5767] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1200.935004][T19655] net_ratelimit: 54 callbacks suppressed [ 1200.973449][T13123] usb 1-1: USB disconnect, device number 21 [ 1201.016188][T13123] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1201.056122][T13123] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1201.060481][T13123] ti_usb_3410_5052 1-1:2.0: device disconnected [ 1201.214558][T21402] netlink: 'syz.2.4183': attribute type 10 has an invalid length. [ 1201.216133][T21402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.218147][T21402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.260510][T21402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.260640][T21402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.261434][T21402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.261570][T21402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.308936][T21403] netlink: 'syz.2.4183': attribute type 10 has an invalid length. [ 1201.312657][T21402] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1201.390700][T21403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.411456][T21403] team0: Port device bond0 added [ 1202.216932][T13123] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1202.366834][T13123] usb 1-1: Using ep0 maxpacket: 16 [ 1202.367647][T13123] usb 1-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 1202.371093][T13123] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 1202.371119][T13123] usb 1-1: config 0 has no interface number 0 [ 1202.371152][T13123] usb 1-1: config 0 interface 66 has no altsetting 0 [ 1202.374644][T13123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.374667][T13123] usb 1-1: Product: syz [ 1202.374685][T13123] usb 1-1: Manufacturer: syz [ 1202.374702][T13123] usb 1-1: SerialNumber: syz [ 1202.442123][T13123] usb 1-1: config 0 descriptor?? [ 1202.710406][T13123] usb 1-1: selecting invalid altsetting 3 [ 1202.710431][T13123] comedi comedi5: could not set alternate setting 3 in high speed [ 1202.710449][T13123] usbduxsigma 1-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 1202.745489][T13123] usbduxsigma 1-1:0.66: probe with driver usbduxsigma failed with error -22 [ 1202.748082][T13123] usb 1-1: USB disconnect, device number 22 [ 1203.187590][T21410] loop9: detected capacity change from 0 to 40427 [ 1203.192789][T21410] F2FS-fs (loop9): Small segment_count (9 < 1 * 24) [ 1203.192814][T21410] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1203.752497][T21410] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1203.868752][T21410] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1203.868777][T21410] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1204.066199][T12677] syz-executor: attempt to access beyond end of device [ 1204.066199][T12677] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1204.094128][T12677] CPU: 0 UID: 0 PID: 12677 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1204.094159][T12677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1204.094175][T12677] Call Trace: [ 1204.094185][T12677] [ 1204.094197][T12677] dump_stack_lvl+0xe8/0x150 [ 1204.094240][T12677] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1204.094283][T12677] f2fs_write_end_bio+0x1211/0x16e0 [ 1204.094314][T12677] ? blkg_put+0x22/0x240 [ 1204.094367][T12677] __submit_merged_bio+0x258/0x6a0 [ 1204.094404][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.094436][T12677] ? rcu_is_watching+0x16/0xb0 [ 1204.094474][T12677] __submit_merged_write_cond+0x3c9/0x4e0 [ 1204.094522][T12677] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1204.094584][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.094624][T12677] f2fs_write_data_pages+0x2a27/0x36f0 [ 1204.094666][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.094695][T12677] ? __lock_acquire+0x747/0x2de0 [ 1204.094763][T12677] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1204.094808][T12677] ? is_bpf_text_address+0x26/0x2b0 [ 1204.094855][T12677] ? arch_stack_walk+0xfb/0x150 [ 1204.094919][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.094951][T12677] ? add_lock_to_list+0xc7/0x100 [ 1204.094986][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.095016][T12677] ? __lock_acquire+0x1511/0x2de0 [ 1204.095072][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.095103][T12677] ? do_raw_spin_lock+0x12b/0x2f0 [ 1204.095146][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.095179][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.095208][T12677] ? do_raw_spin_unlock+0xf5/0x200 [ 1204.095245][T12677] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1204.095287][T12677] do_writepages+0x338/0x560 [ 1204.095317][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.095350][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.095385][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.095414][T12677] ? do_raw_spin_unlock+0xf5/0x200 [ 1204.095456][T12677] filemap_fdatawrite+0x1e9/0x2f0 [ 1204.095489][T12677] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1204.095567][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.095600][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.095636][T12677] ? do_raw_spin_unlock+0xf5/0x200 [ 1204.095678][T12677] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1204.095724][T12677] f2fs_write_checkpoint+0xa3d/0x2710 [ 1204.095751][T12677] ? __lock_acquire+0x747/0x2de0 [ 1204.095813][T12677] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1204.095839][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.095934][T12677] kill_f2fs_super+0x2dd/0x700 [ 1204.095972][T12677] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1204.096017][T12677] ? call_rcu+0x64d/0x8b0 [ 1204.096048][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.096078][T12677] ? lockdep_hardirqs_on+0x7b/0x110 [ 1204.096110][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.096156][T12677] deactivate_locked_super+0xbc/0x110 [ 1204.096196][T12677] cleanup_mnt+0x3d3/0x460 [ 1204.096228][T12677] task_work_run+0x1d9/0x270 [ 1204.096260][T12677] ? __pfx_task_work_run+0x10/0x10 [ 1204.096301][T12677] exit_to_user_mode_loop+0x204/0x770 [ 1204.096328][T12677] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1204.096358][T12677] ? rcu_is_watching+0x16/0xb0 [ 1204.096394][T12677] do_syscall_64+0x328/0x520 [ 1204.096427][T12677] ? trace_irq_disable+0x3b/0x140 [ 1204.096453][T12677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.096486][T12677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.096512][T12677] RIP: 0033:0x7f9eb299f397 [ 1204.096536][T12677] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1204.096564][T12677] RSP: 002b:00007fff1b07a838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1204.096590][T12677] RAX: 0000000000000000 RBX: 00007f9eb2a344bb RCX: 00007f9eb299f397 [ 1204.096609][T12677] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1b07a8f0 [ 1204.096626][T12677] RBP: 00007fff1b07a8f0 R08: 00007fff1b07b8f0 R09: 00000000ffffffff [ 1204.096645][T12677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1b07b980 [ 1204.096662][T12677] R13: 00007f9eb2a344bb R14: 0000000000125ef2 R15: 00007fff1b07b9c0 [ 1204.096703][T12677] [ 1204.177830][T12677] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1204.973715][T21447] loop1: detected capacity change from 0 to 32768 [ 1205.027501][T21447] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1205.070199][T21447] XFS (loop1): Ending clean mount [ 1205.178859][ T52] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11 [ 1205.740418][T18946] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1205.883230][ T5767] libceph: connect (1)[c::]:6789 error -101 [ 1205.883448][ T5767] libceph: mon0 (1)[c::]:6789 connect error [ 1205.886725][ T5767] libceph: connect (1)[c::]:6789 error -101 [ 1205.887004][ T5767] libceph: mon0 (1)[c::]:6789 connect error [ 1206.054865][ C0] net_ratelimit: 126 callbacks suppressed [ 1206.116048][T18330] usb 10-1: new low-speed USB device number 95 using dummy_hcd [ 1206.145588][T13123] libceph: connect (1)[c::]:6789 error -101 [ 1206.145826][T13123] libceph: mon0 (1)[c::]:6789 connect error [ 1206.305687][T18330] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1206.307426][T18330] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1206.307469][T18330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 1206.307500][T18330] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1206.307570][T18330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.310986][T18330] usb 10-1: config 0 descriptor?? [ 1206.311716][T21473] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1206.329195][ T31] audit: type=1326 audit(1789797742.678:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21476 comm="syz.6.4207" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe89af9e159 code=0x0 [ 1206.527361][T21473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.534030][T21473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.559375][T21473] netlink: 'syz.9.4206': attribute type 4 has an invalid length. [ 1206.622616][T21471] ceph: No mds server is up or the cluster is laggy [ 1206.640001][T21473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.640939][T21473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.657476][T13123] libceph: connect (1)[c::]:6789 error -101 [ 1206.657807][T13123] libceph: mon0 (1)[c::]:6789 connect error [ 1206.675733][T18330] usbhid 10-1:0.0: can't add hid device: -71 [ 1206.675882][T18330] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1206.681985][T18330] usb 10-1: USB disconnect, device number 95 [ 1207.637509][T21500] lo speed is unknown, defaulting to 1000 [ 1207.637578][T21500] lo speed is unknown, defaulting to 1000 [ 1207.803776][T21500] lo speed is unknown, defaulting to 1000 [ 1207.881369][T21500] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1207.881416][T21500] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1207.881467][T21500] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1207.888993][T21502] overlayfs: missing 'lowerdir' [ 1207.898582][T21500] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 1208.007489][T21500] lo speed is unknown, defaulting to 1000 [ 1208.009997][T21500] lo speed is unknown, defaulting to 1000 [ 1208.013679][T21500] lo speed is unknown, defaulting to 1000 [ 1208.110630][T21484] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1208.111967][T21500] lo speed is unknown, defaulting to 1000 [ 1208.123675][T21500] lo speed is unknown, defaulting to 1000 [ 1208.146381][T21484] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1208.146606][T21484] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1208.154103][T21500] lo speed is unknown, defaulting to 1000 [ 1208.198996][T21500] lo speed is unknown, defaulting to 1000 [ 1208.277688][T21484] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1208.309098][T21484] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1208.309522][T21484] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1208.314563][T21484] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1208.369468][T21484] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1208.436945][T21484] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1208.437135][T21484] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1208.646628][ T1557] libceph: connect (1)[c::]:6789 error -22 [ 1208.646837][ T1557] libceph: mon0 (1)[c::]:6789 connect error [ 1208.647835][ T1557] libceph: connect (1)[c::]:6789 error -22 [ 1208.648032][ T1557] libceph: mon0 (1)[c::]:6789 connect error [ 1208.777906][ T31] audit: type=1326 audit(1789797745.138:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21524 comm="syz.7.4222" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fc7d9e159 code=0x0 [ 1208.910346][ T1557] libceph: connect (1)[c::]:6789 error -22 [ 1208.910585][ T1557] libceph: mon0 (1)[c::]:6789 connect error [ 1209.296738][T13123] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1209.339365][T21539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4232'. [ 1209.416123][ T1557] libceph: connect (1)[c::]:6789 error -22 [ 1209.416322][ T1557] libceph: mon0 (1)[c::]:6789 connect error [ 1209.416621][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 1209.446022][T13123] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1209.455494][T13123] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.455519][T13123] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1209.461846][T21515] ceph: No mds server is up or the cluster is laggy [ 1209.464116][T13123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.464140][T13123] usb 2-1: Product: syz [ 1209.464157][T13123] usb 2-1: Manufacturer: syz [ 1209.464175][T13123] usb 2-1: SerialNumber: syz [ 1209.610859][T21547] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4234'. [ 1209.847957][T21547] loop9: detected capacity change from 0 to 1024 [ 1209.873748][T21547] EXT4-fs (loop9): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1209.873781][T21547] EXT4-fs (loop9): can't mount with both data=journal and delalloc [ 1210.215510][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1210.316407][T13123] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1210.375260][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 1210.375338][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1210.400969][ T5767] usb 2-1: USB disconnect, device number 90 [ 1210.455388][T21088] Bluetooth: hci3: command 0x0406 tx timeout [ 1210.465466][T13123] usb 10-1: Using ep0 maxpacket: 16 [ 1210.473663][T13123] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1210.473713][T13123] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1210.478224][T13123] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.478249][T13123] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1210.478320][T13123] usb 10-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 1210.489003][T13123] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.489027][T13123] usb 10-1: Product: syz [ 1210.489044][T13123] usb 10-1: Manufacturer: syz [ 1210.489068][T13123] usb 10-1: SerialNumber: syz [ 1211.155186][ T1557] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1211.185202][ T5767] net_ratelimit: 331 callbacks suppressed [ 1211.185856][ T5767] libceph: connect (1)[c::]:6789 error -101 [ 1211.186130][ T5767] libceph: mon0 (1)[c::]:6789 connect error [ 1211.194072][ T5767] libceph: connect (1)[c::]:6789 error -101 [ 1211.194341][ T5767] libceph: mon0 (1)[c::]:6789 connect error [ 1211.306438][ T1557] usb 1-1: Using ep0 maxpacket: 32 [ 1211.307252][ T1557] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1211.313471][ T1557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.313496][ T1557] usb 1-1: Product: syz [ 1211.313514][ T1557] usb 1-1: Manufacturer: syz [ 1211.313531][ T1557] usb 1-1: SerialNumber: syz [ 1211.362793][ T1557] usb 1-1: config 0 descriptor?? [ 1211.389749][T13123] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 1211.389794][T13123] cdc_ncm 10-1:1.0: bind() failure [ 1211.433274][T13123] usb 10-1: USB disconnect, device number 96 [ 1211.452168][ T5767] libceph: connect (1)[c::]:6789 error -101 [ 1211.477342][ T5767] libceph: mon0 (1)[c::]:6789 connect error [ 1211.776777][ T1557] airspy 1-1:0.0: usb_control_msg() failed -32 request 0a [ 1211.776798][ T1557] airspy 1-1:0.0: Could not detect board [ 1211.776896][ T1557] airspy 1-1:0.0: probe with driver airspy failed with error -32 [ 1211.954631][T21579] ceph: No mds server is up or the cluster is laggy [ 1211.987913][ T5767] libceph: connect (1)[c::]:6789 error -101 [ 1211.988119][ T5767] libceph: mon0 (1)[c::]:6789 connect error [ 1212.111659][T21606] netlink: 'syz.7.4259': attribute type 10 has an invalid length. [ 1212.138393][T21606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1212.216362][T21606] team0: Port device bond0 added [ 1212.296745][T21088] Bluetooth: hci1: command 0x0406 tx timeout [ 1212.378065][T21612] lo speed is unknown, defaulting to 1000 [ 1212.455662][T21088] Bluetooth: hci4: command 0x0406 tx timeout [ 1212.535041][T21088] Bluetooth: hci3: command 0x0406 tx timeout [ 1212.670374][T21612] lo speed is unknown, defaulting to 1000 [ 1212.672438][T21612] lo speed is unknown, defaulting to 1000 [ 1212.821447][T21630] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4266'. [ 1213.660773][ T5767] lo speed is unknown, defaulting to 1000 [ 1213.661701][T21612] infiniband syz1: set active [ 1213.661721][T21612] infiniband syz1: added lo [ 1213.716136][T21626] loop9: detected capacity change from 0 to 40427 [ 1213.739814][T21626] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 1213.739839][T21626] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1213.751943][T21626] F2FS-fs (loop9): build fault injection rate: 64 [ 1213.751970][T21626] F2FS-fs (loop9): build fault injection type: 0x5 [ 1213.783733][T21626] F2FS-fs (loop9): invalid crc value [ 1213.874308][T21612] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1213.874356][T21612] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1213.874406][T21612] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1214.236594][T21612] RDS/IB: syz1: added [ 1214.237341][T21612] smc: adding ib device syz1 with port count 1 [ 1214.237520][T21612] smc: ib device syz1 port 1 has no pnetid [ 1214.244242][T13123] lo speed is unknown, defaulting to 1000 [ 1214.259472][T13123] usb 1-1: USB disconnect, device number 23 [ 1214.455290][T21088] Bluetooth: hci1: command 0x0406 tx timeout [ 1214.506277][T21626] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1214.535529][T21088] Bluetooth: hci4: command 0x0406 tx timeout [ 1214.552192][T21612] lo speed is unknown, defaulting to 1000 [ 1214.598783][T21626] F2FS-fs (loop9): f2fs_disable_checkpoint starts, unusable: 0 [ 1214.598815][T21626] F2FS-fs (loop9): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1214.598845][T21626] F2FS-fs (loop9): Start checkpoint disabled! [ 1214.738956][T21626] F2FS-fs (loop9): f2fs_disable_checkpoint finishes, err:0 [ 1214.754420][T21626] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1214.754448][T21626] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1214.980274][T20206] kworker/u8:14: attempt to access beyond end of device [ 1214.980274][T20206] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1214.980354][T20206] CPU: 0 UID: 0 PID: 20206 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 1214.980383][T20206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1214.980401][T20206] Workqueue: writeback wb_workfn (flush-7:9) [ 1214.980440][T20206] Call Trace: [ 1214.980451][T20206] [ 1214.980462][T20206] dump_stack_lvl+0xe8/0x150 [ 1214.980503][T20206] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1214.980548][T20206] f2fs_write_end_bio+0x1211/0x16e0 [ 1214.980589][T20206] ? blkg_put+0x22/0x240 [ 1214.980644][T20206] __submit_merged_bio+0x258/0x6a0 [ 1214.980679][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.980715][T20206] ? rcu_is_watching+0x16/0xb0 [ 1214.980754][T20206] __submit_merged_write_cond+0x3c9/0x4e0 [ 1214.980801][T20206] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1214.980855][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.980895][T20206] f2fs_write_data_pages+0x2a27/0x36f0 [ 1214.980936][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.981008][T20206] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1214.981065][T20206] ? ktime_get+0x45/0x220 [ 1214.981126][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.981157][T20206] ? __lock_acquire+0x747/0x2de0 [ 1214.981191][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.981222][T20206] ? __lock_acquire+0x747/0x2de0 [ 1214.981267][T20206] ? lock_acquire+0x115/0x350 [ 1214.981299][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.981342][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.981372][T20206] ? lock_acquire+0x115/0x350 [ 1214.981398][T20206] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1214.981441][T20206] do_writepages+0x338/0x560 [ 1214.981476][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.981506][T20206] ? reacquire_held_locks+0x117/0x1a0 [ 1214.981537][T20206] ? writeback_sb_inodes+0x450/0x1b00 [ 1214.981585][T20206] __writeback_single_inode+0x136/0x1220 [ 1214.981623][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.981652][T20206] ? do_raw_spin_unlock+0xf5/0x200 [ 1214.981694][T20206] writeback_sb_inodes+0x9de/0x1b00 [ 1214.981726][T20206] ? __lock_acquire+0x747/0x2de0 [ 1214.981760][T20206] ? __lock_acquire+0x747/0x2de0 [ 1214.981794][T20206] ? __lock_acquire+0x747/0x2de0 [ 1214.981828][T20206] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1214.981910][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.981940][T20206] ? rcu_is_watching+0x16/0xb0 [ 1214.981970][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.981999][T20206] ? queue_io+0x2d3/0x470 [ 1214.982037][T20206] wb_writeback+0x41c/0xad0 [ 1214.982074][T20206] ? queue_io+0x281/0x470 [ 1214.982114][T20206] ? __pfx_wb_writeback+0x10/0x10 [ 1214.982145][T20206] ? do_raw_spin_lock+0x12b/0x2f0 [ 1214.982200][T20206] wb_workfn+0x431/0x10f0 [ 1214.982232][T20206] ? __lock_acquire+0x747/0x2de0 [ 1214.982272][T20206] ? __pfx_wb_workfn+0x10/0x10 [ 1214.982311][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.982341][T20206] ? do_raw_spin_lock+0x12b/0x2f0 [ 1214.982381][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.982419][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.982449][T20206] ? lock_acquire+0x115/0x350 [ 1214.982476][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.982514][T20206] ? rcu_is_watching+0x16/0xb0 [ 1214.982545][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.982582][T20206] ? process_scheduled_works+0x97a/0x1630 [ 1214.982618][T20206] process_scheduled_works+0xc3d/0x1630 [ 1214.982652][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.982718][T20206] ? __pfx_process_scheduled_works+0x10/0x10 [ 1214.982761][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.982790][T20206] ? assign_work+0x3cf/0x5d0 [ 1214.982831][T20206] worker_thread+0xa47/0xfb0 [ 1214.982870][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.982913][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.982943][T20206] ? __kthread_parkme+0x71/0x1f0 [ 1214.982994][T20206] kthread+0x38b/0x480 [ 1214.983021][T20206] ? __pfx_worker_thread+0x10/0x10 [ 1214.983055][T20206] ? __pfx_kthread+0x10/0x10 [ 1214.983083][T20206] ret_from_fork+0x514/0xb70 [ 1214.983113][T20206] ? __pfx_ret_from_fork+0x10/0x10 [ 1214.983138][T20206] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.983168][T20206] ? __switch_to+0xc89/0x1420 [ 1214.983208][T20206] ? __pfx_kthread+0x10/0x10 [ 1214.983236][T20206] ret_from_fork_asm+0x1a/0x30 [ 1214.983295][T20206] [ 1215.004400][T20206] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1215.441796][T21682] netlink: 'syz.7.4282': attribute type 1 has an invalid length. [ 1215.464532][T21682] loop7: detected capacity change from 0 to 1024 [ 1215.493861][T21682] EXT4-fs (loop7): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1215.493898][T21682] EXT4-fs (loop7): can't mount with both data=journal and delalloc [ 1215.845786][T21682] loop7: detected capacity change from 0 to 512 [ 1215.941972][T21682] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1216.214900][ C0] net_ratelimit: 198 callbacks suppressed [ 1216.463858][T21682] EXT4-fs (loop7): 1 truncate cleaned up [ 1216.776926][T21682] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.974262][T21612] lo speed is unknown, defaulting to 1000 [ 1218.124990][ T30] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1218.276266][ T30] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1218.278026][ T30] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1218.278052][ T30] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1218.280801][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.280825][ T30] usb 2-1: Product: syz [ 1218.280842][ T30] usb 2-1: Manufacturer: syz [ 1218.280860][ T30] usb 2-1: SerialNumber: syz [ 1218.343336][ T30] usb 2-1: config 0 descriptor?? [ 1218.476144][T21682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.578737][T21704] loop1: detected capacity change from 0 to 64 [ 1218.599490][T21704] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 1218.599598][T21704] hfs: get root inode failed [ 1218.632790][T21704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.637031][T21704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.673062][T21716] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4293'. [ 1218.673962][T21704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.683046][T21704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.707715][T21704] loop1: detected capacity change from 0 to 2 [ 1218.717259][T21704] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1218.743998][ T879] usb 2-1: USB disconnect, device number 91 [ 1218.951626][T21714] loop9: detected capacity change from 0 to 40427 [ 1218.964940][T21714] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 1218.964964][T21714] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1218.968069][T21714] F2FS-fs (loop9): build fault injection rate: 64 [ 1218.968090][T21714] F2FS-fs (loop9): build fault injection type: 0x5 [ 1218.973074][T21714] F2FS-fs (loop9): invalid crc value [ 1219.455310][T21714] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1219.489934][T21612] lo speed is unknown, defaulting to 1000 [ 1219.616524][T21714] F2FS-fs (loop9): f2fs_disable_checkpoint starts, unusable: 0 [ 1219.616551][T21714] F2FS-fs (loop9): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1219.616588][T21714] F2FS-fs (loop9): Start checkpoint disabled! [ 1219.757986][T21714] F2FS-fs (loop9): f2fs_disable_checkpoint finishes, err:0 [ 1219.764045][T21714] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1219.764072][T21714] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1219.861825][T21748] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4307'. [ 1220.083276][ T12] kworker/u8:0: attempt to access beyond end of device [ 1220.083276][ T12] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1220.083362][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 1220.083392][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1220.083409][ T12] Workqueue: writeback wb_workfn (flush-7:9) [ 1220.083450][ T12] Call Trace: [ 1220.083461][ T12] [ 1220.083472][ T12] dump_stack_lvl+0xe8/0x150 [ 1220.083512][ T12] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1220.083561][ T12] f2fs_write_end_bio+0x1211/0x16e0 [ 1220.083595][ T12] ? blkg_put+0x22/0x240 [ 1220.083650][ T12] __submit_merged_bio+0x258/0x6a0 [ 1220.083686][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.083716][ T12] ? rcu_is_watching+0x16/0xb0 [ 1220.083755][ T12] __submit_merged_write_cond+0x3c9/0x4e0 [ 1220.083802][ T12] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1220.083855][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.083896][ T12] f2fs_write_data_pages+0x2a27/0x36f0 [ 1220.083979][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1220.084036][ T12] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1220.084110][ T12] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1220.084172][ T12] ? __lock_acquire+0x747/0x2de0 [ 1220.084208][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.084254][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1220.084297][ T12] do_writepages+0x338/0x560 [ 1220.084334][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.084364][ T12] ? reacquire_held_locks+0x117/0x1a0 [ 1220.084395][ T12] ? writeback_sb_inodes+0x450/0x1b00 [ 1220.084437][ T12] __writeback_single_inode+0x136/0x1220 [ 1220.084476][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.084506][ T12] ? do_raw_spin_unlock+0xf5/0x200 [ 1220.084549][ T12] writeback_sb_inodes+0x9de/0x1b00 [ 1220.084585][ T12] ? __lock_acquire+0x747/0x2de0 [ 1220.084630][ T12] ? lock_acquire+0x115/0x350 [ 1220.084667][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1220.084752][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.084781][ T12] ? rcu_is_watching+0x16/0xb0 [ 1220.084812][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.084841][ T12] ? queue_io+0x2d3/0x470 [ 1220.084880][ T12] wb_writeback+0x41c/0xad0 [ 1220.084918][ T12] ? queue_io+0x281/0x470 [ 1220.084960][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 1220.084991][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1220.085048][ T12] wb_workfn+0x431/0x10f0 [ 1220.085104][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 1220.085138][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.085171][ T12] ? trace_hrtimer_start+0x82/0x200 [ 1220.085218][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.085248][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1220.085295][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.085325][ T12] ? lock_acquire+0x115/0x350 [ 1220.085353][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.085391][ T12] ? rcu_is_watching+0x16/0xb0 [ 1220.085422][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.085454][ T12] ? process_scheduled_works+0x97a/0x1630 [ 1220.085491][ T12] process_scheduled_works+0xc3d/0x1630 [ 1220.085526][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.085597][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1220.085639][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.085668][ T12] ? assign_work+0x3cf/0x5d0 [ 1220.085710][ T12] worker_thread+0xa47/0xfb0 [ 1220.085780][ T12] kthread+0x38b/0x480 [ 1220.085807][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1220.085841][ T12] ? __pfx_kthread+0x10/0x10 [ 1220.085869][ T12] ret_from_fork+0x514/0xb70 [ 1220.085898][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1220.085924][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.085953][ T12] ? __switch_to+0xc89/0x1420 [ 1220.085994][ T12] ? __pfx_kthread+0x10/0x10 [ 1220.086022][ T12] ret_from_fork_asm+0x1a/0x30 [ 1220.086088][ T12] [ 1220.283173][ T12] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1220.789151][ T879] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1220.985378][ T879] usb 2-1: Using ep0 maxpacket: 32 [ 1220.992695][ T879] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1221.006494][ T879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.006519][ T879] usb 2-1: Product: syz [ 1221.006537][ T879] usb 2-1: Manufacturer: syz [ 1221.006555][ T879] usb 2-1: SerialNumber: syz [ 1221.010547][ T879] usb 2-1: config 0 descriptor?? [ 1221.254865][ C1] net_ratelimit: 94 callbacks suppressed [ 1221.317529][T21612] lo speed is unknown, defaulting to 1000 [ 1221.457954][ T879] airspy 2-1:0.0: usb_control_msg() failed -32 request 0a [ 1221.457976][ T879] airspy 2-1:0.0: Could not detect board [ 1221.458077][ T879] airspy 2-1:0.0: probe with driver airspy failed with error -32 [ 1221.459818][ T5767] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1221.604928][ T5767] usb 1-1: Using ep0 maxpacket: 32 [ 1221.608320][ T5767] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1221.608366][ T5767] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1221.609833][ T5767] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 1221.609859][ T5767] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 1221.609883][ T5767] usb 1-1: config 14 has no interface number 0 [ 1221.609903][ T5767] usb 1-1: config 14 has no interface number 1 [ 1221.609970][ T5767] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1221.609998][ T5767] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1221.610029][ T5767] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1221.610061][ T5767] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1221.610093][ T5767] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1221.610124][ T5767] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1221.610157][ T5767] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1221.610179][ T5767] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1221.612891][ T5767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.612916][ T5767] usb 1-1: Product: syz [ 1221.612933][ T5767] usb 1-1: Manufacturer: syz [ 1221.612952][ T5767] usb 1-1: SerialNumber: syz [ 1221.965651][T21782] FAULT_INJECTION: forcing a failure. [ 1221.965651][T21782] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.965690][T21782] CPU: 1 UID: 0 PID: 21782 Comm: syz.9.4319 Not tainted syzkaller #0 PREEMPT(full) [ 1221.965720][T21782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1221.965736][T21782] Call Trace: [ 1221.965747][T21782] [ 1221.965759][T21782] dump_stack_lvl+0xe8/0x150 [ 1221.965802][T21782] should_fail_ex+0x410/0x560 [ 1221.965838][T21782] should_failslab+0xa8/0x100 [ 1221.965877][T21782] ? skb_clone+0x212/0x3a0 [ 1221.965919][T21782] kmem_cache_alloc_noprof+0xa1/0x600 [ 1221.965962][T21782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.966004][T21782] ? skb_clone+0x212/0x3a0 [ 1221.966051][T21782] skb_clone+0x212/0x3a0 [ 1221.966093][T21782] __netlink_deliver_tap+0x413/0x860 [ 1221.966150][T21782] ? netlink_deliver_tap+0x2e/0x1b0 [ 1221.966194][T21782] netlink_deliver_tap+0x19c/0x1b0 [ 1221.966240][T21782] netlink_unicast+0x781/0x940 [ 1221.966302][T21782] netlink_sendmsg+0x813/0xb40 [ 1221.966347][T21782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.966382][T21782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.966413][T21782] ? apparmor_socket_sendmsg+0x98/0x360 [ 1221.966442][T21782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.966476][T21782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.966504][T21782] sock_sendmsg_nosec+0x13a/0x180 [ 1221.966536][T21782] __sys_sendto+0x408/0x5a0 [ 1221.966580][T21782] ? __pfx___sys_sendto+0x10/0x10 [ 1221.966654][T21782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.966690][T21782] ? do_user_addr_fault+0xc4c/0x1340 [ 1221.966724][T21782] __x64_sys_sendto+0xde/0x100 [ 1221.966762][T21782] do_syscall_64+0x166/0x520 [ 1221.966798][T21782] ? trace_irq_disable+0x3b/0x140 [ 1221.966828][T21782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.966865][T21782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.966892][T21782] RIP: 0033:0x7f9eb295e98e [ 1221.966916][T21782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1221.966938][T21782] RSP: 002b:00007f9eb3815e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1221.966969][T21782] RAX: ffffffffffffffda RBX: 00007f9eb38176c0 RCX: 00007f9eb295e98e [ 1221.966997][T21782] RDX: 0000000000000020 RSI: 00007f9eb3816000 RDI: 0000000000000006 [ 1221.967015][T21782] RBP: 0000000000000000 R08: 00007f9eb3815f04 R09: 000000000000000c [ 1221.967033][T21782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1221.967050][T21782] R13: 00007f9eb3815f58 R14: 00007f9eb3816000 R15: 0000000000000000 [ 1221.967090][T21782] [ 1221.983158][T21782] FAULT_INJECTION: forcing a failure. [ 1221.983158][T21782] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.983197][T21782] CPU: 1 UID: 0 PID: 21782 Comm: syz.9.4319 Not tainted syzkaller #0 PREEMPT(full) [ 1221.983226][T21782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1221.983242][T21782] Call Trace: [ 1221.983252][T21782] [ 1221.983267][T21782] dump_stack_lvl+0xe8/0x150 [ 1221.983309][T21782] should_fail_ex+0x410/0x560 [ 1221.983345][T21782] should_failslab+0xa8/0x100 [ 1221.983380][T21782] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1221.983410][T21782] ? blkg_alloc+0xcc/0x8f0 [ 1221.983437][T21782] ? blkg_alloc+0xcc/0x8f0 [ 1221.983473][T21782] blkg_alloc+0xcc/0x8f0 [ 1221.983501][T21782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.983534][T21782] ? xas_store+0x9f5/0x17f0 [ 1221.983572][T21782] blkcg_init_disk+0x1cf/0x2e0 [ 1221.983606][T21782] ? __pfx_blkcg_init_disk+0x10/0x10 [ 1221.983637][T21782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.983670][T21782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.983705][T21782] ? do_raw_spin_unlock+0xf5/0x200 [ 1221.983748][T21782] __alloc_disk_node+0x317/0x600 [ 1221.983792][T21782] __blk_alloc_disk+0x105/0x1d0 [ 1221.983829][T21782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.983864][T21782] ? __pfx___blk_alloc_disk+0x10/0x10 [ 1221.983900][T21782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.983955][T21782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.983999][T21782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.984029][T21782] ? __raw_spin_lock_init+0x45/0x100 [ 1221.984068][T21782] dm_create+0x476/0xf70 [ 1221.984112][T21782] dev_create+0x1f7/0x400 [ 1221.984146][T21782] ? __pfx_dev_create+0x10/0x10 [ 1221.984188][T21782] dm_ctl_ioctl+0x9ec/0xe10 [ 1221.984229][T21782] ? __pfx_dev_create+0x10/0x10 [ 1221.984259][T21782] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1221.984323][T21782] ? __fget_files+0x2a/0x420 [ 1221.984359][T21782] ? __fget_files+0x3a2/0x420 [ 1221.984393][T21782] ? __fget_files+0x2a/0x420 [ 1221.984432][T21782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.984462][T21782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.984493][T21782] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1221.984524][T21782] __se_sys_ioctl+0xfc/0x170 [ 1221.984556][T21782] do_syscall_64+0x166/0x520 [ 1221.984587][T21782] ? trace_irq_disable+0x3b/0x140 [ 1221.984614][T21782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.984647][T21782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.984673][T21782] RIP: 0033:0x7f9eb299e159 [ 1221.984697][T21782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.984719][T21782] RSP: 002b:00007f9eb3817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1221.984746][T21782] RAX: ffffffffffffffda RBX: 00007f9eb2c25fa0 RCX: 00007f9eb299e159 [ 1221.984765][T21782] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 1221.984783][T21782] RBP: 00007f9eb2a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1221.984800][T21782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.984816][T21782] R13: 00007f9eb2c26038 R14: 00007f9eb2c25fa0 R15: 00007fff1b07b5c8 [ 1221.984856][T21782] [ 1222.042488][T21783] netlink: 'syz.7.4318': attribute type 10 has an invalid length. [ 1222.042800][T21783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.060823][T21783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.060965][T21783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.123960][T21783] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1222.415985][T21787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1222.568959][ T5767] legousbtower 1-1:14.57: interrupt endpoints not found [ 1222.650649][ T5767] legousbtower 1-1:14.228: get version request failed: -71 [ 1222.650901][ T5767] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 1222.683783][ T5767] usb 1-1: USB disconnect, device number 24 [ 1222.733084][T21612] lo speed is unknown, defaulting to 1000 [ 1222.836609][T13123] usb 2-1: USB disconnect, device number 92 [ 1223.669008][ T30] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1223.815898][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 1223.816736][ T30] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1223.818148][ T30] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1223.818221][ T30] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1223.818249][ T30] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1223.818278][ T30] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1223.818305][ T30] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1223.818332][ T30] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1223.818402][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.843183][ T30] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 1223.973041][T21612] lo speed is unknown, defaulting to 1000 [ 1224.076770][T21792] loop9: detected capacity change from 0 to 40427 [ 1224.079461][T21792] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 1224.079482][T21792] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1224.081628][T21792] F2FS-fs (loop9): build fault injection rate: 64 [ 1224.081649][T21792] F2FS-fs (loop9): build fault injection type: 0x5 [ 1224.084362][T21819] UDC core: g1: couldn't find an available UDC or it's busy [ 1224.113746][T21792] F2FS-fs (loop9): invalid crc value [ 1224.504336][T21792] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1224.542282][T21792] F2FS-fs (loop9): f2fs_disable_checkpoint starts, unusable: 0 [ 1224.542314][T21792] F2FS-fs (loop9): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1224.542344][T21792] F2FS-fs (loop9): Start checkpoint disabled! [ 1224.759725][T21792] F2FS-fs (loop9): f2fs_disable_checkpoint finishes, err:0 [ 1224.762204][T21792] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1224.762229][T21792] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1225.048919][T19592] kworker/u8:4: attempt to access beyond end of device [ 1225.048919][T19592] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1225.048998][T19592] CPU: 1 UID: 0 PID: 19592 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 1225.049028][T19592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1225.049046][T19592] Workqueue: writeback wb_workfn (flush-7:9) [ 1225.049096][T19592] Call Trace: [ 1225.049109][T19592] [ 1225.049120][T19592] dump_stack_lvl+0xe8/0x150 [ 1225.049163][T19592] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1225.049210][T19592] f2fs_write_end_bio+0x1211/0x16e0 [ 1225.049244][T19592] ? blkg_put+0x22/0x240 [ 1225.049303][T19592] __submit_merged_bio+0x258/0x6a0 [ 1225.049339][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.049371][T19592] ? rcu_is_watching+0x16/0xb0 [ 1225.049412][T19592] __submit_merged_write_cond+0x3c9/0x4e0 [ 1225.049463][T19592] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1225.049522][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.049565][T19592] f2fs_write_data_pages+0x2a27/0x36f0 [ 1225.049660][T19592] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1225.049723][T19592] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1225.049807][T19592] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1225.049873][T19592] ? __lock_acquire+0x747/0x2de0 [ 1225.049913][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.049963][T19592] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1225.050009][T19592] do_writepages+0x338/0x560 [ 1225.050048][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.050079][T19592] ? reacquire_held_locks+0x117/0x1a0 [ 1225.050117][T19592] ? writeback_sb_inodes+0x450/0x1b00 [ 1225.050162][T19592] __writeback_single_inode+0x136/0x1220 [ 1225.050203][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.050233][T19592] ? do_raw_spin_unlock+0xf5/0x200 [ 1225.050279][T19592] writeback_sb_inodes+0x9de/0x1b00 [ 1225.050314][T19592] ? __lock_acquire+0x747/0x2de0 [ 1225.050363][T19592] ? lock_acquire+0x115/0x350 [ 1225.050401][T19592] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1225.050498][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.050529][T19592] ? rcu_is_watching+0x16/0xb0 [ 1225.050561][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.050592][T19592] ? queue_io+0x2d3/0x470 [ 1225.050632][T19592] wb_writeback+0x41c/0xad0 [ 1225.050674][T19592] ? queue_io+0x281/0x470 [ 1225.050718][T19592] ? __pfx_wb_writeback+0x10/0x10 [ 1225.050751][T19592] ? do_raw_spin_lock+0x12b/0x2f0 [ 1225.050813][T19592] wb_workfn+0x431/0x10f0 [ 1225.050871][T19592] ? __pfx_wb_workfn+0x10/0x10 [ 1225.050908][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.050939][T19592] ? trace_hrtimer_start+0x82/0x200 [ 1225.050987][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.051018][T19592] ? do_raw_spin_lock+0x12b/0x2f0 [ 1225.051069][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.051105][T19592] ? lock_acquire+0x115/0x350 [ 1225.051135][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.051177][T19592] ? rcu_is_watching+0x16/0xb0 [ 1225.051209][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.051242][T19592] ? process_scheduled_works+0x97a/0x1630 [ 1225.051280][T19592] process_scheduled_works+0xc3d/0x1630 [ 1225.051316][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.051393][T19592] ? __pfx_process_scheduled_works+0x10/0x10 [ 1225.051439][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.051470][T19592] ? assign_work+0x3cf/0x5d0 [ 1225.051514][T19592] worker_thread+0xa47/0xfb0 [ 1225.051555][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.051606][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.051637][T19592] ? __kthread_parkme+0x71/0x1f0 [ 1225.051693][T19592] kthread+0x38b/0x480 [ 1225.051721][T19592] ? __pfx_worker_thread+0x10/0x10 [ 1225.051756][T19592] ? __pfx_kthread+0x10/0x10 [ 1225.051786][T19592] ret_from_fork+0x514/0xb70 [ 1225.051818][T19592] ? __pfx_ret_from_fork+0x10/0x10 [ 1225.051844][T19592] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.051874][T19592] ? __switch_to+0xc89/0x1420 [ 1225.051918][T19592] ? __pfx_kthread+0x10/0x10 [ 1225.051948][T19592] ret_from_fork_asm+0x1a/0x30 [ 1225.052015][T19592] [ 1225.072453][T19592] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1225.157756][T21848] loop7: detected capacity change from 0 to 32768 [ 1225.237739][T21848] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1225.249070][T21850] FAULT_INJECTION: forcing a failure. [ 1225.249070][T21850] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.249112][T21850] CPU: 0 UID: 0 PID: 21850 Comm: syz.1.4344 Not tainted syzkaller #0 PREEMPT(full) [ 1225.249140][T21850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1225.249157][T21850] Call Trace: [ 1225.249168][T21850] [ 1225.249179][T21850] dump_stack_lvl+0xe8/0x150 [ 1225.249222][T21850] should_fail_ex+0x410/0x560 [ 1225.249256][T21850] ? __alloc_skb+0x1db/0x7a0 [ 1225.249289][T21850] should_failslab+0xa8/0x100 [ 1225.249324][T21850] ? __alloc_skb+0x1db/0x7a0 [ 1225.249353][T21850] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1225.249394][T21850] ? __alloc_skb+0x18d/0x7a0 [ 1225.249427][T21850] ? __alloc_skb+0x1db/0x7a0 [ 1225.249467][T21850] __alloc_skb+0x1db/0x7a0 [ 1225.249504][T21850] ctrl_getfamily+0x3d0/0x5c0 [ 1225.249535][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.249570][T21850] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1225.249605][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.249636][T21850] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1225.249681][T21850] genl_family_rcv_msg_doit+0x233/0x340 [ 1225.249714][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.249751][T21850] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1225.249796][T21850] ? __dev_queue_xmit+0x29b/0x3820 [ 1225.249848][T21850] genl_rcv_msg+0x614/0x7a0 [ 1225.249888][T21850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1225.249919][T21850] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1225.249954][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.249983][T21850] ? __asan_memcpy+0x40/0x70 [ 1225.250007][T21850] ? __skb_clone+0x5c/0x6c0 [ 1225.250051][T21850] netlink_rcv_skb+0x226/0x4a0 [ 1225.250094][T21850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1225.250130][T21850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1225.250189][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.250219][T21850] ? down_read+0x2be/0x330 [ 1225.250261][T21850] genl_rcv+0x28/0x40 [ 1225.250290][T21850] netlink_unicast+0x7bd/0x940 [ 1225.250340][T21850] netlink_sendmsg+0x813/0xb40 [ 1225.250377][T21850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.250412][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.250442][T21850] ? apparmor_socket_sendmsg+0x98/0x360 [ 1225.250471][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.250504][T21850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.250529][T21850] sock_sendmsg_nosec+0x13a/0x180 [ 1225.250560][T21850] __sys_sendto+0x408/0x5a0 [ 1225.250607][T21850] ? __pfx___sys_sendto+0x10/0x10 [ 1225.250675][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.250704][T21850] ? do_user_addr_fault+0xc4c/0x1340 [ 1225.250738][T21850] __x64_sys_sendto+0xde/0x100 [ 1225.250775][T21850] do_syscall_64+0x166/0x520 [ 1225.250808][T21850] ? trace_irq_disable+0x3b/0x140 [ 1225.250835][T21850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.250869][T21850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.250895][T21850] RIP: 0033:0x7f3aba75e98e [ 1225.250919][T21850] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1225.250940][T21850] RSP: 002b:00007f3abb6afe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1225.250967][T21850] RAX: ffffffffffffffda RBX: 00007f3abb6b16c0 RCX: 00007f3aba75e98e [ 1225.250987][T21850] RDX: 0000000000000020 RSI: 00007f3abb6b0000 RDI: 0000000000000006 [ 1225.251004][T21850] RBP: 0000000000000000 R08: 00007f3abb6aff04 R09: 000000000000000c [ 1225.251021][T21850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1225.251037][T21850] R13: 00007f3abb6aff58 R14: 00007f3abb6b0000 R15: 0000000000000000 [ 1225.251077][T21850] [ 1225.305764][T21850] FAULT_INJECTION: forcing a failure. [ 1225.305764][T21850] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.305800][T21850] CPU: 0 UID: 0 PID: 21850 Comm: syz.1.4344 Not tainted syzkaller #0 PREEMPT(full) [ 1225.305828][T21850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1225.305844][T21850] Call Trace: [ 1225.305855][T21850] [ 1225.305866][T21850] dump_stack_lvl+0xe8/0x150 [ 1225.305912][T21850] should_fail_ex+0x410/0x560 [ 1225.305948][T21850] should_failslab+0xa8/0x100 [ 1225.305983][T21850] __kmalloc_cache_noprof+0xa3/0x600 [ 1225.306012][T21850] ? percpu_ref_init+0xc5/0x350 [ 1225.306037][T21850] ? percpu_ref_init+0xc5/0x350 [ 1225.306070][T21850] ? __pfx_blkg_release+0x10/0x10 [ 1225.306102][T21850] percpu_ref_init+0xc5/0x350 [ 1225.306133][T21850] blkg_alloc+0xee/0x8f0 [ 1225.306162][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.306195][T21850] ? xas_store+0x9f5/0x17f0 [ 1225.306232][T21850] blkcg_init_disk+0x1cf/0x2e0 [ 1225.306266][T21850] ? __pfx_blkcg_init_disk+0x10/0x10 [ 1225.306296][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.306328][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.306363][T21850] ? do_raw_spin_unlock+0xf5/0x200 [ 1225.306406][T21850] __alloc_disk_node+0x317/0x600 [ 1225.306450][T21850] __blk_alloc_disk+0x105/0x1d0 [ 1225.306486][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.306520][T21850] ? __pfx___blk_alloc_disk+0x10/0x10 [ 1225.306555][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.306616][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.306651][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.306681][T21850] ? __raw_spin_lock_init+0x45/0x100 [ 1225.306720][T21850] dm_create+0x476/0xf70 [ 1225.306762][T21850] dev_create+0x1f7/0x400 [ 1225.306796][T21850] ? __pfx_dev_create+0x10/0x10 [ 1225.306838][T21850] dm_ctl_ioctl+0x9ec/0xe10 [ 1225.306879][T21850] ? __pfx_dev_create+0x10/0x10 [ 1225.306910][T21850] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1225.306974][T21850] ? __fget_files+0x2a/0x420 [ 1225.307009][T21850] ? __fget_files+0x3a2/0x420 [ 1225.307042][T21850] ? __fget_files+0x2a/0x420 [ 1225.307081][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.307110][T21850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.307142][T21850] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1225.307172][T21850] __se_sys_ioctl+0xfc/0x170 [ 1225.307204][T21850] do_syscall_64+0x166/0x520 [ 1225.307235][T21850] ? trace_irq_disable+0x3b/0x140 [ 1225.307262][T21850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.307295][T21850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.307321][T21850] RIP: 0033:0x7f3aba79e159 [ 1225.307344][T21850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.307366][T21850] RSP: 002b:00007f3abb6b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1225.307392][T21850] RAX: ffffffffffffffda RBX: 00007f3abaa25fa0 RCX: 00007f3aba79e159 [ 1225.307411][T21850] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 1225.307429][T21850] RBP: 00007f3aba83506b R08: 0000000000000000 R09: 0000000000000000 [ 1225.307446][T21850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1225.307462][T21850] R13: 00007f3abaa26038 R14: 00007f3abaa25fa0 R15: 00007ffecebbbbf8 [ 1225.307502][T21850] [ 1225.340504][T21848] XFS (loop7): Ending clean mount [ 1226.380694][ C1] net_ratelimit: 77 callbacks suppressed [ 1226.501276][T21612] lo speed is unknown, defaulting to 1000 [ 1226.502538][ T30] usb 1-1: USB disconnect, device number 25 [ 1226.521801][T10012] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1226.961503][T21869] loop6: detected capacity change from 0 to 32768 [ 1227.042502][T21871] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 1227.087475][T21869] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1227.090274][T21871] udc dummy_udc.0: failed to start g1: -19 [ 1227.190168][T21869] XFS (loop6): Ending clean mount [ 1227.285318][T21871] UDC core: g1: couldn't find an available UDC or it's busy [ 1227.676476][ T8770] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1228.064489][ T30] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1228.242828][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 1228.248863][ T30] usb 2-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 1228.266212][ T30] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 1228.266238][ T30] usb 2-1: config 0 has no interface number 0 [ 1228.266270][ T30] usb 2-1: config 0 interface 66 has no altsetting 0 [ 1228.271771][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.271794][ T30] usb 2-1: Product: syz [ 1228.271812][ T30] usb 2-1: Manufacturer: syz [ 1228.271830][ T30] usb 2-1: SerialNumber: syz [ 1228.319930][ T30] usb 2-1: config 0 descriptor?? [ 1228.656978][ T30] usb 2-1: selecting invalid altsetting 3 [ 1228.657000][ T30] comedi comedi5: could not set alternate setting 3 in high speed [ 1228.660529][T21088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1228.669627][ T30] usbduxsigma 2-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 1228.696533][ T30] usbduxsigma 2-1:0.66: probe with driver usbduxsigma failed with error -22 [ 1228.710717][T21088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1228.714923][ T30] usb 2-1: USB disconnect, device number 93 [ 1228.716361][T21088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1228.718342][T21088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1228.719661][T21088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1228.983195][T21892] ================================================================== [ 1228.983209][T21892] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x1b8/0x320 [ 1228.983245][T21892] Read of size 192 at addr ffffffff9ad77f80 by task syz.7.4347/21892 [ 1228.983272][T21892] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1228.983285][T21892] CPU: 1 UID: 0 PID: 21892 Comm: syz.7.4347 Not tainted syzkaller #0 PREEMPT(full) [ 1228.983313][T21892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1228.983329][T21892] Call Trace: [ 1228.983339][T21892] [ 1228.983350][T21892] dump_stack_lvl+0xe8/0x150 [ 1228.983388][T21892] print_address_description+0x55/0x1e0 [ 1228.983424][T21892] ? usb_copy_descriptors+0x1b8/0x320 [ 1228.983453][T21892] print_report+0x58/0x70 [ 1228.983484][T21892] kasan_report+0x117/0x150 [ 1228.983518][T21892] ? usb_copy_descriptors+0x1b8/0x320 [ 1228.983553][T21892] kasan_check_range+0x264/0x2c0 [ 1228.983593][T21892] ? usb_copy_descriptors+0x1b8/0x320 [ 1228.983624][T21892] __asan_memcpy+0x29/0x70 [ 1228.983648][T21892] usb_copy_descriptors+0x1b8/0x320 [ 1228.983683][T21892] usb_assign_descriptors+0xcf/0x290 [ 1228.983715][T21892] f_audio_bind+0x1b5e/0x34b0 [ 1228.983762][T21892] usb_add_function+0x2e1/0x9f0 [ 1228.983795][T21892] configfs_composite_bind+0xde0/0x1410 ** replaying previous printk message ** [ 1228.983795][T21892] configfs_composite_bind+0xde0/0x1410 [ 1228.983836][T21892] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1228.983869][T21892] gadget_bind_driver+0x2ca/0x9e0 [ 1228.983901][T21892] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1228.983926][T21892] really_probe+0x254/0xae0 [ 1228.983961][T21892] __driver_probe_device+0x1e8/0x360 [ 1228.983993][T21892] driver_probe_device+0x4f/0x240 [ 1228.984027][T21892] __driver_attach+0x339/0x600 [ 1228.984059][T21892] bus_for_each_dev+0x23b/0x2c0 [ 1228.984097][T21892] ? __pfx___driver_attach+0x10/0x10 [ 1228.984126][T21892] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1228.984166][T21892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1228.984196][T21892] ? do_raw_spin_unlock+0xf5/0x200 [ 1228.984236][T21892] bus_add_driver+0x345/0x670 [ 1228.984279][T21892] driver_register+0x23a/0x320 [ 1228.984315][T21892] usb_gadget_register_driver_owner+0xf9/0x270 [ 1228.984358][T21892] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1228.984385][T21892] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1228.984412][T21892] configfs_write_iter+0x337/0x430 [ 1228.984443][T21892] vfs_write+0x612/0xba0 [ 1228.984487][T21892] ? __pfx_vfs_write+0x10/0x10 [ 1228.984531][T21892] ? __fget_files+0x2a/0x420 [ 1228.984570][T21892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1228.984606][T21892] ksys_write+0x150/0x270 [ 1228.984646][T21892] ? __pfx_ksys_write+0x10/0x10 [ 1228.984692][T21892] do_syscall_64+0x166/0x520 [ 1228.984725][T21892] ? trace_irq_disable+0x3b/0x140 [ 1228.984751][T21892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.984780][T21892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.984805][T21892] RIP: 0033:0x7f8fc7d9e159 [ 1228.984828][T21892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.984849][T21892] RSP: 002b:00007f8fc8c9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1228.984877][T21892] RAX: ffffffffffffffda RBX: 00007f8fc8025fa0 RCX: 00007f8fc7d9e159 [ 1228.984896][T21892] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000003 [ 1228.984914][T21892] RBP: 00007f8fc7e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1228.984930][T21892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.984946][T21892] R13: 00007f8fc8026038 R14: 00007f8fc8025fa0 R15: 00007ffe42e8eaa8 [ 1228.984976][T21892] [ 1228.984986][T21892] [ 1228.984993][T21892] The buggy address belongs to the variable: [ 1228.985002][T21892] ac_header_desc+0x0/0x20 [ 1228.985032][T21892] [ 1228.985039][T21892] The buggy address belongs to the physical page: [ 1228.985051][T21892] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ad77 [ 1228.985072][T21892] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1228.985105][T21892] raw: 00fff00000002000 ffffea00006b5dc8 ffffea00006b5dc8 0000000000000000 [ 1228.985127][T21892] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1228.985141][T21892] page dumped because: kasan: bad access detected [ 1228.985153][T21892] page_owner info is not present (never set?) [ 1228.985163][T21892] [ 1228.985169][T21892] Memory state around the buggy address: [ 1228.985183][T21892] ffffffff9ad77e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1228.985200][T21892] ffffffff9ad77f00: 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 [ 1228.985217][T21892] >ffffffff9ad77f80: 00 f9 f9 f9 00 f9 f9 f9 00 f9 f9 f9 00 00 f9 f9 [ 1228.985231][T21892] ^ [ 1228.985244][T21892] ffffffff9ad78000: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 00 00 [ 1228.985261][T21892] ffffffff9ad78080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1228.985275][T21892] ================================================================== [ 1228.994360][T21088] bluetooth hci5:200: No ACPI support [ 1229.007925][T21088] PM: Adding info for No Bus:hci5:200 [ 1229.007968][T21088] kobject: 'hci5:200' (ffff8880258e8cf0): kobject_uevent_env [ 1229.008023][T21088] kobject: 'hci5:200' (ffff8880258e8cf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci5/hci5:200' [ 1229.008548][T21088] hci5 opcode 0x041b plen 2 [ 1229.008601][T21088] hci5: skb len 5 [ 1229.012830][ T52] hci5: [ 1229.012859][ T52] hci5: entry ffff888025447900 [ 1229.016796][T21088] hci5 opcode 0x040f plen 4 [ 1229.016907][T21088] hci5: skb len 7 [ 1229.017160][T21911] kcov: kcov_task_exit: t = ffff888020365dc0, kcov->t = ffff888020365dc0 [ 1229.023256][T21088] kcov: kcov_move_area: ffffc90024c00000 1048576 <= ffffc9001c940000 12291 [ 1229.023307][T21088] kcov: kcov_remote_start: handle = 6, context: task [ 1229.023325][T21088] kcov: kcov_start: t = ffff88805c4f1f40, size = 1048576, area = ffffc9001c940000 [ 1229.023351][T21088] hci5 Event packet [ 1229.023409][T21088] hci5: event 0x0b [ 1229.023425][T21088] hci5: status 0x00 [ 1229.023441][T21088] hci5 opcode 0x0419 plen 10 [ 1229.023488][T21088] hci5: skb len 13 [ 1229.023623][T21088] hcon ffff8880258e8000 bdaddr 10:aa:aa:aa:aa:aa status 0 [ 1229.023648][T21088] hci5 hcon ffff8880258e8000 [ 1229.023814][T21088] hcon ffff8880258e8000 conn ffff88807a0b3800 hchan ffff8880756c6600 [ 1229.023870][T21088] conn ffff88807a0b3800 [ 1229.024356][T21088] conn ffff88807a0b3800, code 0x0a, ident 0x01, len 2 [ 1229.024418][T21088] code 0x0a [ 1229.024432][T21088] hci5 chan ffff8880756c6600 flags 0x0002 [ 1229.024451][T21088] hci5 nonfrag skb ffff888052543140 len 14 [ 1229.024475][T21088] hci5: chan ffff8880756c6600 queued 1 [ 1229.025779][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 1229.025804][ C1] kcov: kcov_start: t = ffff88801e695dc0, size = 262144, area = ffffc900020b1000 [ 1229.025842][ C1] kcov: kcov_move_area: ffffc9001652d000 1048576 <= ffffc900020b1000 21 [ 1229.026208][T21088] hcon ffff8880258e8000 orig refcnt 1 [ 1229.026725][T21088] kcov: kcov_move_area: ffffc90024c00000 1048576 <= ffffc9001c940000 7877 [ 1229.026761][T21088] kcov: kcov_remote_start: handle = 6, context: task [ 1229.026778][T21088] kcov: kcov_start: t = ffff88805c4f1f40, size = 1048576, area = ffffc9001c940000 [ 1229.026803][T21088] hci5 Event packet [ 1229.026853][T21088] hci5: event 0x3e [ 1229.026869][T21088] hci5: subevent 0x01 [ 1229.026884][T21088] hci5: status 0x00 [ 1229.026900][T21088] hci5: dst 11:aa:aa:aa:aa:aa [ 1229.026948][T21088] hci5: dst 11:aa:aa:aa:aa:aa handle 0x0f00 [ 1229.026992][T21088] hci5 orig refcnt 10 [ 1229.027007][T21088] hci5: conn ffff88805e40c000 [ 1229.027031][T21088] hci5: hcon ffff88805e40c000 handle 0x00c9 [ 1229.027132][T21088] channel 3 len 19 [ 1229.027176][T21088] hci5: conn ffff88805e40c000 [ 1229.027227][T21088] device: 'hci5:201': device_add [ 1229.027251][T21088] kobject: 'hci5:201' (ffff88805e40ccf0): kobject_add_internal: parent: 'hci5', set: 'devices' [ 1229.028526][T21088] bluetooth hci5:201: No ACPI support [ 1229.028948][T21088] PM: Adding info for No Bus:hci5:201 [ 1229.028968][T21088] kobject: 'hci5:201' (ffff88805e40ccf0): kobject_uevent_env [ 1229.029019][T21088] kobject: 'hci5:201' (ffff88805e40ccf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci5/hci5:201' [ 1229.029206][T21088] hcon ffff88805e40c000 bdaddr 11:aa:aa:aa:aa:aa status 0 [ 1229.029229][T21088] hci5 hcon ffff88805e40c000 [ 1229.029274][T21088] hcon ffff88805e40c000 conn ffff88807a0b0000 hchan ffff8880756c6f00 [ 1229.029308][T21088] conn ffff88807a0b0000 [ 1229.029324][T21088] hci5 conn ffff88807a0b0000 [ 1229.029343][T21088] conn ffff88807a0b0000, code 0x12, ident 0x01, len 8 [ 1229.029396][T21088] code 0x12 [ 1229.029410][T21088] hci5 chan ffff8880756c6f00 flags 0x0000 [ 1229.029428][T21088] hci5 nonfrag skb ffff8880749b1000 len 20 [ 1229.029448][T21088] hci5: chan ffff8880756c6f00 queued 1 [ 1229.029571][ T52] hci5: [ 1229.029592][ T52] hci5: entry ffff88805aec3500 [ 1229.029654][T21088] kcov: kcov_move_area: ffffc90024c00000 1048576 <= ffffc9001c940000 17896 [ 1229.029701][T21088] hci5 [ 1229.029720][T21088] hci5 cmd_cnt 1 cmd queued 4 [ 1229.029738][T21088] hci5: skb ffff88807d2d1a00 [ 1229.029789][T21088] hci5 type 1 len 10 [ 1229.029933][T21088] hci5 acl 4 sco 0 le 0 iso 0 [ 1229.029954][T21088] hci5: type 0 [ 1229.029968][T21088] hci5: type 2 [ 1229.029981][T21088] hci5 [ 1229.029992][T21088] hci5 [ 1229.030003][T21088] hci5 [ 1229.030015][T21088] hci5 [ 1229.030027][T21088] hci5 [ 1229.030039][T21088] chan ffff8880756c6600 quote 4 [ 1229.030056][T21088] chan ffff8880756c6600 skb ffff888052543140 len 14 priority 7 [ 1229.030085][T21088] hcon ffff8880258e8000 mode 0 [ 1229.030103][T21088] hci5 type 2 len 14 [ 1229.030138][T21088] hci5: type 0 [ 1229.030152][T21088] hci5: type 2 [ 1229.030165][T21088] hci5 [ 1229.030177][T21088] hci5 [ 1229.030189][T21088] hci5 [ 1229.030200][T21088] hci5 [ 1229.030212][T21088] chan ffff8880756c6f00 quote 3 [ 1229.030229][T21088] chan ffff8880756c6f00 skb ffff8880749b1000 len 20 priority 7 [ 1229.030253][T21088] hci5 type 2 len 20 [ 1229.030272][T21088] hci5: type 0 [ 1229.030285][T21088] hci5: type 2 [ 1229.030298][T21088] hci5 [ 1229.030310][T21088] hci5 [ 1229.030408][T21088] [ 1229.030484][T21088] [ 1229.036233][T21913] kcov: kcov_start: t = ffff888034fe0000, size = 524288, area = ffffc900213d1000 [ 1229.039962][T21913] netlink: 'syz.6.4358': attribute type 1 has an invalid length. [ 1229.053971][T21913] kobject: 'loop6' (ffff888023890d60): kobject_uevent_env [ 1229.053999][T21913] kobject: 'loop6' (ffff888023890d60): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1229.054367][T21913] loop6: detected capacity change from 0 to 1024 [ 1229.054384][T21913] kobject: 'loop6' (ffff888023890d60): kobject_uevent_env [ 1229.054403][T21913] kobject: 'loop6' (ffff888023890d60): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1229.054425][T21913] kobject: 'loop6' (ffff888023890d60): kobject_uevent_env [ 1229.054469][T21913] kobject: 'loop6' (ffff888023890d60): fill_kobj_path: path = '/devices/virtual/block/loop6' [ 1229.054668][T21913] send_to_group: group=ffff88807e95a000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888031c80080 data_type=2 dir=0000000000000000 cookie=0 [ 1229.054707][T21913] inotify_handle_inode_event: group=ffff88807e95a000 mark=ffff8880217b5190 mask=8 [ 1229.054746][T21913] fsnotify_insert_event: group=ffff88807e95a000 event=ffff88802de10740 [ 1229.057667][ C0] virtqueue callback for ffff888026282c00 (ffffffff86bc1620) [ 1229.058902][ C0] No more buffers in queue [ 1229.059476][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1229.059523][ C0] No more buffers in queue [ 1229.063682][ T4985] kobject: 'loop6' (ffff888023890d60): kobject_uevent_env [ 1229.063733][ T4985] kobject: 'loop6' (ffff888023890d60): fill_kobj_path: path = '/devices/virtual/block/loop6' [ 1229.071859][T21914] async_waiting @ 21914 [ 1229.071880][T21914] async_continuing @ 21914 after 2 usec [ 1229.084410][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 1229.084436][ C1] kcov: kcov_start: t = ffff88801e695dc0, size = 262144, area = ffffc900020b1000 [ 1229.084474][ C1] kcov: kcov_move_area: ffffc9001652d000 1048576 <= ffffc900020b1000 21 [ 1229.084973][ T5605] eth0: xmit ffff888033751270 42:01:0a:80:00:01 [ 1229.085007][ T5605] Added buffer head 2 to ffff888026282600 [ 1229.085053][ C1] virtqueue callback for ffff888026282600 (ffffffff86bc1760) [ 1229.085090][ C1] Sent skb ffff888033751270 [ 1229.085108][ C1] No more buffers in queue [ 1229.086653][T21913] EXT4-fs (loop6): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1229.086682][T21913] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 1229.086853][ C0] virtqueue callback for ffff888026282c00 (ffffffff86bc1620) [ 1229.088720][T21913] send_to_group: group=ffff88807e95a000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88807fb62e80 data_type=2 dir=0000000000000000 cookie=0 [ 1229.088761][T21913] inotify_handle_inode_event: group=ffff88807e95a000 mark=ffff8880217b5190 mask=8 [ 1229.088798][T21913] fsnotify_insert_event: group=ffff88807e95a000 event=ffff88802de10e80 [ 1229.088869][T21913] kernfs backing_file: removing [ 1229.088936][T21913] kernfs offset: removing [ 1229.088994][T21913] kernfs sizelimit: removing [ 1229.089051][T21913] kernfs autoclear: removing [ 1229.089108][T21913] kernfs partscan: removing [ 1229.089165][T21913] kernfs dio: removing [ 1229.089219][T21913] kernfs loop: removing [ 1229.089268][T21913] kobject: 'loop6' (ffff888023890d60): kobject_uevent_env [ 1229.089320][T21913] kobject: 'loop6' (ffff888023890d60): fill_kobj_path: path = '/devices/virtual/block/loop6' [ 1229.091682][ C0] No more buffers in queue [ 1229.091737][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1229.091764][ C0] No more buffers in queue [ 1229.097476][ C0] wireguard: wg1: Handshake for peer 81 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 4) [ 1229.097582][ C0] wireguard: wg0: Handshake for peer 79 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1229.098683][ T4985] get_one_event: group=ffff88807e95a000 event=ffff88802de10740 [ 1229.098708][ T4985] fsnotify_remove_first_event: group=ffff88807e95a000 event=ffff88802de10740 [ 1229.098730][ T4985] inotify_read: group=ffff88807e95a000 kevent=ffff88802de10740 [ 1229.098751][ T4985] copy_event_to_user: group=ffff88807e95a000 event=ffff88802de10740 [ 1229.098789][ T4985] inotify_read: group=ffff88807e95a000 kevent=0000000000000000 [ 1229.104128][T21913] kobject: 'loop6' (ffff888023890d60): kobject_uevent_env [ 1229.104181][T21913] kobject: 'loop6' (ffff888023890d60): fill_kobj_path: path = '/devices/virtual/block/loop6' [ 1229.108439][ C0] eth0: xmit ffff888052a8c140 42:01:0a:80:00:01 [ 1229.108491][ C0] Added buffer head 9 to ffff888026282a00 [ 1229.108540][ C0] virtqueue callback for ffff888026282a00 (ffffffff86bc1760) [ 1229.108791][ C0] Sent skb ffff888052a8c140 [ 1229.108838][ C0] No more buffers in queue [ 1229.130946][ T4985] kobject: 'loop6' (ffff888023890d60): kobject_uevent_env [ 1229.131001][ T4985] kobject: 'loop6' (ffff888023890d60): fill_kobj_path: path = '/devices/virtual/block/loop6' [ 1229.133184][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 1229.133210][ C1] kcov: kcov_start: t = ffff88807eddbe80, size = 262144, area = ffffc900020b1000 [ 1229.133249][ C1] kcov: kcov_move_area: ffffc9001652d000 1048576 <= ffffc900020b1000 21 [ 1229.138410][T21892] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1230.470525][T21892] CPU: 1 UID: 0 PID: 21892 Comm: syz.7.4347 Not tainted syzkaller #0 PREEMPT(full) [ 1230.479934][T21892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1230.489983][T21892] Call Trace: [ 1230.493255][T21892] [ 1230.496175][T21892] vpanic+0x56d/0xa60 [ 1230.500164][T21892] ? __pfx_vpanic+0x10/0x10 [ 1230.504674][T21892] panic+0xc5/0xd0 [ 1230.508397][T21892] ? __pfx_panic+0x10/0x10 [ 1230.512832][T21892] ? preempt_schedule_thunk+0x16/0x40 [ 1230.518199][T21892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.523828][T21892] ? preempt_schedule_thunk+0x16/0x40 [ 1230.529301][T21892] ? usb_copy_descriptors+0x1b8/0x320 [ 1230.534708][T21892] check_panic_on_warn+0x89/0xb0 [ 1230.539646][T21892] ? usb_copy_descriptors+0x1b8/0x320 [ 1230.545018][T21892] end_report+0x73/0x170 [ 1230.549271][T21892] ? usb_copy_descriptors+0x1b8/0x320 [ 1230.554640][T21892] kasan_report+0x128/0x150 [ 1230.559154][T21892] ? usb_copy_descriptors+0x1b8/0x320 [ 1230.564529][T21892] kasan_check_range+0x264/0x2c0 [ 1230.569467][T21892] ? usb_copy_descriptors+0x1b8/0x320 [ 1230.574839][T21892] __asan_memcpy+0x29/0x70 [ 1230.579334][T21892] usb_copy_descriptors+0x1b8/0x320 [ 1230.584532][T21892] usb_assign_descriptors+0xcf/0x290 [ 1230.589819][T21892] f_audio_bind+0x1b5e/0x34b0 [ 1230.594511][T21892] usb_add_function+0x2e1/0x9f0 [ 1230.599365][T21892] configfs_composite_bind+0xde0/0x1410 [ 1230.604922][T21892] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1230.610902][T21892] gadget_bind_driver+0x2ca/0x9e0 [ 1230.616185][T21892] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1230.621722][T21892] really_probe+0x254/0xae0 [ 1230.626226][T21892] __driver_probe_device+0x1e8/0x360 [ 1230.632482][T21892] driver_probe_device+0x4f/0x240 [ 1230.637802][T21892] __driver_attach+0x339/0x600 [ 1230.642569][T21892] bus_for_each_dev+0x23b/0x2c0 [ 1230.647424][T21892] ? __pfx___driver_attach+0x10/0x10 [ 1230.652707][T21892] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1230.658097][T21892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.663726][T21892] ? do_raw_spin_unlock+0xf5/0x200 [ 1230.668848][T21892] bus_add_driver+0x345/0x670 [ 1230.673541][T21892] driver_register+0x23a/0x320 [ 1230.678312][T21892] usb_gadget_register_driver_owner+0xf9/0x270 [ 1230.684488][T21892] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1230.690117][T21892] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1230.696271][T21892] configfs_write_iter+0x337/0x430 [ 1230.701380][T21892] vfs_write+0x612/0xba0 [ 1230.705631][T21892] ? __pfx_vfs_write+0x10/0x10 [ 1230.710496][T21892] ? __fget_files+0x2a/0x420 [ 1230.715095][T21892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.720755][T21892] ksys_write+0x150/0x270 [ 1230.725097][T21892] ? __pfx_ksys_write+0x10/0x10 [ 1230.729961][T21892] do_syscall_64+0x166/0x520 [ 1230.734657][T21892] ? trace_irq_disable+0x3b/0x140 [ 1230.739762][T21892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.745831][T21892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.751722][T21892] RIP: 0033:0x7f8fc7d9e159 [ 1230.756130][T21892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1230.775729][T21892] RSP: 002b:00007f8fc8c9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1230.784141][T21892] RAX: ffffffffffffffda RBX: 00007f8fc8025fa0 RCX: 00007f8fc7d9e159 [ 1230.792193][T21892] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000003 [ 1230.800161][T21892] RBP: 00007f8fc7e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1230.808124][T21892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1230.816089][T21892] R13: 00007f8fc8026038 R14: 00007f8fc8025fa0 R15: 00007ffe42e8eaa8 [ 1230.824063][T21892] [ 1230.827322][T21892] Kernel Offset: disabled [ 1230.831628][T21892] Rebooting in 86400 seconds..