last executing test programs: 5m3.649884971s ago: executing program 0 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x844039, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r1 = getpid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000), 0x8) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r4, 0x0, 0xfff, 0x9) dup2(r2, r0) ioctl$NBD_DISCONNECT(r4, 0xab08) syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x32d090, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000210dc6431450a41d40f157e3512b4b99c026e738de5993f365a0c450b77103ed4a4ce9645d5bda31f3c7059d42c252f8bf6429ca73047cf2160668940f50a78e03514b4a241ac903d9d349a649eb2abefc56cd1ad4da51bca4e370cad9401e0899238a3ce2fbe0aab556b9ba4341a9906debdb2646298351fb5b7ae6dbf1698f4eb5cd65fab44cdf71"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) unlink(&(0x7f0000000080)='./file1\x00') rename(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file1\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000015c0)=@newtaction={0x618, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100004, 0x9, 0x20000000, 0x8000, 0x8a4}, 0xb}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}, {0x5ac, 0x1, [@m_csum={0x1c4, 0x20, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x5, 0x3, 0x6, 0x34}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7, 0xffffffffffffffff, 0x2, 0x5}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x8, 0x10000000, 0x87}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x59, 0x382, 0x7, 0xff, 0x1}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f59518d, 0x3, 0x6, 0x3, 0x101}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x70, 0x401, 0x0, 0x9, 0x1000}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x1, 0x8, 0x7fffffff, 0xa}, 0x46}}]}, {0xd1, 0x6, "edd42e0f3aa7526b4f29f49376161098585fa73393201f4c521267ab4c0afcc2f6f32d8943bf39f7c892cfd03fa555c819f34397020e2789c74537467bf9873d1c9a64cd26f6194fa50cd8dd361abd4eb180ee3917a8a7876a161b03df67f5d403ca8b4c3334fd7d1d56f55d25008d42c81fe64204867fb4840a1a4eb73cee643af7bfa47d8a932f848e8e2d12fd5e61de7122ac73e56f7c85f137ddfaba35d0ecd431f440ad8847c86cb23ef8cc479e4694797f9306ca14c654600ed81cd09bde43d0b3f9e7bc414715d33a6d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}, @m_sample={0x38, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8547}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x11c, 0x80e, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6b0}]}, {0xe6, 0x6, "aef8997bc7900c0011df24467d20dee1bbad00c963a457690c3a82ad3707e7f955f86d8d05bbe43a97ac0bed05fa885823835966499c31b7b9ee82540ed7aca191fe32628c40be2c88dfd8a0d7c6cef773cf4fef232eb5bccbf24a2f6b79d87fb7293e7d5746317a10104fbce629cb38400ef0ef8f56f727319a47ad958717f69db5369b1547df965b68946f7fcfd9fa972771a2b0836bdcb1910d7707b399003e90588318de22a38dd58c0abd6ab8b7220dfec91c0f6e11c130867d5fcf9cd4a3c242cecddd8c263fc2fb70b1aafaf78806d78237d26454bade0626084bd3646c1d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x74, 0xa, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0x3e, 0x6, "8d5b863426fd29bdf71b6e79a493e2556b9a0819a24a7ff4b007ee3759a2ff1b8e3e47921b4cec351adcd70c81087597a5d9bbc91bc5779ad2bc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x21c, 0x16, 0x0, 0x0, {{0xa}, {0x110, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0xe1, 0x6, "4c53c7db4fe81cf6d725ac593e2ee0ef5d98a64951c7ffa782fda05eace5ca892c2b86f6b607cc905fbe3c633a2965fe5289520a4a78f246c74565eabd9d9cc26ff36bb07a277b682dbc4fc8d1566c797167e983f031f2cefbf60dd7cd92cf196b47ac65d28107ee6abace703b4acf1b8ee4179ede1d476d0eb888c313c04a176ccd17e77beea752161d9bd07c5a90c0edb0b6eeac5f1818fb4338621f4f973d2d434df8cf651e3fc22c82a93a7ed094b5137bff50608088f45a1d3d02d3c8b683e2cf004161dbe70621aaa0783e533d6a37ad3807a1e42eac4b539116"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x618}}, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4m59.087210432s ago: executing program 0 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000007c0)={[{}, {@noblock_validity}, {@acl}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@resgid}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x64a, &(0x7f0000001540)="$eJzs3c9rHNcdAPDv7GplyVYrGUqpTUsFPdhQLGtdU9e91G4P9cFQQ30opQcLS3KF1z+wZKhUg2XooYUWSuk1BF/yD+QefMgttxBIcss54ITgkIQkeMPMzsqr1a5+WNpdS/P5wOzOezO773139u282dm3E0BhTaY3pYhjEc+vJRHjLcvGorFwMl/v2WcPrqdTEvX6Hz9NIsnzmusn+f2RPDESEe8m5ebicmu5i8srN2dq9YaHEaeXbt09vbi8cmrh1syNuRtzt6tnfnX23PT56tnqnsR5JL+/dPkPP/7PP/76y/n3aqeSuBBXK3+fjbY49spkTMbzPMTW/KGIOBftr8j+dABCKLRy/n6sRMQPYzzKWaphPBb+PdDKAT1VL0fUgYJKttf+h3peEaDPmv2A5rH99o6Dr/a4V9I/Ty82DoA2xj/U+G4kRrJjo8PPkpYjo6Hsu42JPSg/LePbB8dfS6dY9z3El2tbZ2gPyulm9VFE/GhD/OVm3SaySNP4S+vqkUTEdEQM5/X73S7qkLTM9+J7mM10iT+r1WbxlyLiQn6f5v/2JcufbEv3O34AiunJxXxHvpqmXuz/0r5Hs/8TG/o/jXND7fuulzHo/V/3/l9zfz+SdYZKbf2wtM9ypfNTVtozPvrXpf91K7+1/5dOafnNvmA/PH0Ucbwt/n+mweb9nzT+pMP2T1e5dmF7Zfz+/U8udVs26PjrjyNOdDz+edErTefaz0+O5suqZ6un5xdqc9ON245lvPXOX97oVv66+GNiINv/cJf4W7Z/qf1x6Wtyd5tlvHnl8a1uy8a23P6lj4eTxvHmcJ7zt5mlpXvViOHkcr5K44glyz+zeV2a6zSfI43/5M86t/917/9H659ntPmRuQ13/3TzWbdlL/P+bzmZ/Ly+zTp0k8Y/u/X239D+07z/rqUeblrGF3++/5NuyzaLf3SXsQEAAAAAAEDRlLJzsElpam2+VJqaaoyX/UEcLtXuLC79fP7O/duzESez30NWSs0z3eONdJKmq/nvYRvpQ3Nn1qVrc7+IiKMR8f/yaJaeun6nNjvo4AEAAAAAAAAAAAAAAAAAAOAVcSQf/9+8TvXn5cb4f6AgenmBOeDVpv1DcWXtf8MlnoAisP+H4tL+obi0fyiunbb/DVc4B/Yt+38oLu0fikv7h+LS/gEAAADgQDr60ycfJhGx+uvRdEoiVmM4X2ZEEBxsfsoHxVUedAWAgVk79b/zzr6PDtjntuj/v53dfp3/OWB/qgT0WdIpM+sc1Ddv/E86PhIAAAAAAAAAAAAA6IETx9aN/8/yhvPfA1civjfo+gG94z8+oLh2MYjX+F/Y5/z1PxSX//8CthrFPxJxvmNfwfh/AAAAAAAAAAAAAOibsWxKSlP5WOCxKJWmphoD/yeikswv1OamI+L7EfFBuXIoTVcHXWkAAAAAAAAAAAAAAAAAAAA4YBaXV27O1Gpz91pnvtmQc7BnmldB7UNZv4kdPiqS/r8soxGxllOJ2GmdezdzKH/b7uZ5hhaXV5Kv6pkkYjVenQB3Fdcez2z50THc0w8mAAAAAAAAAAAAAAAAAAAooJaxx50df73PNQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/ntx/f/ezQw6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgf/ouAAD//1oIPMM=") close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebc, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 4m58.356176672s ago: executing program 0 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@hl={{0x28}, {0x8dde9cf0fcc298ce, 0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="3c3e0f2397b4d84500b5f812365f00000000000000", 0xff40) 4m57.375772585s ago: executing program 0 (id=67): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r4, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000380)={0x22}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="b8"}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="b70000000100001fbfa300000000000007030000f0ffffff620af0fff8ffffff79a4f0ff1c417dbedce07030f67a1afa085010343b58cb7c967cd72e09aa489b448e14607a7bce1b16f06bf0b33ae01b493aaea7907f1cd89d956413ceeb47339618de11be2ddaa1f767512988b245880e7c1581629ca8884a33c566cafcc430f67ae4aee9c3eb392318bd9a6308"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000003f0009000000000000080000030000000400000010000180"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000200)={r7}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000400)="69fe1839499a63bd7b4e672b7eb23d05faa2086f5f033047e4d281f5dca334370f25acc3068ee2f1979cf54f5d62c421bdb8d70cbbd7667752148e7a291d7df1e6644427879f203325460f8acba5ce2127e90cd57764441b0d60fa76eadab6d90115e5dd43e40778c04ff47dd5bc23955289aee4c09f40b391e230f54123fc2620a0af0c51c6961f9d0c22261375e5", 0x8f}, {&(0x7f0000000800)="6272642f314276d8116da7b5259f98f0c7867514df895c2ea3400f2fab885ce2605f26d687f2475910cb88bef05d2a1f7c40ead902c5abe400653a3d1af976fdfafc5a76422dcb9172dbe10b1507344746a6b3d40b871c53e690a69fa8b53efe2fc6b256696388be4d1629bba51eecc4b58bbdc4fdc4e7abe5632886608e104183f87b1217a7945930a3ca6ebe5fca50f1a011a75c6b3d3ac07a89fa8cb4f809c02d62ba97a69b2feb10347c1d823c7091cdd7221e3f767455ec3dc9ba520e79153c1c24788bc3fac3214dcea03ce9a6edb878866374d738a612bf66d576febc46429d02b7021c67ac84da", 0xeb}, {&(0x7f0000000900)="fb982ef6aee88ad0beae23aeb41d046c56161ac9065997a653d965eea3aaf2bc93a896aa0ea8be46a2f054e089bea5908f4b2aa8a2bf4e8e30ecadc019acc5109b2bcea893bcee66030686eb6c80264286b3d2c2c8f95517470e80a9ed8571df5f40fabe2c51f026dcb5545e150424d3a19750a06eb8fb9d22c21dd982f7d513222ab1e435741bc24231f202f23ef0cedfd5f4920852b7bb5cf86689008d86464a3a6674fe6acc3fa74b3e240028100f8ce2e59fb2ae1721508befa2", 0xbc}, {&(0x7f0000000a00)="b9dacece1e43de98afce813ad559245026b25fd680e2f3da2b2542d48ad39bdef2164cbca8cd4847582e83b6f49de59caa804dd07ff44f9f12b609e69eb08387d3a4eace1560dce44c284ccb310fead19b3ea268268dbcec6363319371cb19a69f7d0d0f53c4cba69c673eba3f98a7a674296d8ca9370edd256a837d3c4218994a0f8e48d470804834fcc80e68a646e236bf23885e18f3246a34941ed2e910cbc2b35eee5e9366ff", 0xa8}, {&(0x7f0000001880)="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", 0xfc}, {&(0x7f0000001980)="d73e108f7db9616dc206aca4355753ceabbab9cb3309ee10c08504dc724478861cdace3d1b5dc42b1d95a9226a6aa23d69fbe72522cec01edfd7c122607020064b2638fae63d3e046412da67744d25783c2454e9d1dca772", 0x58}, {&(0x7f0000001a00)="5a58f693109e8d17483deaeb4a9459a2271b0fc0b0e92dbce75a5ba6f04ce94a873f22f00613848de1aea4cb481d983e2ecfc28a2fcf19c1a37680d16e45d60b3a649771a9601dfe7edf2e218cd2595c778770459a97471ff1caa6cee76e9b50cbed861fbb723b70aad4441646aedb", 0x6f}], 0x7}, 0x48081) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=") r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r10, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) write$binfmt_register(r9, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) 4m53.66235665s ago: executing program 0 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="3c3e0f2397b4d84500b5f812365f00000000000000", 0xff40) 4m48.735508242s ago: executing program 0 (id=88): socket(0xa, 0x5, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000003, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x40007, @empty, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast2, 0x8}, 0x1c) 4m42.588756832s ago: executing program 32 (id=88): socket(0xa, 0x5, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000003, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x40007, @empty, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast2, 0x8}, 0x1c) 1m0.872605485s ago: executing program 2 (id=770): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x2, {0x0, 0x0, 0x0, r1, 0x0, 0x6200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x12}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1b9dbfca88d8e664}, 0x40080c0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) 56.79499985s ago: executing program 2 (id=780): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 52.749035411s ago: executing program 2 (id=794): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 50.548867274s ago: executing program 2 (id=801): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000007c0)={0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000840)=0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") chdir(&(0x7f0000000140)='./file0\x00') r5 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000e00)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r5, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r7}]) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e60d", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="180000", @ANYRES32=r2, @ANYRES32=r2], 0x18, 0x4000000}, 0x10044001) sendmsg$AUDIT_USER(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x3ed, 0x1, 0x70bd27, 0x25dfdbfb, "a83f513c401ad0684679e35a84b73150fef69a6e820cbe265057ab94207a0327d48bbc76586f611ae6e4a991430ca28ac8ba71b5d0bc768c4661e969f8741cc61b12ad2cb37d6cac6357227e60abb02a", [""]}, 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff0800450000380064000000019078ac1e0001ac1414190534907812e8fec95b0000000000fffd0d010001ac14149a00000000001863714ab99043"], 0x0) 49.345524991s ago: executing program 2 (id=808): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) r1 = fsopen(&(0x7f0000000340)='overlay\x00', 0x1) r2 = socket(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000380)='workdir', 0x0, r2) write(r0, &(0x7f0000000140)='9', 0x1) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="610000012f6e0000206d00"], 0x8) syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x60, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x81, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x20, {{0x7, 0x24, 0x6, 0x0, 0x0, "eaac"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffb, 0x2, 0x3b}, [@mbim_extended={0x8, 0x24, 0x1c, 0x101, 0x0, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x80, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x29, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x88, 0x82, 0x2}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x7f, 0xff, 0x1, 0xff, 0xa}, 0xf, &(0x7f0000000240)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xa, 0x5, 0x8001}]}, 0x2, [{0x1d, &(0x7f0000000280)=@string={0x1d, 0x3, "80eb9f845dba62b2780a6103cc94ec3153f365f9ae5cee91d2a4d7"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x406}}]}) 45.299832392s ago: executing program 2 (id=818): r0 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='proc_dir/scsi/scsi\x00', &(0x7f00000002c0)={0x100, 0xc0}, 0x18) r1 = syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000440)='proc_dir/scsi/scsi\x00', 0x1080081, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c67f46bdb26bb75d0e67fd5726f75705f69643d", @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,defcontext=sysadm_u,uid<', @ANYRESDEC=0xee01, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=sysadm_u,dont_appraise,audit,appraise_type=imasig,\x00'], 0x0, 0x0, &(0x7f00000005c0)="7d5a25cef262bef897f75d813aa40fd0239c999bc533528ecfd3d89276f7bbdf78b2636d2765d981a3da89159e1a5ebb8826c94e5f2a936263e8fb3847cf0f3d1b592f03eba34a7fa05aa06869a3e83b08bdee883e32e3dbae82b9bb569297b719e848a2e99c8edf6f253eb0a4268720b500f49c13fa1f89ab948dc43307bf686a098fc8052353752de9d3c290e5d85eabc3c28df97982b6add86d452b0b39cfc01a7eaa555b76fb45e4b6f607b685bfb004295c9f9b8fd439791962d2d33f9c02f0fdfbe16232272ea2774b74fa6cbbc88fb161b241738a94c32675f99ad1871a7c0019dd74") add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) mkdirat(r1, &(0x7f00000006c0)='proc_dir/scsi/scsi\x00', 0x1ff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000580)=0xe8) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000780)='rxrpc\x00', 0x0, &(0x7f0000000900)="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", 0x120, r3) keyctl$get_persistent(0x16, r2, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000a, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000180)={[{@noautodefrag}, {@nobarrier}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x31, 0x65, 0x36, 0x4]}}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x4}}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==") r4 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) write$char_usb(r4, &(0x7f0000001e00)="34e1abca4f65e974236282bd09919308ad", 0x11) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='-', 0x1) mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './sys/bus/i2c/devices/i2c-0/delete_device\x00'}) mount(0x0, &(0x7f0000000180)='proc_dir/scsi/scsi\x00', &(0x7f0000000200)='fuse\x00', 0x380000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x4041, 0x0) 44.388859954s ago: executing program 33 (id=818): r0 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='proc_dir/scsi/scsi\x00', &(0x7f00000002c0)={0x100, 0xc0}, 0x18) r1 = syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000440)='proc_dir/scsi/scsi\x00', 0x1080081, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c67f46bdb26bb75d0e67fd5726f75705f69643d", @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,defcontext=sysadm_u,uid<', @ANYRESDEC=0xee01, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=sysadm_u,dont_appraise,audit,appraise_type=imasig,\x00'], 0x0, 0x0, &(0x7f00000005c0)="7d5a25cef262bef897f75d813aa40fd0239c999bc533528ecfd3d89276f7bbdf78b2636d2765d981a3da89159e1a5ebb8826c94e5f2a936263e8fb3847cf0f3d1b592f03eba34a7fa05aa06869a3e83b08bdee883e32e3dbae82b9bb569297b719e848a2e99c8edf6f253eb0a4268720b500f49c13fa1f89ab948dc43307bf686a098fc8052353752de9d3c290e5d85eabc3c28df97982b6add86d452b0b39cfc01a7eaa555b76fb45e4b6f607b685bfb004295c9f9b8fd439791962d2d33f9c02f0fdfbe16232272ea2774b74fa6cbbc88fb161b241738a94c32675f99ad1871a7c0019dd74") add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) mkdirat(r1, &(0x7f00000006c0)='proc_dir/scsi/scsi\x00', 0x1ff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000580)=0xe8) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000780)='rxrpc\x00', 0x0, &(0x7f0000000900)="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", 0x120, r3) keyctl$get_persistent(0x16, r2, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000a, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000180)={[{@noautodefrag}, {@nobarrier}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x31, 0x65, 0x36, 0x4]}}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x4}}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) write$char_usb(r4, &(0x7f0000001e00)="34e1abca4f65e974236282bd09919308ad", 0x11) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='-', 0x1) mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './sys/bus/i2c/devices/i2c-0/delete_device\x00'}) mount(0x0, &(0x7f0000000180)='proc_dir/scsi/scsi\x00', &(0x7f0000000200)='fuse\x00', 0x380000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x4041, 0x0) 13.291407967s ago: executing program 1 (id=908): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x101, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x40}, 0x8) read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000280)={0x80040000000001, 0xfffffffffffffffc, 0x4, 0x2, 0xfffffff5, 0x5, "0ff800", 0x0, 0x2, 0x0, 0x4, 0xfa, 0x4, 0xff}) r6 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000240)=""/51, 0x33) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 12.795975259s ago: executing program 4 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebc, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 11.690023798s ago: executing program 4 (id=916): r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001"], 0x23c}, 0x1, 0x0, 0x0, 0xc881}, 0x0) (fail_nth: 1) 11.50050951s ago: executing program 1 (id=917): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) 11.260265484s ago: executing program 4 (id=919): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x4, 0x6, 0x8, 0x6004, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0xd}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) lseek(r3, 0x1e1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfffffffffffffcd9, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_skb, r3, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x10}, 0x94) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000001100)='0000:00:06.0', 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe9af}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x26, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @ldst={0x2, 0x0, 0xc07d4947259ea527, 0x4, 0x8, 0xffffffffffffffff, 0x10}, @generic={0x9, 0x6, 0x2, 0x89f7, 0x7}, @alu={0x7, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffff0}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @ldst={0x2, 0x0, 0x0, 0xa, 0x7, 0x20, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x80000000, 0x13, &(0x7f00000008c0)=""/19, 0x41000, 0x20, '\x00', r7, 0x18, r8, 0x8, &(0x7f0000000940)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0xb, 0x4, 0x8001}, 0x10, 0x2c81, r9, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r11, 0x3b86, &(0x7f0000000040)={0x18, r12, 0xffffffffffffffff, 0x1d}) socket$unix(0x1, 0x1, 0x0) 9.633353803s ago: executing program 1 (id=926): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0x0}) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000500)=""/31, 0x1f}, {&(0x7f0000000540)=""/26, 0x1a}], 0x3, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/187, 0xbb}, {&(0x7f00000006c0)=""/213, 0xd5}], 0x2, 0x0) 9.560660579s ago: executing program 4 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() close(0x3) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebc, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 9.559758729s ago: executing program 3 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebc, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 8.310548705s ago: executing program 4 (id=929): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xffe8}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) (fail_nth: 3) 8.104867198s ago: executing program 3 (id=931): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) r1 = accept4$inet(r0, 0x0, 0x0, 0x0) write(r1, 0x0, 0x0) 7.603375391s ago: executing program 1 (id=933): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x7, 0x1, 0x44, @mcast2, @local, 0x700, 0x20, 0x3ff, 0x1000}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r3, 0x10, 0x800, 0x18004) gettid() r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) syz_emit_ethernet(0x82, &(0x7f0000000100)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x16, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f, 0x2f, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x27, 0xab, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}, @ssrr={0x89, 0x17, 0x70, [@local, @private=0xa010100, @private=0xa010101, @local, @multicast2]}, @timestamp_prespec={0x44, 0x4, 0x47, 0x3, 0x2}]}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&'], 0x10) 7.38004502s ago: executing program 5 (id=934): r0 = socket$inet6(0xa, 0x6, 0xfff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_LOCK(r1, 0x6405) shmdt(0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}, 0x2000000}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0), 0x106, 0x8}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 6.78550221s ago: executing program 5 (id=935): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x20001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10001000, 0x7ff, 0xffffffff, 0x3d, 0xe, 0x0, 0xffe00002}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000002000000c3110000100100219500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0x0, 0x1, 0x2, 0x7ffd, 0x6, 0x1007, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 6.628324348s ago: executing program 3 (id=936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x3c, r2, 0x731, 0x80000004, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x3b, 0x2, {0xfc4f, 0x5, 0x101}}}}]}, 0x44}}, 0x810) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="2703", 0x2}], 0x1}, 0x4005) 6.488139213s ago: executing program 1 (id=937): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) 5.41918118s ago: executing program 6 (id=938): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x4, 0x6, 0x8, 0x6004, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0xd}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) lseek(r3, 0x1e1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfffffffffffffcd9, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_skb, r3, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x10}, 0x94) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000001100)='0000:00:06.0', 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe9af}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x26, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @ldst={0x2, 0x0, 0xc07d4947259ea527, 0x4, 0x8, 0xffffffffffffffff, 0x10}, @generic={0x9, 0x6, 0x2, 0x89f7, 0x7}, @alu={0x7, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffff0}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @ldst={0x2, 0x0, 0x0, 0xa, 0x7, 0x20, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x80000000, 0x13, &(0x7f00000008c0)=""/19, 0x41000, 0x20, '\x00', r7, 0x18, r8, 0x8, &(0x7f0000000940)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0xb, 0x4, 0x8001}, 0x10, 0x2c81, r9, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r11, 0x3b86, &(0x7f0000000040)={0x18, r12, 0xffffffffffffffff, 0x1d}) socket$unix(0x1, 0x1, 0x0) 4.920233781s ago: executing program 5 (id=939): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(r1, &(0x7f0000000140)="0966f7a150c92b144654c1dfe12fb5200f28bbda1a99768760deb4ea37f58f9d98cf545dcde3a062170aefacb95c688c0691", 0x32) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x112) ioctl$FS_IOC_GETFSMAP(r2, 0xc0105872, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r5, 0x21840, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r8, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRESHEX=r8, @ANYBLOB="54001280110001006272696467655f736c617665000000003c00058008002200", @ANYBLOB="08000300400000000500200001000000050001000300000008002500"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r9 = socket$inet(0x2, 0x3, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0xfffffffe, {0x2, 0x18, 0x80, 0x0, r12}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r13, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x100, @local}, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x1f}) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) 4.564530704s ago: executing program 6 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() close(0x3) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebc, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 4.195270748s ago: executing program 3 (id=941): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x54, 0x1, 0x80}]}) 3.619391948s ago: executing program 5 (id=942): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') r1 = accept4$inet(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000600)="00000081fe534d424000000000000000000001000100000000000000000000000000000000000000000000000000000000000000000000004100010000030000000000000000000000000000000000000000000000000100000001000000010000000000", 0x64) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) 3.539854887s ago: executing program 6 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebc, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 3.490369079s ago: executing program 3 (id=944): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0x0}) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000500)=""/31, 0x1f}, {&(0x7f0000000540)=""/26, 0x1a}], 0x3, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/187, 0xbb}, {&(0x7f00000006c0)=""/213, 0xd5}], 0x2, 0x0) 2.469903327s ago: executing program 1 (id=945): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000), 0x4, 0x9828, &(0x7f0000009b80)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) syz_fuse_handle_req(r0, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002a00)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x9, 0x1, 0x0, {0xffffffffffffffff, 0x3, 0x3ff, 0x80000001, 0x0, 0x8001ffffffffffe, 0x9e9, 0x0, 0x3, 0x8000, 0x3, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000380011032a00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x4) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000380011032a00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x4) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './bus/file0'}, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r4, &(0x7f0000000fc0)=""/224, 0xe0) (async) getdents64(r4, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xfffffffb) 2.255859725s ago: executing program 5 (id=946): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) lstat(&(0x7f0000002080)='./file0\x00', &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x20012, &(0x7f0000002200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',gr\x00\x00\x00\x00i', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,smackfstransmute=group_id,subj_type=,\x00'], 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0xcc89, 0x80, 0x1024002, 0x1e7}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000800)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r6, r7) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2008, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r10 = socket$kcm(0x21, 0x7, 0x2) sendmsg$inet(r10, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1c0000"], 0x30}, 0x20040880) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x101a00, 0x0) writev(r11, &(0x7f0000000380)=[{&(0x7f0000000740)='X', 0x1}], 0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x2000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) r12 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r13, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x6, 0x3, 0x4, 0x0, 0x2, '&p'}, 0xb, 0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r12, 0xc0045009, &(0x7f0000000040)=0x1) 2.106413767s ago: executing program 6 (id=947): r0 = socket$inet6(0xa, 0x6, 0xfff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_LOCK(r1, 0x6405) shmdt(0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}, 0x2000000}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0), 0x106, 0x8}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 931.128005ms ago: executing program 5 (id=948): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) r1 = accept4$inet(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000600), 0x0) 761.53709ms ago: executing program 3 (id=949): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) move_pages(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000540), &(0x7f0000001680), 0x0) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) flock(r2, 0x1) flock(r0, 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000001580)=[{0xfff, 0x0, 0x184}], 0x1, 0x0, 0x0, 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r4, &(0x7f0000000080)="549529247cfbd4ddfe666d86", 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0acd", 0x3}], 0x1}}], 0x1, 0x4000000) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000000c0)=0x1, 0x4) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000136000/0x4000)=nil) 700.808428ms ago: executing program 6 (id=950): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) personality(0xeaffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8, 0xfffffffa, 0x1}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r3, 0x7fff}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 598.909723ms ago: executing program 4 (id=951): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x4, 0x6, 0x8, 0x6004, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0xd}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) lseek(r3, 0x1e1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfffffffffffffcd9, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_skb, r3, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x10}, 0x94) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000001100)='0000:00:06.0', 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe9af}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x26, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @ldst={0x2, 0x0, 0xc07d4947259ea527, 0x4, 0x8, 0xffffffffffffffff, 0x10}, @generic={0x9, 0x6, 0x2, 0x89f7, 0x7}, @alu={0x7, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffff0}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @ldst={0x2, 0x0, 0x0, 0xa, 0x7, 0x20, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x80000000, 0x13, &(0x7f00000008c0)=""/19, 0x41000, 0x20, '\x00', r7, 0x18, r8, 0x8, &(0x7f0000000940)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0xb, 0x4, 0x8001}, 0x10, 0x2c81, r9, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r11, 0x3b86, &(0x7f0000000040)={0x18, r12, 0xffffffffffffffff, 0x1d}) socket$unix(0x1, 0x1, 0x0) 0s ago: executing program 6 (id=952): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0xa3, 0xd, 0x4, 0xfe, 0xe0, 0xfeff, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) read(r1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3888009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x8084, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x7) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x200001c, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', &(0x7f0000000280), 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d72646d612c702f72743d3078c556f98451817c8530303030346532322c72713d3078303030303030303030303030303166662c74696d656f75743d3078303030303030303030303030303366662c69676e6f726571762c00"]) kernel console output (not intermixed with test programs): loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.201878][ T8138] loop5: detected capacity change from 0 to 1024 [ 296.361575][ T8147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.538'. [ 296.521808][ T8138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 296.549072][ T8138] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.287485][ T8154] netlink: 52 bytes leftover after parsing attributes in process `syz.5.533'. [ 297.853011][ T8165] loop6: detected capacity change from 0 to 512 [ 297.864513][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 298.475228][ T8172] fuse: Bad value for 'fd' [ 298.509057][ T8165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.561324][ T8165] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.758508][ T8172] netlink: 'syz.4.544': attribute type 1 has an invalid length. [ 298.849924][ T6252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.937545][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 299.968971][ T8184] IPv6: sit1: Disabled Multicast RS [ 300.068668][ T5644] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 300.251314][ T8203] loop2: detected capacity change from 0 to 4096 [ 300.334924][ T8203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 300.518110][ T8197] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 300.590738][ T8203] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 300.950400][ T8220] loop5: detected capacity change from 0 to 4096 [ 301.011878][ T8220] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 301.256814][ T8220] ntfs3(loop5): Failed to load root (-22). [ 301.770717][ T8218] loop1: detected capacity change from 0 to 32768 [ 301.835539][ T8218] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.551 (8218) [ 302.195002][ T8218] BTRFS info (device loop1 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 302.233950][ T8218] BTRFS info (device loop1 state S): using crc32c checksum algorithm [ 302.264268][ T8218] BTRFS error (device loop1 state S): nologreplay must be used with ro mount option [ 302.337510][ T8238] netlink: 16 bytes leftover after parsing attributes in process `syz.6.558'. [ 302.343562][ T8218] BTRFS error (device loop1 state S): open_ctree failed: -22 [ 302.472332][ T8241] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 302.813486][ T8243] loop5: detected capacity change from 0 to 512 [ 302.916611][ T8243] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 302.926620][ T8243] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 303.015081][ T8243] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.559: Invalid inode table block 1 in block_group 0 [ 303.028205][ T8243] loop5: lost filesystem error report for type 5 error -117 [ 303.032558][ C0] EXT4-fs (loop5): initial error at time 1785494428: __ext4_get_inode_loc:4886 [ 303.048956][ C0] EXT4-fs (loop5): last error at time 1785494428: __ext4_get_inode_loc:4886 [ 303.080299][ T8243] EXT4-fs (loop5): Remounting filesystem read-only [ 303.087798][ T8243] EXT4-fs (loop5): get root inode failed [ 303.093725][ T8243] EXT4-fs (loop5): mount failed [ 303.336884][ T8247] random: crng reseeded on system resumption [ 304.213524][ T8256] loop1: detected capacity change from 0 to 4096 [ 304.226284][ T8256] EXT4-fs: Ignoring removed mblk_io_submit option [ 304.257709][ T8256] EXT4-fs (loop1): Test dummy encryption mode enabled [ 304.276726][ T8256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.404560][ T8258] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 304.541325][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.069174][ T8235] geneve2: entered promiscuous mode [ 306.075100][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.239179][ T8268] loop3: detected capacity change from 0 to 512 [ 306.324764][ T8268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.389526][ T8268] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.441693][ T8276] loop6: detected capacity change from 0 to 512 [ 306.491792][ T8276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.530950][ T8276] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.642159][ T5893] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 306.668972][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.813474][ T6252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.823944][ T5893] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 306.859106][ T5893] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 306.893013][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.080662][ T8294] CIFS mount error: No usable UNC path provided in device string! [ 307.080662][ T8294] [ 307.095682][ T8292] netlink: 'syz.2.573': attribute type 4 has an invalid length. [ 307.108649][ T8294] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 307.129436][ T8292] netlink: 152 bytes leftover after parsing attributes in process `syz.2.573'. [ 307.160865][ T8292] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 307.199521][ T8274] loop4: detected capacity change from 0 to 256 [ 307.394855][ T8274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.588611][ T8274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.654014][ T6024] IPVS: starting estimator thread 0... [ 307.965032][ T8302] IPVS: using max 24 ests per chain, 57600 per kthread [ 308.609101][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.576'. [ 308.661648][ T8310] loop6: detected capacity change from 0 to 128 [ 308.675807][ T8310] EXT4-fs (loop6): Test dummy encryption mode enabled [ 308.715997][ T5893] cxacru 5-1:1.0: send of cm 0x90 failed (-71) [ 308.724894][ T5893] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 308.728306][ T8310] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.732402][ T5893] cxacru 5-1:1.0: probe with driver cxacru failed with error -22 [ 308.776555][ T5893] usb 5-1: USB disconnect, device number 10 [ 308.857289][ T8310] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 309.122437][ T8310] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 309.154756][ T8312] loop5: detected capacity change from 0 to 4096 [ 309.177519][ T8315] IPv6: sit1: Disabled Multicast RS [ 309.365225][ T8312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.478152][ T8307] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 309.608830][ T8307] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 309.698400][ T6252] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.985022][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.937917][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 312.572202][ T8377] FAULT_INJECTION: forcing a failure. [ 312.572202][ T8377] name fail_futex, interval 1, probability 0, space 0, times 1 [ 312.715668][ T8377] CPU: 0 UID: 0 PID: 8377 Comm: syz.6.594 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.715709][ T8377] Tainted: [L]=SOFTLOCKUP [ 312.715718][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 312.715733][ T8377] Call Trace: [ 312.715743][ T8377] [ 312.715753][ T8377] dump_stack_lvl+0xe8/0x150 [ 312.715798][ T8377] should_fail_ex+0x40c/0x560 [ 312.715837][ T8377] get_futex_key+0x8e1/0x1580 [ 312.715885][ T8377] ? perf_lock_task_context+0xfe/0x850 [ 312.715929][ T8377] ? __pfx_get_futex_key+0x10/0x10 [ 312.715963][ T8377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.715992][ T8377] ? __lock_acquire+0x683/0x2cf0 [ 312.716041][ T8377] futex_wake+0x119/0x5f0 [ 312.716074][ T8377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.716106][ T8377] ? __pfx_futex_wake+0x10/0x10 [ 312.716147][ T8377] ? exit_mm_release+0x1a/0x30 [ 312.716182][ T8377] do_futex+0x458/0x4e0 [ 312.716213][ T8377] ? __pfx_do_futex+0x10/0x10 [ 312.716244][ T8377] ? __might_fault+0xaf/0x130 [ 312.716279][ T8377] mm_release+0x101/0x290 [ 312.716312][ T8377] exit_mm+0x4d/0x2d0 [ 312.716354][ T8377] do_exit+0x6cd/0x2360 [ 312.716394][ T8377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.716430][ T8377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.716461][ T8377] ? __pfx_do_exit+0x10/0x10 [ 312.716514][ T8377] ? do_raw_spin_lock+0x12b/0x2f0 [ 312.716545][ T8377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.716583][ T8377] do_group_exit+0x22d/0x2f0 [ 312.716606][ T8377] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.716644][ T8377] get_signal+0x121b/0x12c0 [ 312.716698][ T8377] arch_do_signal_or_restart+0xbb/0x860 [ 312.716736][ T8377] ? __pfx___fput_deferred+0x10/0x10 [ 312.716774][ T8377] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 312.716818][ T8377] ? ksys_write+0x242/0x270 [ 312.716855][ T8377] exit_to_user_mode_loop+0x104/0x730 [ 312.716890][ T8377] ? rcu_is_watching+0x15/0xb0 [ 312.716915][ T8377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.716943][ T8377] do_syscall_64+0x353/0x580 [ 312.716974][ T8377] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.717011][ T8377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.717037][ T8377] RIP: 0033:0x7f8adad5e84e [ 312.717059][ T8377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.717081][ T8377] RSP: 002b:00007f8adbb97fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 312.717107][ T8377] RAX: 0000000000000001 RBX: 00007f8adbb986c0 RCX: 00007f8adad5e84e [ 312.717124][ T8377] RDX: 0000000000000001 RSI: 00007f8adbb98090 RDI: 0000000000000004 [ 312.717140][ T8377] RBP: 00007f8adbb98090 R08: 0000000000000000 R09: 0000000000000000 [ 312.717156][ T8377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 312.717172][ T8377] R13: 00007f8adb026038 R14: 00007f8adb025fa0 R15: 00007ffea3955fb8 [ 312.717211][ T8377] [ 313.458311][ T8414] loop4: detected capacity change from 0 to 128 [ 313.526565][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.600'. [ 313.537710][ T8414] EXT4-fs (loop4): Test dummy encryption mode enabled [ 313.759888][ T8414] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 313.809127][ T8414] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 314.154239][ T8428] netlink: 392 bytes leftover after parsing attributes in process `syz.2.603'. [ 314.251197][ T8422] loop6: detected capacity change from 0 to 4096 [ 314.440788][ T5628] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.505855][ T8422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.747643][ T8416] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 315.125667][ T8416] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 315.540722][ T8432] loop3: detected capacity change from 0 to 4096 [ 315.580204][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 315.622556][ T8432] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 315.786560][ T8447] loop2: detected capacity change from 0 to 1024 [ 315.809043][ T6252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.874545][ T8447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.166427][ T8454] CIFS: Attempting to mount //127.0.0.1/share [ 316.230261][ T8432] ntfs3(loop3): Failed to load root (-22). [ 316.366720][ T8454] CIFS: VFS: Error connecting to socket. Aborting operation. [ 316.396527][ T8454] CIFS: VFS: cifs_mount failed w/return code = -111 [ 316.479538][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.486463][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.511800][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.475024][ T8483] loop6: detected capacity change from 0 to 128 [ 318.582423][ T8483] EXT4-fs (loop6): Test dummy encryption mode enabled [ 318.647870][ T8483] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.676019][ T8490] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 318.697922][ T8490] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 318.705028][ T8490] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 318.711905][ T8490] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 318.718832][ T8490] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 318.725718][ T8490] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 318.732611][ T8490] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 318.739534][ T8490] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 318.746646][ T8490] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 318.753678][ T8490] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 318.785531][ T8483] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 318.844050][ T5760] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 318.862957][ T8452] loop4: detected capacity change from 0 to 32768 [ 319.027646][ T5760] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.042926][ T5760] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 319.069285][ T5760] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 319.094507][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.102805][ T29] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 319.313716][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 319.340977][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.399345][ T8485] loop2: detected capacity change from 0 to 256 [ 319.402337][ T8498] loop1: detected capacity change from 0 to 256 [ 319.425388][ T29] usb 6-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 319.438400][ T8498] exfat: Unknown parameter '' [ 319.465181][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.512246][ T29] usb 6-1: Product: syz [ 319.542928][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.545754][ T29] usb 6-1: Manufacturer: syz [ 319.600024][ T29] usb 6-1: SerialNumber: syz [ 319.620021][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.679050][ T29] usb 6-1: config 0 descriptor?? [ 319.774138][ T29] ttusb_dec_send_command: command bulk message failed: error -22 [ 319.816613][ T5760] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 319.833191][ T29] ttusb-dec 6-1:0.0: probe with driver ttusb-dec failed with error -22 [ 319.848325][ T5760] cxacru 3-1:1.0: probe with driver cxacru failed with error -22 [ 320.152754][ T5760] usb 6-1: USB disconnect, device number 8 [ 320.365148][ T6252] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.593894][ T8507] loop5: detected capacity change from 0 to 256 [ 320.609042][ T8507] exfat: Deprecated parameter 'utf8' [ 320.614889][ T8507] exfat: Deprecated parameter 'utf8' [ 321.221623][ T8507] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 324.039991][ T5776] usb 3-1: USB disconnect, device number 16 [ 324.845763][ T8534] overlayfs: missing 'lowerdir' [ 326.030040][ T8540] loop1: detected capacity change from 0 to 8 [ 326.185460][ T8540] squashfs: Unknown parameter 'x쑿N*Aƿ]-n.ɭh FPE{@ (b1'5L|- 3 f̜]gp~~ssfΜك4s6jb' [ 326.780564][ T8549] net_ratelimit: 1974 callbacks suppressed [ 326.780600][ T8549] ip_tables: iptables: counters copy to user failed while replacing table [ 326.914729][ T5776] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 326.955894][ T8553] ip6t_srh: unknown srh match flags FF3F [ 327.019634][ T8543] bond2: entered promiscuous mode [ 327.105389][ T8543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.169044][ T8554] loop2: detected capacity change from 0 to 128 [ 327.195366][ T8555] loop1: detected capacity change from 0 to 256 [ 327.204274][ T8555] exfat: Deprecated parameter 'utf8' [ 327.209643][ T8555] exfat: Deprecated parameter 'utf8' [ 327.279166][ T8555] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 327.339535][ T5776] usb 6-1: Using ep0 maxpacket: 8 [ 327.384823][ T5776] usb 6-1: unable to get BOS descriptor or descriptor too short [ 327.403437][ T5776] usb 6-1: config 6 has an invalid interface number: 54 but max is 0 [ 327.426218][ T5776] usb 6-1: config 6 has no interface number 0 [ 327.443946][ T5776] usb 6-1: config 6 interface 54 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 327.474410][ T8554] EXT4-fs (loop2): Test dummy encryption mode enabled [ 327.492888][ T5776] usb 6-1: config 6 interface 54 altsetting 5 bulk endpoint 0xB has invalid maxpacket 1024 [ 327.538941][ T5776] usb 6-1: config 6 interface 54 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 327.585846][ T5776] usb 6-1: config 6 interface 54 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 327.625823][ T5776] usb 6-1: config 6 interface 54 has no altsetting 0 [ 327.647471][ T5776] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=5a.74 [ 327.663468][ T8554] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.685906][ T5776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.697980][ T8554] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 327.704078][ T5776] usb 6-1: Product: syz [ 327.730382][ T5776] usb 6-1: Manufacturer: syz [ 327.743172][ T5776] usb 6-1: SerialNumber: syz [ 327.796469][ T8545] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 327.922157][ T5893] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 328.105335][ T5893] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.177501][ T5893] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 328.190985][ T5776] comedi comedi5: Endpoint has wrong direction [ 328.221821][ T5893] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 80, setting to 64 [ 328.236621][ T5776] dt9812 6-1:6.54: driver 'dt9812' failed to auto-configure device. [ 328.262266][ T5893] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.291796][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.321511][ T5893] usb 5-1: Product: syz [ 328.346000][ T5776] usb 6-1: USB disconnect, device number 9 [ 328.352111][ T5893] usb 5-1: Manufacturer: syz [ 328.372305][ T5893] usb 5-1: SerialNumber: syz [ 328.470742][ T5893] cdc_ncm 5-1:1.0: skipping garbage [ 328.520209][ T5620] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 328.696818][ T8562] loop4: detected capacity change from 0 to 256 [ 328.728955][ T8574] CIFS mount error: No usable UNC path provided in device string! [ 328.728955][ T8574] [ 328.773115][ T8574] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 328.804830][ T8562] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 328.845212][ T8562] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 329.485109][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.510469][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.125505][ T8562] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 330.168617][ T8562] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 330.353672][ T8595] loop2: detected capacity change from 0 to 2048 [ 330.438500][ T8598] loop5: detected capacity change from 0 to 512 [ 330.438751][ T5893] cdc_ncm 5-1:1.0: bind() failure [ 330.505513][ T8598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.542845][ T5893] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 330.625607][ T8598] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.708228][ T8595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.749370][ T8608] Invalid ELF header magic: != ELF [ 330.772472][ T5893] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 330.786669][ T5893] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 330.803815][ T5893] usb 5-1: USB disconnect, device number 11 [ 330.905842][ T8611] overlayfs: missing 'lowerdir' [ 331.488724][ T8595] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.745853][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.868049][ T8616] ip6t_srh: unknown srh match flags FF3F [ 331.998759][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.256653][ T8616] loop6: detected capacity change from 0 to 256 [ 333.327250][ T8616] exfat: Deprecated parameter 'utf8' [ 333.435325][ T8616] exfat: Deprecated parameter 'utf8' [ 333.820867][ T8636] loop3: detected capacity change from 0 to 32768 [ 334.348331][ T8636] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 336.196727][ T8616] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 336.391329][ T5619] ocfs2: Unmounting device (7,3) on (node local) [ 336.617211][ T8647] CIFS mount error: No usable UNC path provided in device string! [ 336.617211][ T8647] [ 336.665476][ T8647] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 336.772401][ T186] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 336.997345][ T186] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 337.078204][ T186] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 337.170783][ T186] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 337.273531][ T186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.352435][ T6024] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 337.432114][ T186] usb 5-1: Product: syz [ 337.438279][ T186] usb 5-1: Manufacturer: syz [ 337.446993][ T186] usb 5-1: SerialNumber: syz [ 337.480120][ T186] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 337.535289][ T186] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 337.553784][ T6024] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.597033][ T6024] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 337.622381][ T186] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 337.662424][ T6024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.789811][ T6024] spcp8x5 2-1:1.0: required endpoints missing [ 337.805711][ T8664] loop3: detected capacity change from 0 to 512 [ 337.840552][ T8664] EXT4-fs: Ignoring removed bh option [ 337.852740][ T5776] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 337.859794][ T8664] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.892857][ T8664] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 337.933754][ T8664] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 337.959691][ T8664] EXT4-fs (loop3): orphan cleanup on readonly fs [ 337.978294][ T8664] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 337.996641][ T8664] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 338.012553][ T5776] usb 6-1: device descriptor read/64, error -71 [ 338.033658][ T8664] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.670: Failed to acquire dquot type 1 [ 338.095429][ T8664] loop3: lost filesystem error report for type 5 error -5 [ 338.096489][ T8664] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.670: Invalid block bitmap block 0 in block_group 0 [ 338.104091][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 338.104198][ C0] EXT4-fs (loop3): last error at time 1785494463: ext4_acquire_dquot:7041 [ 338.138425][ T8664] loop3: lost filesystem error report for type 5 error -117 [ 338.164656][ T8664] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.670: Invalid block bitmap block 0 in block_group 0 [ 338.230177][ T8664] loop3: lost filesystem error report for type 5 error -117 [ 338.230926][ T8664] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.670: Invalid block bitmap block 0 in block_group 0 [ 338.252528][ T5776] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 338.292143][ T8664] loop3: lost filesystem error report for type 5 error -117 [ 338.295146][ T8664] Quota error (device loop3): write_blk: dquota write failed [ 338.334260][ T8664] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 338.371149][ T8664] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.670: Failed to acquire dquot type 1 [ 338.414983][ T8664] loop3: lost filesystem error report for type 5 error -28 [ 338.430053][ T5776] usb 6-1: device descriptor read/64, error -71 [ 338.458510][ T8664] Quota error (device loop3): write_blk: dquota write failed [ 338.471622][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 338.479119][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 338.486617][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 338.494126][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 338.501642][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 338.509091][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 338.516565][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 338.522651][ T8651] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -71 [ 338.524463][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 338.524634][ T186] usb 5-1: USB disconnect, device number 12 [ 338.524713][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 338.524737][ C0] usb 5-1: ti_interrupt_callback - resubmit interrupt urb failed, -19 [ 338.554943][ T8664] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 338.572973][ T5776] usb usb6-port1: attempt power cycle [ 338.585973][ T8664] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.670: Failed to acquire dquot type 1 [ 338.640376][ T8664] loop3: lost filesystem error report for type 5 error -28 [ 338.673936][ T5638] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 338.701216][ T10] usb 2-1: USB disconnect, device number 9 [ 338.727574][ T186] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 338.750026][ T8664] EXT4-fs (loop3): 1 orphan inode deleted [ 338.914378][ T5638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.941439][ T5638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.979907][ T5638] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 339.001269][ T8664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.037768][ T5638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.045239][ T5776] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 339.122989][ T8680] overlayfs: missing 'lowerdir' [ 339.604486][ T186] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 339.617699][ T5638] usb 3-1: config 0 descriptor?? [ 339.696932][ T186] ti_usb_3410_5052 5-1:2.0: device disconnected [ 339.776926][ T5776] usb 6-1: device descriptor read/8, error -71 [ 339.873723][ T5747] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 339.913547][ T8684] netlink: 60 bytes leftover after parsing attributes in process `syz.6.675'. [ 340.022160][ T5776] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 340.062987][ T5776] usb 6-1: device descriptor read/8, error -71 [ 340.074351][ T5747] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.100691][ T5747] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.134338][ T5747] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 340.145786][ T8672] netlink: 'syz.2.671': attribute type 2 has an invalid length. [ 340.157207][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.176345][ T8688] loop1: detected capacity change from 0 to 256 [ 340.193004][ T5747] usb 4-1: config 0 descriptor?? [ 340.193458][ T5776] usb usb6-port1: unable to enumerate USB device [ 340.204340][ T5638] pyra 0003:1E7D:2CF6.0001: item 0 4 0 11 parsing failed [ 340.261305][ T5638] pyra 0003:1E7D:2CF6.0001: parse failed [ 340.302246][ T5638] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -22 [ 340.395486][ T5638] usb 3-1: USB disconnect, device number 17 [ 340.677208][ T5638] usb 4-1: USB disconnect, device number 12 [ 341.720634][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.991048][ T8708] loop6: detected capacity change from 0 to 64 [ 342.185997][ T8708] hfs: Unknown parameter '' [ 342.600592][ T8715] FAULT_INJECTION: forcing a failure. [ 342.600592][ T8715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.780940][ T8715] CPU: 0 UID: 0 PID: 8715 Comm: syz.2.683 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.780986][ T8715] Tainted: [L]=SOFTLOCKUP [ 342.780995][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 342.781010][ T8715] Call Trace: [ 342.781020][ T8715] [ 342.781031][ T8715] dump_stack_lvl+0xe8/0x150 [ 342.781079][ T8715] should_fail_ex+0x40c/0x560 [ 342.781120][ T8715] _copy_from_user+0x2d/0xb0 [ 342.781149][ T8715] do_sys_poll+0x258/0x1110 [ 342.781195][ T8715] ? __lock_acquire+0x683/0x2cf0 [ 342.781241][ T8715] ? __pfx_do_sys_poll+0x10/0x10 [ 342.781275][ T8715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.781387][ T8715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.781419][ T8715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.781455][ T8715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.781526][ T8715] ? __pfx_timespec64_add_safe+0x10/0x10 [ 342.781580][ T8715] __x64_sys_poll+0x190/0x360 [ 342.781616][ T8715] ? __pfx___x64_sys_poll+0x10/0x10 [ 342.781658][ T8715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.781686][ T8715] do_syscall_64+0x174/0x580 [ 342.781718][ T8715] ? trace_irq_disable+0x3b/0x140 [ 342.781760][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.781786][ T8715] RIP: 0033:0x7f68a999e019 [ 342.781809][ T8715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.781830][ T8715] RSP: 002b:00007f68aa7ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 342.781856][ T8715] RAX: ffffffffffffffda RBX: 00007f68a9c25fa0 RCX: 00007f68a999e019 [ 342.781875][ T8715] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 342.781892][ T8715] RBP: 00007f68aa7ca090 R08: 0000000000000000 R09: 0000000000000000 [ 342.781908][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.781924][ T8715] R13: 00007f68a9c26038 R14: 00007f68a9c25fa0 R15: 00007ffe496bfb58 [ 342.781962][ T8715] [ 343.352121][ T5776] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 343.425225][ T8734] FAULT_INJECTION: forcing a failure. [ 343.425225][ T8734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.458703][ T8734] CPU: 0 UID: 0 PID: 8734 Comm: syz.3.689 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.458745][ T8734] Tainted: [L]=SOFTLOCKUP [ 343.458754][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 343.458770][ T8734] Call Trace: [ 343.458779][ T8734] [ 343.458789][ T8734] dump_stack_lvl+0xe8/0x150 [ 343.458832][ T8734] should_fail_ex+0x40c/0x560 [ 343.458872][ T8734] _copy_from_user+0x2d/0xb0 [ 343.458898][ T8734] ___sys_sendmsg+0x1c6/0x360 [ 343.458929][ T8734] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.458959][ T8734] ? __lock_acquire+0x683/0x2cf0 [ 343.459013][ T8734] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.459040][ T8734] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.459076][ T8734] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.459105][ T8734] ? kstrtouint+0x6e/0xe0 [ 343.459172][ T8734] ? __fget_files+0x2a/0x420 [ 343.459208][ T8734] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.459237][ T8734] ? __fget_files+0x3a2/0x420 [ 343.459285][ T8734] __sys_sendmmsg+0x273/0x4d0 [ 343.459322][ T8734] ? __pfx___sys_sendmmsg+0x10/0x10 [ 343.459364][ T8734] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 343.459414][ T8734] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.459444][ T8734] ? ksys_write+0x242/0x270 [ 343.459473][ T8734] ? __pfx_ksys_write+0x10/0x10 [ 343.459505][ T8734] __x64_sys_sendmmsg+0xa0/0xc0 [ 343.459536][ T8734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.459563][ T8734] do_syscall_64+0x174/0x580 [ 343.459594][ T8734] ? trace_irq_disable+0x3b/0x140 [ 343.459635][ T8734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.459661][ T8734] RIP: 0033:0x7fafddd9e019 [ 343.459695][ T8734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.459720][ T8734] RSP: 002b:00007fafdeb96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 343.459746][ T8734] RAX: ffffffffffffffda RBX: 00007fafde025fa0 RCX: 00007fafddd9e019 [ 343.459765][ T8734] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000003 [ 343.459781][ T8734] RBP: 00007fafdeb96090 R08: 0000000000000000 R09: 0000000000000000 [ 343.459797][ T8734] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 343.459813][ T8734] R13: 00007fafde026038 R14: 00007fafde025fa0 R15: 00007ffd1465bbb8 [ 343.459853][ T8734] [ 343.693929][ T5776] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.707093][ T5776] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 343.766094][ T5776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.837292][ T5776] spcp8x5 6-1:1.0: required endpoints missing [ 344.030358][ T8738] loop6: detected capacity change from 0 to 256 [ 344.047851][ T5776] usb 6-1: USB disconnect, device number 14 [ 344.431522][ T8742] loop2: detected capacity change from 0 to 256 [ 344.447197][ T8742] exfat: Deprecated parameter 'utf8' [ 344.496276][ T8742] exfat: Bad value for 'gid' [ 344.520471][ T8742] exfat: Bad value for 'gid' [ 345.265857][ T8755] loop5: detected capacity change from 0 to 128 [ 345.406393][ T8741] [U] ^C [ 346.513472][ T8755] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 346.520112][ T8759] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 346.552454][ T8759] CIFS: Attempting to mount //127.0.0.1/share [ 346.553221][ T8755] hpfs: filesystem error: improperly stopped [ 346.571852][ T8755] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 346.592440][ T8755] hpfs: You really don't want any checks? You are crazy... [ 346.600563][ T8761] loop1: detected capacity change from 0 to 256 [ 346.601946][ T8761] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 346.636852][ T8755] hpfs: Code page index out of array [ 346.642236][ T8755] hpfs: code page support is disabled [ 346.657257][ T8755] hpfs: hpfs_map_4sectors(): unaligned read [ 346.667682][ T8755] hpfs: hpfs_map_4sectors(): unaligned read [ 346.675814][ T8755] hpfs: filesystem error: unable to find root dir [ 346.694011][ T8755] hpfs: hpfs_map_4sectors(): unaligned read [ 346.734463][ T8762] CIFS: VFS: Invalid response size 0 for command 0 [ 346.741536][ T8759] CIFS: VFS: cifs_mount failed w/return code = -5 [ 346.803083][ T8755] FAULT_INJECTION: forcing a failure. [ 346.803083][ T8755] name failslab, interval 1, probability 0, space 0, times 0 [ 346.822290][ T8755] CPU: 0 UID: 0 PID: 8755 Comm: syz.5.697 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.822332][ T8755] Tainted: [L]=SOFTLOCKUP [ 346.822340][ T8755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 346.822355][ T8755] Call Trace: [ 346.822365][ T8755] [ 346.822375][ T8755] dump_stack_lvl+0xe8/0x150 [ 346.822422][ T8755] should_fail_ex+0x40c/0x560 [ 346.822465][ T8755] should_failslab+0xa8/0x100 [ 346.822515][ T8755] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 346.822551][ T8755] ? alloc_empty_file+0x5b/0x1d0 [ 346.822585][ T8755] ? alloc_empty_file+0x5b/0x1d0 [ 346.822620][ T8755] ? stack_trace_save+0xa9/0x100 [ 346.822662][ T8755] alloc_empty_file+0x5b/0x1d0 [ 346.822694][ T8755] path_openat+0x8f/0x3830 [ 346.822722][ T8755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.822751][ T8755] ? kasan_save_track+0x4f/0x80 [ 346.822781][ T8755] ? kasan_save_track+0x3e/0x80 [ 346.822811][ T8755] ? __kasan_slab_alloc+0x6c/0x80 [ 346.822843][ T8755] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 346.822870][ T8755] ? do_getname+0x2e/0x250 [ 346.822897][ T8755] ? do_sys_openat2+0xcc/0x200 [ 346.822927][ T8755] ? __x64_sys_open+0x11e/0x150 [ 346.822957][ T8755] ? do_syscall_64+0x174/0x580 [ 346.822986][ T8755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.823017][ T8755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.823043][ T8755] ? __lock_acquire+0x683/0x2cf0 [ 346.823087][ T8755] do_file_open+0x23e/0x4a0 [ 346.823115][ T8755] ? __pfx_do_file_open+0x10/0x10 [ 346.823159][ T8755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.823185][ T8755] ? _raw_spin_unlock+0x28/0x50 [ 346.823207][ T8755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 346.823234][ T8755] ? alloc_fd+0x651/0x6c0 [ 346.823275][ T8755] do_sys_openat2+0x115/0x200 [ 346.823310][ T8755] ? __pfx_do_sys_openat2+0x10/0x10 [ 346.823343][ T8755] ? ksys_write+0x242/0x270 [ 346.823367][ T8755] ? __pfx_ksys_write+0x10/0x10 [ 346.823391][ T8755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.823416][ T8755] __x64_sys_open+0x11e/0x150 [ 346.823452][ T8755] do_syscall_64+0x174/0x580 [ 346.823479][ T8755] ? trace_irq_disable+0x3b/0x140 [ 346.823521][ T8755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.823545][ T8755] RIP: 0033:0x7f268639e019 [ 346.823569][ T8755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.823589][ T8755] RSP: 002b:00007f268732e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 346.823613][ T8755] RAX: ffffffffffffffda RBX: 00007f2686625fa0 RCX: 00007f268639e019 [ 346.823630][ T8755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 346.823644][ T8755] RBP: 00007f268732e090 R08: 0000000000000000 R09: 0000000000000000 [ 346.823661][ T8755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.823674][ T8755] R13: 00007f2686626038 R14: 00007f2686625fa0 R15: 00007ffd1d848c78 [ 346.823709][ T8755] [ 347.386371][ T8761] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 347.534034][ T8776] MTRR 1 not used [ 347.645367][ T8780] loop5: detected capacity change from 0 to 256 [ 347.826009][ T8784] loop6: detected capacity change from 0 to 128 [ 347.942515][ T8784] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 347.996646][ T8784] hpfs: filesystem error: improperly stopped [ 348.015408][ T8788] loop5: detected capacity change from 0 to 8 [ 348.034870][ T8784] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 348.072367][ T8790] loop2: detected capacity change from 0 to 512 [ 348.101647][ T8784] hpfs: You really don't want any checks? You are crazy... [ 348.114527][ T8795] loop1: detected capacity change from 0 to 128 [ 348.126947][ T8790] EXT4-fs: inline encryption not supported [ 348.145260][ T8784] hpfs: Code page index out of array [ 348.158690][ T8788] SQUASHFS error: zlib decompression failed, data probably corrupt [ 348.171182][ T8790] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 348.175359][ T8795] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 348.185329][ T8784] hpfs: code page support is disabled [ 348.193844][ T8788] SQUASHFS error: Failed to read block 0x9b: -5 [ 348.213066][ T8784] hpfs: hpfs_map_4sectors(): unaligned read [ 348.218624][ T8795] ; already mounted read-only [ 348.240974][ T8795] hpfs: filesystem error: improperly stopped [ 348.248046][ T8790] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 348.278287][ T8795] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 348.281181][ T8784] hpfs: hpfs_map_4sectors(): unaligned read [ 348.301084][ T8788] SQUASHFS error: Unable to read metadata cache entry [99] [ 348.323713][ T8795] hpfs: You really don't want any checks? You are crazy... [ 348.324067][ T8784] hpfs: filesystem error: unable to find root dir [ 348.334552][ T8788] SQUASHFS error: Unable to read inode 0x127 [ 348.344635][ T8790] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 348.350901][ T8795] hpfs: Code page index out of array [ 348.367336][ T8795] hpfs: code page support is disabled [ 348.373256][ T8795] hpfs: hpfs_map_4sectors(): unaligned read [ 348.379258][ T8795] hpfs: hpfs_map_4sectors(): unaligned read [ 348.385647][ T8795] hpfs: filesystem error: unable to find root dir [ 348.398235][ T8795] hpfs: hpfs_map_4sectors(): unaligned read [ 348.405582][ T8784] [ 348.428340][ T8790] EXT4-fs (loop2): 1 truncate cleaned up [ 348.446729][ T8790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.634426][ T8786] syz.2.709(8786): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 348.652671][ T8803] CIFS: Attempting to mount //127.0.0.1/share [ 348.708918][ T8809] loop6: detected capacity change from 0 to 512 [ 348.736505][ T8808] CIFS: VFS: Invalid response size 0 for command 0 [ 348.751936][ T8809] EXT4-fs: Ignoring removed nobh option [ 348.766670][ T8803] CIFS: VFS: cifs_mount failed w/return code = -5 [ 348.797905][ T8809] EXT4-fs (loop6): orphan cleanup on readonly fs [ 348.916267][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.929141][ T8809] EXT4-fs warning (device loop6): ext4_xattr_inode_get:546: inode #11: comm syz.6.717: ea_inode file size=1535 entry size=6 [ 348.945717][ T8809] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 348.959846][ T8809] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.717: corrupted inode contents [ 348.987419][ T8809] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.992026][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 349.007731][ C0] EXT4-fs (loop6): initial error at time 1785494474: ext4_do_update_inode:5742: inode 15 [ 349.017631][ C0] EXT4-fs (loop6): last error at time 1785494474: ext4_do_update_inode:5742: inode 15 [ 349.036312][ T8809] EXT4-fs (loop6): Remounting filesystem read-only [ 349.043994][ T8814] ip6t_srh: unknown srh match flags FF3F [ 349.069456][ T8809] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -30) [ 349.125477][ T8809] EXT4-fs (loop6): 1 orphan inode deleted [ 349.212935][ T8815] loop4: detected capacity change from 0 to 256 [ 349.229285][ T8815] exfat: Deprecated parameter 'utf8' [ 349.235294][ T8815] exfat: Deprecated parameter 'utf8' [ 349.322501][ T8809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 349.642964][ T8815] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 350.582288][ T8825] loop1: detected capacity change from 0 to 256 [ 350.741498][ T8823] loop2: detected capacity change from 0 to 1024 [ 351.110952][ T6252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.402927][ T30] audit: type=1804 audit(1785494476.540:34): pid=8817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.721" name="/newroot/132/file1" dev="tmpfs" ino=787 res=1 errno=0 [ 351.547185][ T8823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.847113][ T8830] loop6: detected capacity change from 0 to 8 [ 352.854313][ T8830] squashfs: Unknown parameter 'GPL' [ 353.017429][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.256436][ T8846] loop5: detected capacity change from 0 to 1764 [ 353.755378][ T8860] capability: warning: `syz.6.730' uses 32-bit capabilities (legacy support in use) [ 353.795088][ T8860] loop6: detected capacity change from 0 to 256 [ 354.574834][ T8857] loop2: detected capacity change from 0 to 32768 [ 354.599450][ T8863] loop1: detected capacity change from 0 to 256 [ 354.610208][ T8863] vfat: Deprecated parameter 'posix' [ 354.627352][ T8863] FAT-fs: "posix" option is obsolete, not supported now [ 354.639723][ T8857] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 354.656322][ T8857] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 354.701350][ T8857] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 354.720059][ T186] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 354.727594][ T186] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 355.323916][ T8846] dummy0: mtu less than device minimum [ 355.515510][ T186] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 787ms [ 355.544020][ T186] gfs2: fsid=syz:syz.0: jid=0: Done [ 355.574528][ T8857] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 355.587556][ T8857] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 355.672314][ T8873] CIFS: Attempting to mount //127.0.0.1/share [ 355.856856][ T8885] loop5: detected capacity change from 0 to 256 [ 356.095590][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.741'. [ 356.113211][ T8890] loop5: detected capacity change from 0 to 1024 [ 356.190345][ T8890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.275234][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.281105][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.742'. [ 356.410611][ T8873] CIFS: VFS: cifs_mount failed w/return code = -512 [ 356.676280][ T8913] loop4: detected capacity change from 0 to 16 [ 356.845972][ T8913] erofs (device loop4): mounted with root inode @ nid 36. [ 356.889450][ T8919] loop1: detected capacity change from 0 to 512 [ 356.917334][ T8917] loop2: detected capacity change from 0 to 128 [ 356.935958][ T8913] syz.4.747: attempt to access beyond end of device [ 356.935958][ T8913] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 356.986907][ T8917] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 357.009393][ T8913] syz.4.747: attempt to access beyond end of device [ 357.009393][ T8913] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 357.026940][ T8917] hpfs: filesystem error: improperly stopped [ 357.036669][ T8917] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 357.055689][ T8917] hpfs: You really don't want any checks? You are crazy... [ 357.068577][ T8919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.090428][ T8913] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 357.104314][ T8915] loop5: detected capacity change from 0 to 32768 [ 357.106239][ T8917] hpfs: hpfs_map_sector(): read error [ 357.119013][ T8919] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.130869][ T8913] erofs (device loop4): read error -117 @ 1 of nid 89 [ 357.132885][ T8917] hpfs: code page support is disabled [ 357.141828][ T30] audit: type=1800 audit(1785494482.380:35): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.747" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 357.163403][ T8917] hpfs: hpfs_map_4sectors(): unaligned read [ 357.173664][ T8917] hpfs: hpfs_map_4sectors(): unaligned read [ 357.180059][ T8917] hpfs: filesystem error: unable to find root dir [ 357.202135][ T8915] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 357.208784][ T8917] hpfs: hpfs_map_4sectors(): unaligned read [ 357.348964][ T8913] syz.4.747 (8913) used greatest stack depth: 19216 bytes left [ 357.487102][ T8917] hpfs: hpfs_map_4sectors(): unaligned read [ 357.525807][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.537846][ T8917] hpfs: hpfs_map_4sectors(): unaligned read [ 358.551237][ T8917] hpfs: hpfs_map_sector(): read error [ 358.558676][ T8917] hpfs: hpfs_map_4sectors(): unaligned read [ 359.872974][ T8935] loop1: detected capacity change from 0 to 16 [ 359.919632][ T5632] ocfs2: Unmounting device (7,5) on (node local) [ 359.938716][ T8934] loop2: detected capacity change from 0 to 512 [ 360.024905][ T8935] erofs (device loop1): mounted with root inode @ nid 36. [ 360.032246][ T29] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 360.044997][ T8934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.133340][ T8934] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.192170][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 360.213863][ T29] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 360.247175][ T29] usb 4-1: config 252 has no interface number 0 [ 360.266710][ T29] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 360.317295][ T29] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 360.388758][ T29] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 360.438035][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.456157][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.459906][ T29] usb 4-1: Product: syz [ 360.493787][ T29] usb 4-1: Manufacturer: syz [ 360.514241][ T29] usb 4-1: SerialNumber: syz [ 360.603982][ T8931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.607397][ T8946] CIFS: Attempting to mount //127.0.0.1/share [ 360.665462][ T8948] loop6: detected capacity change from 0 to 16 [ 360.760360][ T8948] erofs (device loop6): mounted with root inode @ nid 36. [ 360.789374][ T29] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 360.815940][ T8948] FAULT_INJECTION: forcing a failure. [ 360.815940][ T8948] name failslab, interval 1, probability 0, space 0, times 0 [ 360.829894][ T8948] CPU: 1 UID: 0 PID: 8948 Comm: syz.6.760 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.829943][ T8948] Tainted: [L]=SOFTLOCKUP [ 360.829951][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 360.829965][ T8948] Call Trace: [ 360.829976][ T8948] [ 360.829988][ T8948] dump_stack_lvl+0xe8/0x150 [ 360.830050][ T8948] should_fail_ex+0x40c/0x560 [ 360.830086][ T8948] should_failslab+0xa8/0x100 [ 360.830129][ T8948] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 360.830160][ T8948] ? alloc_empty_file+0x5b/0x1d0 [ 360.830190][ T8948] ? alloc_empty_file+0x5b/0x1d0 [ 360.830219][ T8948] ? stack_trace_save+0xa9/0x100 [ 360.830252][ T8948] alloc_empty_file+0x5b/0x1d0 [ 360.830282][ T8948] path_openat+0x8f/0x3830 [ 360.830308][ T8948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.830335][ T8948] ? kasan_save_track+0x4f/0x80 [ 360.830368][ T8948] ? kasan_save_track+0x3e/0x80 [ 360.830402][ T8948] ? __kasan_slab_alloc+0x6c/0x80 [ 360.830432][ T8948] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 360.830459][ T8948] ? do_getname+0x2e/0x250 [ 360.830485][ T8948] ? do_sys_openat2+0xcc/0x200 [ 360.830516][ T8948] ? __x64_sys_openat+0x138/0x170 [ 360.830545][ T8948] ? do_syscall_64+0x174/0x580 [ 360.830572][ T8948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.830604][ T8948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.830629][ T8948] ? __lock_acquire+0x683/0x2cf0 [ 360.830674][ T8948] do_file_open+0x23e/0x4a0 [ 360.830700][ T8948] ? __pfx_do_file_open+0x10/0x10 [ 360.830743][ T8948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.830769][ T8948] ? _raw_spin_unlock+0x28/0x50 [ 360.830791][ T8948] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.830815][ T8948] ? alloc_fd+0x651/0x6c0 [ 360.830857][ T8948] do_sys_openat2+0x115/0x200 [ 360.830892][ T8948] ? __pfx_do_sys_openat2+0x10/0x10 [ 360.830922][ T8948] ? ksys_write+0x242/0x270 [ 360.830946][ T8948] ? __pfx_ksys_write+0x10/0x10 [ 360.830971][ T8948] __x64_sys_openat+0x138/0x170 [ 360.831003][ T8948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.831034][ T8948] do_syscall_64+0x174/0x580 [ 360.831059][ T8948] ? trace_irq_disable+0x3b/0x140 [ 360.831093][ T8948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.831115][ T8948] RIP: 0033:0x7f8adad9e019 [ 360.831137][ T8948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.831155][ T8948] RSP: 002b:00007f8adbb98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.831180][ T8948] RAX: ffffffffffffffda RBX: 00007f8adb025fa0 RCX: 00007f8adad9e019 [ 360.831196][ T8948] RDX: 0000000000082000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 360.831211][ T8948] RBP: 00007f8adbb98090 R08: 0000000000000000 R09: 0000000000000000 [ 360.831224][ T8948] R10: 00000000000000e1 R11: 0000000000000246 R12: 0000000000000001 [ 360.831236][ T8948] R13: 00007f8adb026038 R14: 00007f8adb025fa0 R15: 00007ffea3955fb8 [ 360.831267][ T8948] [ 361.298757][ T8939] loop5: detected capacity change from 0 to 32768 [ 361.538367][ T8946] CIFS: VFS: cifs_mount failed w/return code = -112 [ 362.065457][ T8939] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 362.296636][ T8979] FAULT_INJECTION: forcing a failure. [ 362.296636][ T8979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.309994][ T5983] usb 4-1: Failed to submit usb control message: -71 [ 362.321664][ T5983] usb 4-1: unable to send the bmi data to the device: -71 [ 362.354687][ T5776] usb 4-1: USB disconnect, device number 13 [ 362.362906][ T8979] CPU: 0 UID: 0 PID: 8979 Comm: syz.4.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.362953][ T8979] Tainted: [L]=SOFTLOCKUP [ 362.362962][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 362.362978][ T8979] Call Trace: [ 362.362988][ T8979] [ 362.362999][ T8979] dump_stack_lvl+0xe8/0x150 [ 362.363042][ T8979] should_fail_ex+0x40c/0x560 [ 362.363084][ T8979] _copy_from_user+0x2d/0xb0 [ 362.363112][ T8979] mon_bin_ioctl+0x11d/0xe20 [ 362.363157][ T8979] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 362.363193][ T8979] ? __fget_files+0x2a/0x420 [ 362.363230][ T8979] ? __fget_files+0x3a2/0x420 [ 362.363279][ T8979] ? __fget_files+0x2a/0x420 [ 362.363320][ T8979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.363352][ T8979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.363388][ T8979] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 362.363423][ T8979] __se_sys_ioctl+0xfc/0x170 [ 362.363451][ T8979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.363480][ T8979] do_syscall_64+0x174/0x580 [ 362.363523][ T8979] ? trace_irq_disable+0x3b/0x140 [ 362.363566][ T8979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.363594][ T8979] RIP: 0033:0x7fc27f39e019 [ 362.363619][ T8979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.363641][ T8979] RSP: 002b:00007fc280341028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.363669][ T8979] RAX: ffffffffffffffda RBX: 00007fc27f625fa0 RCX: 00007fc27f39e019 [ 362.363689][ T8979] RDX: 0000200000000180 RSI: 00000000c0109207 RDI: 0000000000000005 [ 362.363706][ T8979] RBP: 00007fc280341090 R08: 0000000000000000 R09: 0000000000000000 [ 362.363723][ T8979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.363739][ T8979] R13: 00007fc27f626038 R14: 00007fc27f625fa0 R15: 00007ffe252c4d78 [ 362.363778][ T8979] [ 362.734994][ T5983] usb 4-1: unable to get target info from device [ 362.741447][ T5983] usb 4-1: could not get target info (-71) [ 362.748855][ T5983] usb 4-1: could not probe fw (-71) [ 363.814971][ T8939] XFS (loop5): Ending clean mount [ 364.096329][ T8986] loop3: detected capacity change from 0 to 32768 [ 364.110707][ T5632] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 364.135158][ T8988] loop6: detected capacity change from 0 to 512 [ 364.219320][ T8986] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 364.380278][ T8988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.466689][ T8988] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.264804][ T6024] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 365.404645][ T8995] loop4: detected capacity change from 0 to 4096 [ 365.492362][ T8995] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 365.531016][ T6252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.543830][ T6024] usb 3-1: Using ep0 maxpacket: 16 [ 365.596679][ T6024] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 365.698008][ T6024] usb 3-1: config 0 has no interface number 0 [ 365.768572][ T6024] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 365.830621][ T6024] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 365.885101][ T6024] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 365.901672][ T6024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.915764][ T8995] ntfs3(loop4): Failed to load root (-22). [ 365.935349][ T5619] ocfs2: Unmounting device (7,3) on (node local) [ 365.965434][ T6024] usb 3-1: Product: syz [ 365.988502][ T6024] usb 3-1: Manufacturer: syz [ 366.017200][ T6024] usb 3-1: SerialNumber: syz [ 366.077277][ T6024] usb 3-1: config 0 descriptor?? [ 366.186837][ T8998] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 366.220914][ T9009] loop5: detected capacity change from 0 to 4096 [ 366.235730][ T8998] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 366.310212][ T9009] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 366.498858][ T8998] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 366.551414][ T8998] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 366.607739][ T9009] ntfs3(loop5): Failed to load root (-22). [ 366.803242][ T5638] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 366.814752][ T6024] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 366.868270][ T6024] asix 3-1:0.34: probe with driver asix failed with error -71 [ 366.893077][ T5760] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 366.904978][ T6024] usb 3-1: USB disconnect, device number 18 [ 366.986715][ T9024] 9p: Bad value for 'rfdno' [ 366.992534][ T5638] usb 7-1: Using ep0 maxpacket: 16 [ 367.031755][ T5638] usb 7-1: unable to get BOS descriptor or descriptor too short [ 367.184153][ T5760] usb 4-1: not running at top speed; connect to a high speed hub [ 367.216863][ T5638] usb 7-1: config 0 has an invalid interface number: 228 but max is 2 [ 367.226637][ T5638] usb 7-1: config 0 has an invalid interface number: 172 but max is 2 [ 367.258262][ T5638] usb 7-1: config 0 has an invalid interface number: 181 but max is 2 [ 367.277121][ T10] IPVS: starting estimator thread 0... [ 367.320760][ T5638] usb 7-1: config 0 has no interface number 0 [ 367.381306][ T5638] usb 7-1: config 0 has no interface number 1 [ 367.442118][ T5638] usb 7-1: config 0 has no interface number 2 [ 367.472722][ T9030] IPVS: using max 26 ests per chain, 62400 per kthread [ 367.526287][ T5638] usb 7-1: config 0 interface 228 has no altsetting 0 [ 367.629247][ T5638] usb 7-1: config 0 interface 172 has no altsetting 0 [ 367.739461][ T5638] usb 7-1: config 0 interface 181 has no altsetting 0 [ 368.101866][ T5638] usb 7-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=f1.7f [ 368.120524][ T5760] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 368.137940][ T5760] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 368.147482][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.155623][ T5760] usb 4-1: Product: syz [ 368.155754][ T5638] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.159914][ T5760] usb 4-1: Manufacturer: syz [ 368.174333][ T5760] usb 4-1: SerialNumber: syz [ 368.189558][ T5760] oti6858 4-1:1.0: oti6858 converter detected [ 368.199854][ T5760] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 368.208201][ T5638] usb 7-1: Product: syz [ 368.228368][ T5638] usb 7-1: Manufacturer: syz [ 368.236288][ T5638] usb 7-1: SerialNumber: syz [ 368.429035][ T5638] usb 7-1: config 0 descriptor?? [ 368.645140][ T9018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.659981][ T9018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.689315][ T5638] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 368.695591][ T9042] loop4: detected capacity change from 0 to 136 [ 368.702927][ T5638] usb 7-1: selecting invalid altsetting 0 [ 368.728536][ T9042] iso9660: Unknown parameter 'sessio' [ 368.757702][ T5638] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 368.764685][ T2360] pvrusb2: Invalid write control endpoint [ 368.791447][ T5638] usb 7-1: selecting invalid altsetting 0 [ 368.795279][ T9042] overlayfs: overlapping lowerdir path [ 368.813513][ T5638] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 368.836000][ T5638] usb 7-1: selecting invalid altsetting 0 [ 368.859878][ T5638] usb 7-1: USB disconnect, device number 13 [ 369.015002][ T2360] pvrusb2: Invalid write control endpoint [ 369.015656][ T9042] ieee802154 phy0 wpan0: encryption failed: -22 [ 369.026042][ T2360] pvrusb2: Invalid write control endpoint [ 369.043634][ T2360] pvrusb2: Invalid write control endpoint [ 369.052762][ T2360] pvrusb2: Invalid write control endpoint [ 369.058712][ T2360] pvrusb2: Invalid write control endpoint [ 369.065353][ T2360] pvrusb2: Invalid write control endpoint [ 369.071308][ T2360] pvrusb2: Invalid write control endpoint [ 369.077903][ T2360] pvrusb2: Invalid write control endpoint [ 369.087621][ T2360] pvrusb2: Invalid write control endpoint [ 369.093969][ T2360] pvrusb2: Invalid write control endpoint [ 369.099920][ T2360] pvrusb2: Invalid write control endpoint [ 369.106494][ T2360] pvrusb2: Invalid write control endpoint [ 369.113024][ T2360] pvrusb2: Invalid write control endpoint [ 369.120435][ T2360] pvrusb2: Invalid write control endpoint [ 369.129624][ T2360] pvrusb2: Invalid write control endpoint [ 369.136321][ T2360] pvrusb2: Invalid write control endpoint [ 369.142614][ T2360] pvrusb2: Invalid write control endpoint [ 369.148705][ T2360] pvrusb2: Invalid write control endpoint [ 369.155062][ T2360] pvrusb2: Invalid write control endpoint [ 369.161240][ T2360] pvrusb2: Invalid write control endpoint [ 369.175402][ T2360] pvrusb2: Invalid write control endpoint [ 369.185503][ T2360] pvrusb2: Invalid write control endpoint [ 369.191443][ T2360] pvrusb2: Invalid write control endpoint [ 369.197894][ T2360] pvrusb2: Invalid write control endpoint [ 369.203739][ T2360] pvrusb2: Invalid write control endpoint [ 369.209607][ T2360] pvrusb2: Invalid write control endpoint [ 369.215459][ T2360] pvrusb2: Invalid write control endpoint [ 369.221267][ T2360] pvrusb2: Invalid write control endpoint [ 369.227159][ T2360] pvrusb2: Invalid write control endpoint [ 369.270320][ T2360] pvrusb2: Invalid write control endpoint [ 369.298771][ T2360] pvrusb2: Invalid write control endpoint [ 369.323351][ T2360] pvrusb2: Invalid write control endpoint [ 369.336830][ T9048] loop1: detected capacity change from 0 to 512 [ 369.381625][ T2360] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 369.414069][ T9048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.450326][ T9048] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.480774][ T9053] loop5: detected capacity change from 0 to 128 [ 369.483388][ T2360] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 369.495188][ T2360] pvrusb2: Invalid write control endpoint [ 369.501003][ T2360] pvrusb2: Invalid write control endpoint [ 369.510495][ T2360] pvrusb2: Invalid write control endpoint [ 369.518174][ T2360] pvrusb2: Invalid write control endpoint [ 369.527959][ T2360] pvrusb2: Invalid write control endpoint [ 369.533819][ T2360] pvrusb2: Invalid write control endpoint [ 369.542112][ T2360] pvrusb2: Invalid write control endpoint [ 369.552535][ T2360] pvrusb2: Invalid write control endpoint [ 369.573638][ T9053] EXT4-fs (loop5): Test dummy encryption mode enabled [ 369.582108][ T2360] pvrusb2: Invalid write control endpoint [ 369.594901][ T2360] pvrusb2: Invalid write control endpoint [ 369.611009][ T186] usb 4-1: USB disconnect, device number 14 [ 369.613740][ T2360] pvrusb2: Invalid write control endpoint [ 369.659930][ T9053] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.662162][ T2360] pvrusb2: Invalid write control endpoint [ 369.677863][ T2360] pvrusb2: Invalid write control endpoint [ 369.683702][ T2360] pvrusb2: Invalid write control endpoint [ 369.689462][ T2360] pvrusb2: Invalid write control endpoint [ 369.703365][ T2360] pvrusb2: Invalid write control endpoint [ 369.709220][ T2360] pvrusb2: Invalid write control endpoint [ 369.715062][ T2360] pvrusb2: Invalid write control endpoint [ 369.720826][ T2360] pvrusb2: Invalid write control endpoint [ 369.727148][ T2360] pvrusb2: Invalid write control endpoint [ 369.730654][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.733359][ T2360] pvrusb2: Invalid write control endpoint [ 369.738973][ T2360] pvrusb2: Attached sub-driver cs53l32a [ 369.764582][ T186] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 369.777271][ T9053] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 369.837965][ T186] oti6858 4-1:1.0: device disconnected [ 369.999984][ T2360] pvrusb2: Invalid write control endpoint [ 370.055178][ T2360] pvrusb2: Invalid write control endpoint [ 370.090708][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.787'. [ 370.109757][ T2360] pvrusb2: Invalid write control endpoint [ 370.132167][ T2360] pvrusb2: Invalid write control endpoint [ 370.144785][ T2360] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 370.175944][ T5632] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.204359][ T2360] pvrusb2: Device being rendered inoperable [ 370.229866][ T2360] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 370.285991][ T2360] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 370.313939][ T29] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 370.332611][ T2360] pvrusb2: Invalid write control endpoint [ 370.522663][ T5637] Bluetooth: hci6: command 0x1003 tx timeout [ 370.539439][ T5644] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 370.569532][ T29] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 370.586067][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.964872][ T9063] loop1: detected capacity change from 0 to 256 [ 372.128884][ T2360] pvrusb2: Invalid write control endpoint [ 372.157169][ T2360] pvrusb2: Invalid write control endpoint [ 372.171039][ T2360] pvrusb2: Invalid write control endpoint [ 372.191911][ T2360] pvrusb2: Invalid write control endpoint [ 372.211842][ T2360] pvrusb2: Invalid write control endpoint [ 372.242237][ T2360] pvrusb2: Invalid write control endpoint [ 372.248682][ T2360] pvrusb2: Invalid write control endpoint [ 372.254616][ T2360] pvrusb2: Invalid write control endpoint [ 372.262309][ T2360] pvrusb2: Invalid write control endpoint [ 372.273940][ T2360] pvrusb2: Invalid write control endpoint [ 372.280829][ T2360] pvrusb2: Invalid write control endpoint [ 372.287667][ T2360] pvrusb2: Invalid write control endpoint [ 372.293721][ T2360] pvrusb2: Invalid write control endpoint [ 372.295047][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.299490][ T2360] pvrusb2: Invalid write control endpoint [ 372.313739][ T2360] pvrusb2: Invalid write control endpoint [ 372.319980][ T2360] pvrusb2: Invalid write control endpoint [ 372.326167][ T2360] pvrusb2: Invalid write control endpoint [ 372.332257][ T2360] pvrusb2: Invalid write control endpoint [ 372.338061][ T2360] pvrusb2: Invalid write control endpoint [ 372.344228][ T2360] pvrusb2: Invalid write control endpoint [ 372.350092][ T2360] pvrusb2: Invalid write control endpoint [ 372.355945][ T2360] pvrusb2: Invalid write control endpoint [ 372.364680][ T2360] pvrusb2: Invalid write control endpoint [ 372.370510][ T2360] pvrusb2: Invalid write control endpoint [ 372.376345][ T2360] pvrusb2: Invalid write control endpoint [ 372.389171][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.471603][ T2360] pvrusb2: Invalid write control endpoint [ 372.485775][ T2360] pvrusb2: Invalid write control endpoint [ 372.525878][ T2360] pvrusb2: Invalid write control endpoint [ 372.555126][ T2360] pvrusb2: Invalid write control endpoint [ 372.589150][ T2360] pvrusb2: Invalid write control endpoint [ 372.619914][ T2360] pvrusb2: Invalid write control endpoint [ 372.900145][ T9084] loop6: detected capacity change from 0 to 32768 [ 372.908776][ T2360] pvrusb2: Invalid write control endpoint [ 372.939786][ T29] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 372.956696][ T2360] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 372.974433][ T29] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 373.033307][ T9084] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 373.092630][ T9092] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 373.111617][ T2360] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b) [ 373.115141][ T29] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 373.185760][ T29] ATM dev 0: poll status: error -71 [ 373.191729][ T29] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 373.219764][ T2360] pvrusb2: Invalid write control endpoint [ 373.250918][ T2360] pvrusb2: Invalid write control endpoint [ 373.267234][ T2360] pvrusb2: Invalid write control endpoint [ 373.295291][ T2360] pvrusb2: Invalid write control endpoint [ 373.361332][ T2360] pvrusb2: Invalid write control endpoint [ 373.416821][ C1] ATM dev 0: usbatm_complete: urb 0xffff88802bd05300 failed (-71)! [ 373.424983][ C1] ATM dev 0: usbatm_complete: urb 0xffff88802bd05900 failed (-71)! [ 373.433056][ C1] ATM dev 0: usbatm_complete: urb 0xffff88802bd05200 failed (-71)! [ 373.441099][ C1] ATM dev 0: usbatm_complete: urb 0xffff88802bc5b000 failed (-71)! [ 373.458220][ T29] usb 2-1: USB disconnect, device number 10 [ 373.480371][ T2360] pvrusb2: Invalid write control endpoint [ 373.509923][ T2360] pvrusb2: Invalid write control endpoint [ 374.301728][ T2360] pvrusb2: Invalid write control endpoint [ 374.386296][ T2360] pvrusb2: Invalid write control endpoint [ 374.443053][ T9103] loop4: detected capacity change from 0 to 512 [ 374.456623][ T2360] pvrusb2: Invalid write control endpoint [ 374.539808][ T2360] pvrusb2: Invalid write control endpoint [ 374.582889][ T2360] pvrusb2: Invalid write control endpoint [ 374.597816][ T9108] loop2: detected capacity change from 0 to 512 [ 374.607139][ T2360] pvrusb2: Invalid write control endpoint [ 374.644774][ T2360] pvrusb2: Invalid write control endpoint [ 374.650661][ T2360] pvrusb2: Invalid write control endpoint [ 374.654910][ T9103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.656506][ T2360] pvrusb2: Invalid write control endpoint [ 374.675727][ T2360] pvrusb2: Invalid write control endpoint [ 374.688204][ T2360] pvrusb2: Invalid write control endpoint [ 374.694070][ T2360] pvrusb2: Invalid write control endpoint [ 374.699909][ T2360] pvrusb2: Invalid write control endpoint [ 374.705753][ T2360] pvrusb2: Invalid write control endpoint [ 374.713482][ T2360] pvrusb2: Attached sub-driver cs53l32a [ 374.721328][ T9108] EXT4-fs: Ignoring removed bh option [ 374.727926][ T9103] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.781127][ T9108] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 374.796587][ T2360] pvrusb2: Invalid write control endpoint [ 374.812840][ T2360] pvrusb2: Invalid write control endpoint [ 374.829677][ T2360] pvrusb2: Invalid write control endpoint [ 374.842069][ T2360] pvrusb2: Invalid write control endpoint [ 374.854156][ T2360] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 374.890318][ T2360] pvrusb2: Device being rendered inoperable [ 374.897345][ T2360] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 374.935810][ T6252] ocfs2: Unmounting device (7,6) on (node local) [ 374.949827][ T2360] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 374.975727][ T9108] EXT4-fs (loop2): 1 truncate cleaned up [ 374.986535][ T2360] pvrusb2: Invalid write control endpoint [ 375.009892][ T9108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.119206][ T9123] netlink: 128 bytes leftover after parsing attributes in process `syz.1.803'. [ 375.163995][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.205311][ T9108] loop2: detected capacity change from 512 to 0 [ 375.249630][ T2360] pvrusb2: Invalid write control endpoint [ 375.249660][ T2360] pvrusb2: Invalid write control endpoint [ 375.249677][ T2360] pvrusb2: Invalid write control endpoint [ 375.249695][ T2360] pvrusb2: Invalid write control endpoint [ 375.249713][ T2360] pvrusb2: Invalid write control endpoint [ 375.258496][ T9124] EXT4-fs error (device loop2): ext4_get_inode_loc:5024: inode #18: block 9: comm syz.2.801: unable to read itable block [ 375.288288][ T2360] pvrusb2: Invalid write control endpoint [ 375.288316][ T2360] pvrusb2: Invalid write control endpoint [ 375.288334][ T2360] pvrusb2: Invalid write control endpoint [ 375.288352][ T2360] pvrusb2: Invalid write control endpoint [ 375.288370][ T2360] pvrusb2: Invalid write control endpoint [ 375.288388][ T2360] pvrusb2: Invalid write control endpoint [ 375.288405][ T2360] pvrusb2: Invalid write control endpoint [ 375.288423][ T2360] pvrusb2: Invalid write control endpoint [ 375.288440][ T2360] pvrusb2: Invalid write control endpoint [ 375.288458][ T2360] pvrusb2: Invalid write control endpoint [ 375.288475][ T2360] pvrusb2: Invalid write control endpoint [ 375.288493][ T2360] pvrusb2: Invalid write control endpoint [ 375.288510][ T2360] pvrusb2: Invalid write control endpoint [ 375.288528][ T2360] pvrusb2: Invalid write control endpoint [ 375.288545][ T2360] pvrusb2: Invalid write control endpoint [ 375.288563][ T2360] pvrusb2: Invalid write control endpoint [ 375.288580][ T2360] pvrusb2: Invalid write control endpoint [ 375.288597][ T2360] pvrusb2: Invalid write control endpoint [ 375.288615][ T2360] pvrusb2: Invalid write control endpoint [ 375.288631][ T2360] pvrusb2: Invalid write control endpoint [ 375.288645][ T2360] pvrusb2: Invalid write control endpoint [ 375.288659][ T2360] pvrusb2: Invalid write control endpoint [ 375.288673][ T2360] pvrusb2: Invalid write control endpoint [ 375.288688][ T2360] pvrusb2: Invalid write control endpoint [ 375.288702][ T2360] pvrusb2: Invalid write control endpoint [ 375.288716][ T2360] pvrusb2: Invalid write control endpoint [ 375.288730][ T2360] pvrusb2: Invalid write control endpoint [ 375.295051][ T9124] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 375.295081][ T9124] EXT4-fs (loop2): I/O error while writing superblock [ 375.334927][ T2360] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 375.558876][ T2360] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_c) [ 375.558947][ T2360] pvrusb2: Invalid write control endpoint [ 375.558969][ T2360] pvrusb2: Invalid write control endpoint [ 375.558987][ T2360] pvrusb2: Invalid write control endpoint [ 375.559004][ T2360] pvrusb2: Invalid write control endpoint [ 375.559022][ T2360] pvrusb2: Invalid write control endpoint [ 375.559040][ T2360] pvrusb2: Invalid write control endpoint [ 375.559058][ T2360] pvrusb2: Invalid write control endpoint [ 375.560741][ T2360] pvrusb2: Invalid write control endpoint [ 375.560763][ T2360] pvrusb2: Invalid write control endpoint [ 375.560780][ T2360] pvrusb2: Invalid write control endpoint [ 375.560797][ T2360] pvrusb2: Invalid write control endpoint [ 375.560814][ T2360] pvrusb2: Invalid write control endpoint [ 375.560832][ T2360] pvrusb2: Invalid write control endpoint [ 375.560849][ T2360] pvrusb2: Invalid write control endpoint [ 375.560867][ T2360] pvrusb2: Invalid write control endpoint [ 375.560884][ T2360] pvrusb2: Invalid write control endpoint [ 375.560902][ T2360] pvrusb2: Invalid write control endpoint [ 375.560920][ T2360] pvrusb2: Invalid write control endpoint [ 375.560938][ T2360] pvrusb2: Invalid write control endpoint [ 375.560956][ T2360] pvrusb2: Invalid write control endpoint [ 375.560973][ T2360] pvrusb2: Invalid write control endpoint [ 375.616607][ T2360] pvrusb2: Attached sub-driver cs53l32a [ 375.650288][ T5620] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block [ 375.694448][ T9140] loop4: detected capacity change from 0 to 512 [ 375.743503][ T9140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.743637][ T9140] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.752452][ T9143] loop6: detected capacity change from 0 to 512 [ 375.796413][ T9143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.796721][ T2360] pvrusb2: Invalid write control endpoint [ 375.801746][ T2360] pvrusb2: Invalid write control endpoint [ 375.801773][ T2360] pvrusb2: Invalid write control endpoint [ 375.801793][ T2360] pvrusb2: Invalid write control endpoint [ 375.801807][ T2360] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 375.801832][ T2360] pvrusb2: Device being rendered inoperable [ 375.801860][ T2360] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 375.801910][ T2360] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 375.988493][ T7385] EXT4-fs error (device loop2): ext4_get_inode_loc:5024: inode #18: block 9: comm syz.2.316: unable to read itable block [ 376.000670][ T9147] loop5: detected capacity change from 0 to 256 [ 376.060154][ T7385] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 376.419684][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.436582][ T6252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.464902][ T7385] EXT4-fs (loop2): I/O error while writing superblock [ 376.479415][ T7385] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: IO failure [ 376.560892][ T7385] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 376.697165][ T7385] EXT4-fs (loop2): I/O error while writing superblock [ 376.848831][ T7385] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #18: comm syz.2.316: mark_inode_dirty error [ 377.090547][ T7385] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 377.229472][ T7385] EXT4-fs (loop2): I/O error while writing superblock [ 377.382702][ T12] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:5009: inode #18: block 9: comm kworker/u8:0: unable to read itable block [ 377.536371][ T12] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 377.546007][ T12] EXT4-fs (loop2): I/O error while writing superblock [ 377.686259][ T9154] CIFS: Attempting to mount //127.0.0.1/share [ 377.693963][ T7385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.854398][ T7385] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 377.863239][ T7385] EXT4-fs (loop2): I/O error while writing superblock [ 377.898095][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.906654][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.995212][ T9154] CIFS: VFS: cifs_mount failed w/return code = -112 [ 379.805306][ T9172] loop5: detected capacity change from 0 to 512 [ 379.910677][ T9172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.933045][ T29] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 380.009584][ T9172] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.067803][ T9180] CIFS: Attempting to mount //127.0.0.1/share [ 380.106652][ T29] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 380.119496][ T9180] CIFS: VFS: Error connecting to socket. Aborting operation. [ 380.139430][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.155302][ T9180] CIFS: VFS: cifs_mount failed w/return code = -111 [ 380.337915][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.398605][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.435287][ T9170] loop1: detected capacity change from 0 to 256 [ 380.514487][ T9170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.542348][ T9170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.062252][ T29] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 381.657681][ T9190] loop5: detected capacity change from 0 to 128 [ 381.728586][ T9190] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 381.773029][ T29] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 381.804537][ T29] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 381.811375][ T29] ATM dev 0: poll status: error -71 [ 381.821998][ T29] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 381.833008][ T9190] hpfs: filesystem error: improperly stopped [ 381.833039][ T9190] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 381.833058][ T9190] hpfs: You really don't want any checks? You are crazy... [ 381.833408][ T9190] hpfs: hpfs_map_sector(): read error [ 381.833422][ T9190] hpfs: code page support is disabled [ 381.833525][ T9190] hpfs: hpfs_map_4sectors(): unaligned read [ 381.833587][ T9190] hpfs: hpfs_map_4sectors(): unaligned read [ 381.833598][ T9190] hpfs: filesystem error: unable to find root dir [ 381.856950][ T9190] hpfs: hpfs_map_4sectors(): unaligned read [ 381.912303][ C1] ATM dev 0: usbatm_complete: urb 0xffff888079672500 failed (-71)! [ 381.920324][ C1] ATM dev 0: usbatm_complete: urb 0xffff888079672200 failed (-71)! [ 381.928299][ C1] ATM dev 0: usbatm_complete: urb 0xffff888079672d00 failed (-71)! [ 381.936266][ C1] ATM dev 0: usbatm_complete: urb 0xffff888079672600 failed (-71)! [ 381.966989][ T29] usb 2-1: USB disconnect, device number 11 [ 381.992763][ T9190] hpfs: hpfs_map_4sectors(): unaligned read [ 382.008251][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.025082][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.034265][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.054651][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff888079672500 submission failed (-19)! [ 382.065758][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.074391][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.082325][ T9190] hpfs: hpfs_map_4sectors(): unaligned read [ 382.101082][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.113500][ T9190] hpfs: hpfs_map_sector(): read error [ 382.167826][ T9190] hpfs: hpfs_map_4sectors(): unaligned read [ 382.944265][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 383.582107][ T9229] loop6: detected capacity change from 0 to 128 [ 383.598289][ T9235] FAULT_INJECTION: forcing a failure. [ 383.598289][ T9235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.697605][ T9235] CPU: 1 UID: 0 PID: 9235 Comm: syz.5.833 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.697646][ T9235] Tainted: [L]=SOFTLOCKUP [ 383.697655][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 383.697671][ T9235] Call Trace: [ 383.697680][ T9235] [ 383.697691][ T9235] dump_stack_lvl+0xe8/0x150 [ 383.697737][ T9235] should_fail_ex+0x40c/0x560 [ 383.697778][ T9235] _copy_to_user+0x31/0xb0 [ 383.697807][ T9235] simple_read_from_buffer+0xe1/0x170 [ 383.697853][ T9235] proc_fail_nth_read+0x1bb/0x230 [ 383.697890][ T9235] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.697926][ T9235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 383.697969][ T9235] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.697999][ T9235] ? rw_verify_area+0x24a/0x4c0 [ 383.698037][ T9235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 383.698075][ T9235] vfs_read+0x213/0xa80 [ 383.698106][ T9235] ? __pfx___mutex_lock+0x10/0x10 [ 383.698141][ T9235] ? __pfx_vfs_read+0x10/0x10 [ 383.698168][ T9235] ? __fget_files+0x2a/0x420 [ 383.698210][ T9235] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.698240][ T9235] ? __fget_files+0x3a2/0x420 [ 383.698275][ T9235] ? __fget_files+0x2a/0x420 [ 383.698316][ T9235] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.698350][ T9235] ksys_read+0x150/0x270 [ 383.698379][ T9235] ? __pfx_ksys_read+0x10/0x10 [ 383.698414][ T9235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.698443][ T9235] do_syscall_64+0x174/0x580 [ 383.698474][ T9235] ? trace_irq_disable+0x3b/0x140 [ 383.698516][ T9235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.698542][ T9235] RIP: 0033:0x7f268635e84e [ 383.698565][ T9235] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 383.698586][ T9235] RSP: 002b:00007f268732dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.698612][ T9235] RAX: ffffffffffffffda RBX: 00007f268732e6c0 RCX: 00007f268635e84e [ 383.698633][ T9235] RDX: 000000000000000f RSI: 00007f268732e0a0 RDI: 0000000000000005 [ 383.698649][ T9235] RBP: 00007f268732e090 R08: 0000000000000000 R09: 0000000000000000 [ 383.698666][ T9235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.698682][ T9235] R13: 00007f2686626038 R14: 00007f2686625fa0 R15: 00007ffd1d848c78 [ 383.698722][ T9235] [ 384.196175][ T9229] affs: No valid root block on device loop6 [ 384.200183][ T5984] Bluetooth: hci6: Frame reassembly failed (-84) [ 384.439206][ T9242] CIFS: Attempting to mount //127.0.0.1/share [ 384.462972][ T9242] CIFS: VFS: Error connecting to socket. Aborting operation. [ 384.518113][ T9242] CIFS: VFS: cifs_mount failed w/return code = -111 [ 384.622261][ T9245] loop4: detected capacity change from 0 to 512 [ 384.637734][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.803719][ T9245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.882963][ T9245] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.301300][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.509283][ T5644] Bluetooth: hci2: command tx timeout [ 385.937745][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.207125][ T5637] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 386.232517][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 386.248336][ T5644] Bluetooth: hci6: command 0x1003 tx timeout [ 386.436701][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 386.955724][ T9272] loop5: detected capacity change from 0 to 128 [ 387.036389][ T9272] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 387.107781][ T9272] hpfs: filesystem error: improperly stopped [ 387.144900][ T9272] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 387.190862][ T9272] hpfs: You really don't want any checks? You are crazy... [ 387.290357][ T9272] hpfs: hpfs_map_sector(): read error [ 387.330489][ T9272] hpfs: code page support is disabled [ 387.373234][ T9272] hpfs: hpfs_map_4sectors(): unaligned read [ 387.395798][ T9272] hpfs: hpfs_map_4sectors(): unaligned read [ 387.414972][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.447753][ T9272] hpfs: filesystem error: unable to find root dir [ 387.480676][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'. [ 387.536816][ T9272] hpfs: hpfs_map_4sectors(): unaligned read [ 387.574985][ T9272] hpfs: hpfs_map_4sectors(): unaligned read [ 387.652222][ T5644] Bluetooth: hci2: command tx timeout [ 387.686208][ T9272] hpfs: hpfs_map_4sectors(): unaligned read [ 387.716745][ T9272] hpfs: hpfs_map_sector(): read error [ 387.767976][ T9284] hpfs: hpfs_map_4sectors(): unaligned read [ 388.319172][ T9290] loop5: detected capacity change from 0 to 512 [ 388.452126][ T186] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 388.610062][ T186] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.664825][ T186] usb 5-1: config 0 has no interface number 0 [ 388.689841][ T9262] loop3: detected capacity change from 0 to 256 [ 388.717833][ T186] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 388.770813][ T186] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.813106][ T12] bridge_slave_1: left allmulticast mode [ 388.821683][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.841745][ T186] usb 5-1: config 0 interface 1 has no altsetting 0 [ 388.856204][ T12] bridge_slave_1: left promiscuous mode [ 388.874398][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.913107][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.926267][ T186] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 389.009268][ T186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.053698][ T12] bridge_slave_0: left allmulticast mode [ 389.078358][ T186] usb 5-1: config 0 descriptor?? [ 389.087631][ T12] bridge_slave_0: left promiscuous mode [ 389.126364][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.421607][ T9307] loop6: detected capacity change from 0 to 512 [ 389.476998][ T10] cxacru 4-1:1.0: send of cm 0x84 failed (-71) [ 389.484692][ T9303] loop1: detected capacity change from 0 to 40427 [ 389.519068][ T10] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 389.529869][ T186] usbhid 5-1:0.1: can't add hid device: -71 [ 389.558001][ T186] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 389.598187][ T10] cxacru 4-1:1.0: send of cm 0x88 failed (-71) [ 389.671120][ T9307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.686892][ T10] ATM dev 0: poll status: error -71 [ 389.692619][ T10] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 389.708878][ T186] usb 5-1: USB disconnect, device number 13 [ 389.716168][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807e89c400 failed (-71)! [ 389.718632][ T9307] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.724155][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807e89ca00 failed (-71)! [ 389.724223][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807e89c500 failed (-71)! [ 389.750684][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807e89c300 failed (-71)! [ 389.767483][ T5644] Bluetooth: hci2: command tx timeout [ 389.822238][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807e89c400 failed (-71)! [ 389.830262][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807e89ca00 failed (-71)! [ 389.838249][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807e89c500 failed (-71)! [ 389.846238][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807e89c300 failed (-71)! [ 389.906012][ T10] usb 4-1: USB disconnect, device number 15 [ 391.251498][ T6252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.490028][ T9336] loop3: detected capacity change from 0 to 128 [ 391.521617][ T9336] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 391.563827][ T9336] hpfs: filesystem error: improperly stopped [ 391.584622][ T9336] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 391.614387][ T9336] hpfs: You really don't want any checks? You are crazy... [ 391.633979][ T9336] hpfs: hpfs_map_sector(): read error [ 391.649921][ T9336] hpfs: code page support is disabled [ 391.662421][ T9336] hpfs: hpfs_map_4sectors(): unaligned read [ 391.678973][ T9336] hpfs: hpfs_map_4sectors(): unaligned read [ 391.693639][ T9336] hpfs: filesystem error: unable to find root dir [ 391.719379][ T9336] hpfs: hpfs_map_4sectors(): unaligned read [ 391.747298][ T9336] hpfs: hpfs_map_4sectors(): unaligned read [ 391.792345][ T9336] hpfs: hpfs_map_4sectors(): unaligned read [ 391.813654][ T9336] hpfs: hpfs_map_sector(): read error [ 391.838139][ T9336] hpfs: hpfs_map_4sectors(): unaligned read [ 391.844315][ T5644] Bluetooth: hci2: command tx timeout [ 392.302317][ T9349] loop5: detected capacity change from 0 to 128 [ 392.382537][ T9349] EXT4-fs (loop5): Test dummy encryption mode enabled [ 392.415049][ T9349] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.481743][ T9354] loop3: detected capacity change from 0 to 1024 [ 392.499379][ T9349] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 392.586146][ T9354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.752768][ T5632] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.789103][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.860692][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.258709][ T6024] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 393.416085][ T6024] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.447815][ T6024] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 393.488250][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.671268][ T6024] usb 6-1: config 0 descriptor?? [ 393.700866][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.731368][ T12] bond0 (unregistering): Released all slaves [ 393.767686][ T9366] loop1: detected capacity change from 0 to 512 [ 393.857062][ T9366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.915939][ T9366] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.918364][ T6024] usb 6-1: USB disconnect, device number 15 [ 394.095449][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 394.229665][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.533269][ T6024] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 395.053737][ T6024] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.151427][ T6024] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 395.214075][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.287120][ T6024] usb 6-1: config 0 descriptor?? [ 395.388331][ T6024] aiptek 6-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 395.747095][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.824686][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.892262][ T5760] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 395.957542][ T9360] loop5: detected capacity change from 0 to 128 [ 395.999869][ T9360] msdos: Unknown parameter '' [ 396.070029][ T9396] loop6: detected capacity change from 0 to 128 [ 396.134993][ T5760] usb 5-1: device descriptor read/64, error -71 [ 396.150747][ T9396] EXT4-fs (loop6): Test dummy encryption mode enabled [ 396.288435][ T9396] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.354485][ T9396] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 396.443344][ T5760] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 396.510024][ T9403] loop3: detected capacity change from 0 to 1024 [ 396.516744][ T6024] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 396.582436][ T5760] usb 5-1: device descriptor read/64, error -71 [ 396.598712][ T6252] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 396.647985][ T9403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.715425][ T6024] usb 2-1: Using ep0 maxpacket: 32 [ 396.721113][ T5760] usb usb5-port1: attempt power cycle [ 396.729049][ T12] hsr_slave_0: left promiscuous mode [ 396.736973][ T6024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.765531][ T6024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.775860][ T6024] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 396.785367][ T6024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.800754][ T6024] usb 2-1: config 0 descriptor?? [ 396.810946][ T6024] hub 2-1:0.0: USB hub found [ 396.817522][ T12] hsr_slave_1: left promiscuous mode [ 396.843684][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.887949][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.011301][ T6024] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 397.030479][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.113977][ T5760] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 397.181360][ T5760] usb 5-1: device descriptor read/8, error -71 [ 397.227423][ T29] usb 6-1: USB disconnect, device number 16 [ 397.442249][ T5760] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 397.466428][ T9417] FAULT_INJECTION: forcing a failure. [ 397.466428][ T9417] name failslab, interval 1, probability 0, space 0, times 0 [ 397.513798][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.535031][ T6024] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1 [ 397.573923][ T5760] usb 5-1: device descriptor read/8, error -71 [ 397.618500][ T9417] CPU: 1 UID: 0 PID: 9417 Comm: syz.3.881 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.618541][ T9417] Tainted: [L]=SOFTLOCKUP [ 397.618550][ T9417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 397.618566][ T9417] Call Trace: [ 397.618575][ T9417] [ 397.618585][ T9417] dump_stack_lvl+0xe8/0x150 [ 397.618631][ T9417] should_fail_ex+0x40c/0x560 [ 397.618672][ T9417] should_failslab+0xa8/0x100 [ 397.618715][ T9417] __kmalloc_noprof+0xfe/0x720 [ 397.618752][ T9417] ? copy_splice_read+0x16f/0xaa0 [ 397.618789][ T9417] ? copy_splice_read+0x16f/0xaa0 [ 397.618835][ T9417] copy_splice_read+0x16f/0xaa0 [ 397.618884][ T9417] ? rcu_is_watching+0x15/0xb0 [ 397.618910][ T9417] ? __pfx_copy_splice_read+0x10/0x10 [ 397.618950][ T9417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.618980][ T9417] ? look_up_lock_class+0x57/0x110 [ 397.619012][ T9417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.619066][ T9417] ? register_lock_class+0x31/0x2e0 [ 397.619102][ T9417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.619135][ T9417] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 397.619163][ T9417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.619197][ T9417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.619227][ T9417] ? alloc_pipe_info+0x35d/0x4c0 [ 397.619256][ T9417] ? __pfx_copy_splice_read+0x10/0x10 [ 397.619294][ T9417] splice_direct_to_actor+0x48b/0xcb0 [ 397.619358][ T9417] ? __pfx_direct_splice_actor+0x10/0x10 [ 397.619399][ T9417] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 397.619452][ T9417] do_splice_direct+0x195/0x290 [ 397.619496][ T9417] ? __pfx_do_splice_direct+0x10/0x10 [ 397.619542][ T9417] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 397.619570][ T9417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.619599][ T9417] ? security_file_permission+0x75/0x260 [ 397.619641][ T9417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.619670][ T9417] ? rw_verify_area+0x203/0x4c0 [ 397.619693][ T9417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.619728][ T9417] do_sendfile+0x52e/0x7c0 [ 397.619769][ T9417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.619811][ T9417] ? __pfx_do_sendfile+0x10/0x10 [ 397.619844][ T9417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.619872][ T9417] ? __fget_files+0x3a2/0x420 [ 397.619921][ T9417] __se_sys_sendfile64+0x144/0x1a0 [ 397.619957][ T9417] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 397.619996][ T9417] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.620025][ T9417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.620059][ T9417] do_syscall_64+0x174/0x580 [ 397.620091][ T9417] ? trace_irq_disable+0x3b/0x140 [ 397.620134][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.620160][ T9417] RIP: 0033:0x7fafddd9e019 [ 397.620185][ T9417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.620209][ T9417] RSP: 002b:00007fafdeb96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 397.620238][ T9417] RAX: ffffffffffffffda RBX: 00007fafde025fa0 RCX: 00007fafddd9e019 [ 397.620259][ T9417] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 397.620276][ T9417] RBP: 00007fafdeb96090 R08: 0000000000000000 R09: 0000000000000000 [ 397.620294][ T9417] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 397.620310][ T9417] R13: 00007fafde026038 R14: 00007fafde025fa0 R15: 00007ffd1465bbb8 [ 397.620356][ T9417] [ 397.640117][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.678351][ T6024] hid-generic 0003:046D:C31C.0002: probe with driver hid-generic failed with error -22 [ 397.717869][ T6024] usb 2-1: USB disconnect, device number 12 [ 398.013148][ T5760] usb usb5-port1: unable to enumerate USB device [ 398.312591][ T12] veth1_macvtap: left promiscuous mode [ 398.364645][ T12] veth0_macvtap: left promiscuous mode [ 398.381445][ T12] veth1_vlan: left promiscuous mode [ 398.398942][ T12] veth0_vlan: left promiscuous mode [ 398.416394][ T5776] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 398.433767][ T9433] loop3: detected capacity change from 0 to 512 [ 398.475238][ T9433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.505452][ T9433] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.582152][ T5776] usb 7-1: Using ep0 maxpacket: 8 [ 398.593828][ T5776] usb 7-1: config 51 has an invalid interface number: 254 but max is 0 [ 398.603211][ T5776] usb 7-1: config 51 has an invalid interface number: 56 but max is 0 [ 398.612094][ T5776] usb 7-1: config 51 has 2 interfaces, different from the descriptor's value: 1 [ 398.621335][ T5776] usb 7-1: config 51 has no interface number 0 [ 398.627752][ T5776] usb 7-1: config 51 has no interface number 1 [ 398.638234][ T5776] usb 7-1: config 51 interface 254 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 398.652066][ T5776] usb 7-1: config 51 interface 254 altsetting 15 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 398.665294][ T5776] usb 7-1: config 51 interface 254 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 398.681468][ T5776] usb 7-1: config 51 interface 56 altsetting 167 endpoint 0x8 has invalid wMaxPacketSize 0 [ 398.700051][ T5776] usb 7-1: config 51 interface 56 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 0 [ 398.715696][ T5776] usb 7-1: config 51 interface 56 altsetting 167 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 398.736837][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.832737][ T5776] usb 7-1: config 51 interface 56 altsetting 167 bulk endpoint 0xD has invalid maxpacket 64 [ 398.887390][ T5776] usb 7-1: config 51 interface 56 altsetting 167 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 398.923349][ T5776] usb 7-1: config 51 interface 254 has no altsetting 0 [ 398.941177][ T5776] usb 7-1: config 51 interface 56 has no altsetting 0 [ 399.186719][ T9440] loop4: detected capacity change from 0 to 32768 [ 399.215448][ T5776] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0013, bcdDevice=82.f7 [ 399.230062][ T5776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.286848][ T9440] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 399.343705][ T5776] usb 7-1: Product: 衭䄞ے柄㈤ꋺ縊睪ۯ谗驩㘥踼鎣ꖨᏝ鍒繒뉏귋ﰉ햣冷趾竛瀕ᡜှ栗鑞夰✤㽃鑊䰥ល혔蘤ᫎ該隣뀺᥌䕶ᗻㄑ塐妡睐ꯜ꿰茚뫺皑⣷䪌伬麔걁⒢캮팪⁳띤麞⦅ﳯ멽嫩頰Ლꈘ倸窇黁牭꽿⢸퍁쨮泙那嬇惩Ϲ菇ᵫ㋐〶㝝鴹᭺ᮡȉ氧伀찕栉⭰챴걠鄢坹㚻✷炇吧⤦碽㚬 [ 401.336810][ T5776] usb 7-1: Manufacturer: ᵖ኏끕禇쎄阩ᜟ疇릯ﴽ䍟儰䐲뚌鉧ᄊቩ큀및貝觹Ŀ㯽ℴ䩩劣ﳋ꽳澉᫑隻槬ᐣ⹛旝姰囕奥ꗣ랫론쑝놠帊ෑ䏔嬴騵睻杛璕晒찑粈꿟 [ 401.360263][ T5776] usb 7-1: SerialNumber: 脰亙螂瀸묞犾폝ﻥ췫ﺖ麆삭뜤㨔豀ꥨ跠厂ⷹ䪬⚄쀐㖣鞢⪅敪냊ꥼ喧醠ᑉ絩ퟺ徐⳱⦺Ꝺ궒퇴ッꏤ몋옝ᙯꍻ䨓盲㫙믣⼺ᅓ઀㯚൜챩ᡸ堡ٙ陂稏盥曌ຎ겥ᕘ⥲ꛨᱜ廙ꍆ禡紹䝋㮍럈覘鲍띒免⢶냽㶋줾酥䟢醒洄綑✑칏稪酈ᨛ㍢꧇拜叠肀Ꝙ僧谕䍎 [ 401.566687][ T5776] usb 7-1: can't set config #51, error -71 [ 401.625733][ T5776] usb 7-1: USB disconnect, device number 14 [ 401.985813][ T9458] loop6: detected capacity change from 0 to 32768 [ 402.007159][ T9458] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 402.019825][ T9458] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 403.581085][ T9467] loop3: detected capacity change from 0 to 1024 [ 403.705836][ T9467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.990192][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.153683][ T12] team0 (unregistering): Port device team_slave_1 removed [ 404.346682][ T12] team0 (unregistering): Port device team_slave_0 removed [ 405.441746][ T9481] loop3: detected capacity change from 0 to 164 [ 405.564066][ T9481] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 405.679611][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 406.039199][ T6252] ocfs2: Unmounting device (7,6) on (node local) [ 406.077331][ T5628] ocfs2: Unmounting device (7,4) on (node local) [ 406.349021][ T9195] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.357677][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.370731][ T9195] bridge_slave_0: entered allmulticast mode [ 406.378814][ T9195] bridge_slave_0: entered promiscuous mode [ 406.388704][ T9195] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.395937][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.466724][ T9195] bridge_slave_1: entered allmulticast mode [ 406.539960][ T9195] bridge_slave_1: entered promiscuous mode [ 406.966398][ T9195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.033881][ T9195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.089472][ T9506] ip6t_srh: unknown srh match flags FF3F [ 407.155274][ T5776] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 407.301681][ T9512] loop1: detected capacity change from 0 to 256 [ 407.370284][ T9512] exfat: Deprecated parameter 'utf8' [ 407.375943][ T9512] exfat: Deprecated parameter 'utf8' [ 407.624755][ T9512] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 411.449852][ T5776] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 411.458612][ T5776] usb 4-1: can't read configurations, error -71 [ 411.472182][ T9195] team0: Port device team_slave_0 added [ 411.513092][ T5760] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 411.590405][ T9195] team0: Port device team_slave_1 added [ 411.604106][ T12] IPVS: stop unused estimator thread 0... [ 411.824212][ T9195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.854517][ T9530] FAULT_INJECTION: forcing a failure. [ 411.854517][ T9530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.859806][ T9195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.899066][ T9530] CPU: 1 UID: 0 PID: 9530 Comm: syz.4.906 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.899105][ T9530] Tainted: [L]=SOFTLOCKUP [ 411.899114][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 411.899128][ T9530] Call Trace: [ 411.899143][ T9530] [ 411.899153][ T9530] dump_stack_lvl+0xe8/0x150 [ 411.899202][ T9530] should_fail_ex+0x40c/0x560 [ 411.899251][ T9530] _copy_to_user+0x31/0xb0 [ 411.899280][ T9530] simple_read_from_buffer+0xe1/0x170 [ 411.899329][ T9530] proc_fail_nth_read+0x1bb/0x230 [ 411.899366][ T9530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.899404][ T9530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.899443][ T9530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.899471][ T9530] ? rw_verify_area+0x24a/0x4c0 [ 411.899505][ T9530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.899549][ T9530] vfs_read+0x213/0xa80 [ 411.899580][ T9530] ? __pfx___mutex_lock+0x10/0x10 [ 411.899623][ T9530] ? __pfx_vfs_read+0x10/0x10 [ 411.899655][ T9530] ? __fget_files+0x2a/0x420 [ 411.899697][ T9530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.899731][ T9530] ? __fget_files+0x3a2/0x420 [ 411.899766][ T9530] ? __fget_files+0x2a/0x420 [ 411.899811][ T9530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.899851][ T9530] ksys_read+0x150/0x270 [ 411.899880][ T9530] ? __pfx_ksys_read+0x10/0x10 [ 411.899910][ T9530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.899953][ T9530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.899981][ T9530] do_syscall_64+0x174/0x580 [ 411.900018][ T9530] ? trace_irq_disable+0x3b/0x140 [ 411.900059][ T9530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.900085][ T9530] RIP: 0033:0x7fc27f35e84e [ 411.900113][ T9530] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 411.900134][ T9530] RSP: 002b:00007fc280340fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 411.900161][ T9530] RAX: ffffffffffffffda RBX: 00007fc2803416c0 RCX: 00007fc27f35e84e [ 411.900184][ T9530] RDX: 000000000000000f RSI: 00007fc2803410a0 RDI: 0000000000000004 [ 411.900205][ T9530] RBP: 00007fc280341090 R08: 0000000000000000 R09: 0000000000000000 [ 411.900222][ T9530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.900236][ T9530] R13: 00007fc27f626038 R14: 00007fc27f625fa0 R15: 00007ffe252c4d78 [ 411.900282][ T9530] [ 412.252966][ T9195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.270296][ T9195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.279320][ T9195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.306494][ T9195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.550419][ T9195] hsr_slave_0: entered promiscuous mode [ 412.587304][ T9195] hsr_slave_1: entered promiscuous mode [ 412.617052][ T9195] debugfs: 'hsr0' already exists in 'hsr' [ 412.624743][ T9195] Cannot create hsr debugfs directory [ 412.681048][ T9548] netlink: 188 bytes leftover after parsing attributes in process `syz.5.912'. [ 412.803051][ T9548] loop5: detected capacity change from 0 to 64 [ 413.121182][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 413.121214][ T30] audit: type=1800 audit(1785494538.340:36): pid=9548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.912" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 413.229088][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 413.280964][ T9556] CIFS: Attempting to mount //127.0.0.1/share [ 413.927880][ T5893] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 414.075835][ T9556] CIFS: VFS: cifs_mount failed w/return code = -512 [ 414.300920][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 414.337565][ T5893] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 414.383188][ T5893] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 414.406835][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.467077][ T5893] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 414.510864][ T5893] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 414.743077][ T5760] usb 2-1: USB disconnect, device number 13 [ 414.879068][ T5760] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 414.905549][ T5760] spcp8x5 2-1:1.0: device disconnected [ 415.439873][ T9195] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 415.513026][ T9195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.527886][ T9599] CIFS: Attempting to mount //127.0.0.1/share [ 415.566198][ T9195] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 416.731782][ T9599] CIFS: VFS: cifs_mount failed w/return code = -112 [ 416.739912][ T9195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.788850][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 416.834464][ T9195] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 416.868707][ T9195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.904970][ T9195] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 416.976189][ T9195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.127670][ T9627] loop5: detected capacity change from 0 to 128 [ 417.178621][ T9627] EXT4-fs (loop5): Test dummy encryption mode enabled [ 417.217138][ T9627] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 417.254024][ T9627] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 417.347931][ T9633] CIFS: Attempting to mount //127.0.0.1/share [ 417.362257][ T5760] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 417.525433][ T5760] usb 7-1: Using ep0 maxpacket: 32 [ 417.549998][ T5760] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.567385][ T9195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.571364][ T5760] usb 7-1: config 0 has no interface number 0 [ 417.588001][ T9639] loop1: detected capacity change from 0 to 128 [ 417.601302][ T5760] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 417.630338][ T5760] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.631289][ T9639] EXT4-fs (loop1): Test dummy encryption mode enabled [ 417.666929][ T5760] usb 7-1: Product: syz [ 417.671840][ T9195] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.684435][ T5632] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.684817][ T5760] usb 7-1: Manufacturer: syz [ 417.739885][ T5760] usb 7-1: SerialNumber: syz [ 417.760580][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.763693][ T5760] usb 7-1: config 0 descriptor?? [ 417.767826][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.805019][ T5760] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 417.815684][ T5760] usb 7-1: selecting invalid altsetting 1 [ 417.821730][ T5760] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 417.864366][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.871616][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.894995][ T5760] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 417.898506][ T9639] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 417.921019][ T5760] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 417.955113][ T5760] usb 7-1: media controller created [ 418.003994][ T9628] usb 7-1: dvb_usb_ce6230: I2C read not implemented [ 418.018169][ T9639] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 418.090004][ T5760] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.139354][ T9633] CIFS: VFS: cifs_mount failed w/return code = -112 [ 418.319341][ T5760] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 418.350128][ T5760] zl10353_read_register: readreg error (reg=127, ret==-71) [ 418.383775][ T5760] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 419.333952][ T5631] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 420.206591][ T9659] syzkaller0: entered promiscuous mode [ 420.259862][ T9659] syzkaller0: entered allmulticast mode [ 420.303976][ T5760] usb 7-1: USB disconnect, device number 15 [ 420.413786][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 420.544931][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.939'. [ 420.595122][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 420.637597][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 421.607195][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 421.620035][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.640280][ T10] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 421.766334][ T9681] CIFS: Attempting to mount //127.0.0.1/share [ 422.257229][ T10] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 422.274988][ T10] usb 2-1: USB disconnect, device number 14 [ 422.308444][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 422.348936][ T10] spcp8x5 2-1:1.0: device disconnected [ 422.565827][ T9681] CIFS: VFS: cifs_mount failed w/return code = -112 [ 422.616071][ T9195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.892414][ T9703] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 423.898601][ T9703] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 423.904857][ T9703] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 423.910946][ T9703] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 423.917118][ T9703] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 423.923331][ T9703] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 423.929331][ T9703] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 423.959668][ T9703] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 424.349830][ T9716] CIFS: Attempting to mount //127.0.0.1/share [ 424.748659][ T9195] veth0_vlan: entered promiscuous mode [ 424.900537][ T9195] veth1_vlan: entered promiscuous mode [ 424.953844][ T9721] loop2: detected capacity change from 0 to 7 [ 424.984683][ T9695] loop1: detected capacity change from 0 to 32768 [ 425.013541][ T9721] Dev loop2: unable to read RDB block 7 [ 425.034354][ T9721] loop2: unable to read partition table [ 425.057682][ T9695] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 425.135884][ T9721] loop2: partition table beyond EOD, truncated [ 425.157648][ T9195] veth0_macvtap: entered promiscuous mode [ 425.194991][ T9721] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 425.214661][ T9195] veth1_macvtap: entered promiscuous mode [ 425.265092][ T9740] loop6: detected capacity change from 0 to 128 [ 425.276314][ T9716] ------------[ cut here ]------------ [ 425.282268][ T9716] server->in_flight == 0 [ 425.282291][ T9716] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1249/0x2b70, CPU#0: syz.5.948/9716 [ 425.302748][ T9716] Modules linked in: [ 425.308161][ T9716] CPU: 0 UID: 0 PID: 9716 Comm: syz.5.948 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.319740][ T9716] Tainted: [L]=SOFTLOCKUP [ 425.324628][ T9716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 425.335181][ T9716] RIP: 0010:smb2_add_credits+0x1249/0x2b70 [ 425.341064][ T9716] Code: de 83 e6 01 31 ff e8 e6 1d be fe f6 c3 01 75 0a e8 9c 19 be fe e9 22 13 00 00 0f 1f 44 00 00 e8 8d 19 be fe e9 13 13 00 00 90 <0f> 0b 90 80 3d 3e 21 38 0d 01 0f 85 9e 03 00 00 e8 72 19 be fe 49 [ 425.361188][ T9716] RSP: 0018:ffffc90004fbf238 EFLAGS: 00010246 [ 425.367384][ T9716] RAX: ffffffff8308ec98 RBX: 1ffff1100626fc61 RCX: 0000000000000002 [ 425.375488][ T9716] RDX: ffff88807f59dd00 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.383672][ T9716] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 425.391711][ T9716] R10: dffffc0000000000 R11: ffffffff830919f0 R12: ffff88803137e308 [ 425.399869][ T9716] R13: ffffc90004fbf450 R14: ffff88803137e000 R15: 0000000000000000 [ 425.409502][ T9716] FS: 00007f268732e6c0(0000) GS:ffff888124f4d000(0000) knlGS:0000000000000000 [ 425.419295][ T9716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.426290][ T9716] CR2: 00007fc6059f3000 CR3: 0000000079740000 CR4: 0000000000350ef0 [ 425.434458][ T9716] Call Trace: [ 425.437765][ T9716] [ 425.440744][ T9716] ? do_raw_spin_unlock+0xf5/0x210 [ 425.445972][ T9716] compound_send_recv+0x13b4/0x2b90 [ 425.451233][ T9716] ? __asan_memset+0x22/0x50 [ 425.455961][ T9716] ? __pfx_compound_send_recv+0x10/0x10 [ 425.461546][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.467345][ T9716] ? rcu_is_watching+0x15/0xb0 [ 425.472271][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.477945][ T9716] ? __mutex_unlock_slowpath+0x731/0x900 [ 425.478670][ T9695] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 425.483709][ T9716] ? cifs_strtoUTF16+0x315/0x400 [ 425.483787][ T9716] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 425.483826][ T9716] ? __pfx_cifs_strtoUTF16+0x10/0x10 [ 425.483863][ T9716] cifs_send_recv+0x42/0x60 [ 425.483899][ T9716] SMB2_negotiate+0x164d/0x4030 [ 425.483961][ T9716] ? __pfx_SMB2_negotiate+0x10/0x10 [ 425.484000][ T9716] ? __mutex_lock+0x30d/0x1550 [ 425.484040][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.538869][ T9716] ? do_raw_spin_lock+0x12b/0x2f0 [ 425.543998][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.549664][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.555418][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.561084][ T9716] ? do_raw_spin_unlock+0xf5/0x210 [ 425.566600][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.572486][ T9716] ? _raw_spin_unlock+0x28/0x50 [ 425.577439][ T9716] cifs_negotiate_protocol+0x45d/0x680 [ 425.583094][ T9716] cifs_get_smb_ses+0x1104/0x1ff0 [ 425.588245][ T9716] cifs_mount_get_session+0xf1/0x450 [ 425.593662][ T9716] dfs_mount_share+0x22e/0x990 [ 425.598505][ T9716] cifs_mount+0xcc/0xbf0 [ 425.601152][ T9695] XFS (loop1): Starting recovery (logdev: internal) [ 425.604147][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.616964][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.622823][ T9716] ? __pfx_cifs_mount+0x10/0x10 [ 425.627929][ T9716] ? smb3_update_mnt_flags+0x2df/0x410 [ 425.633544][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.639227][ T9716] ? cifs_setup_cifs_sb+0x5d8/0x900 [ 425.644687][ T9716] cifs_smb3_do_mount+0x2d0/0x8a0 [ 425.649781][ T9716] ? smb3_get_tree+0x2bf/0x400 [ 425.654648][ T9716] ? __pfx___mutex_lock+0x10/0x10 [ 425.659708][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.666744][ T9716] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 425.673049][ T9716] ? vfs_parse_fs_qstr+0x163/0x1e0 [ 425.678304][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.684512][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.690194][ T9716] ? smb3_handle_conflicting_options+0x40f/0xbf0 [ 425.697275][ T9716] smb3_get_tree+0x2dd/0x400 [ 425.703992][ T9716] vfs_get_tree+0x92/0x2a0 [ 425.708434][ T9716] do_new_mount+0x319/0xdc0 [ 425.714075][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.719768][ T9716] ? __pfx_do_new_mount+0x10/0x10 [ 425.725830][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.731535][ T9716] ? ns_capable+0x89/0xe0 [ 425.736078][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.741781][ T9716] ? path_mount+0x647/0x1040 [ 425.746538][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.752297][ T9716] ? user_path_at+0xd4/0x160 [ 425.756958][ T9716] __se_sys_mount+0x31d/0x420 [ 425.761696][ T9716] ? __pfx___se_sys_mount+0x10/0x10 [ 425.767050][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.772844][ T9716] ? __x64_sys_mount+0x20/0xc0 [ 425.777697][ T9716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.783907][ T9716] do_syscall_64+0x174/0x580 [ 425.788588][ T9716] ? trace_irq_disable+0x3b/0x140 [ 425.793728][ T9716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.799738][ T9716] RIP: 0033:0x7f268639e019 [ 425.805571][ T9716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.823109][ T9695] XFS (loop1): Ending recovery (logdev: internal) [ 425.826555][ T9716] RSP: 002b:00007f268732e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 425.840858][ T9716] RAX: ffffffffffffffda RBX: 00007f2686625fa0 RCX: 00007f268639e019 [ 425.848980][ T9716] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 425.857142][ T9716] RBP: 00007f268643500c R08: 0000000000000000 R09: 0000000000000000 [ 425.861735][ T9195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.865252][ T9716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.865276][ T9716] R13: 00007f2686626038 R14: 00007f2686625fa0 R15: 00007ffd1d848c78 [ 425.865318][ T9716] [ 425.865333][ T9716] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 425.865356][ T9716] CPU: 0 UID: 0 PID: 9716 Comm: syz.5.948 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.865391][ T9716] Tainted: [L]=SOFTLOCKUP [ 425.865401][ T9716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 425.865419][ T9716] Call Trace: [ 425.865429][ T9716] [ 425.865440][ T9716] vpanic+0x56c/0xa60 [ 425.865488][ T9716] ? __pfx__printk+0x10/0x10 [ 425.865519][ T9716] ? __pfx_vpanic+0x10/0x10 [ 425.865558][ T9716] ? is_bpf_text_address+0x292/0x2b0 [ 425.865600][ T9716] ? is_bpf_text_address+0x26/0x2b0 [ 425.865650][ T9716] panic+0xc5/0xd0 [ 425.865691][ T9716] ? __pfx_panic+0x10/0x10 [ 425.865753][ T9716] __warn+0x315/0x4c0 [ 425.865775][ T9716] ? smb2_add_credits+0x1249/0x2b70 [ 425.865818][ T9716] ? smb2_add_credits+0x1249/0x2b70 [ 425.865859][ T9716] __report_bug+0x276/0x570 [ 425.865898][ T9716] ? smb2_add_credits+0x1249/0x2b70 [ 425.865942][ T9716] ? __pfx___report_bug+0x10/0x10 [ 425.865972][ T9716] ? __lock_acquire+0x683/0x2cf0 [ 425.866015][ T9716] ? __pfx___schedule+0x10/0x10 [ 425.866056][ T9716] ? smb2_add_credits+0x1249/0x2b70 [ 425.866105][ T9716] report_bug+0x16a/0x220 [ 425.866139][ T9716] ? smb2_add_credits+0x1249/0x2b70 [ 425.866177][ T9716] ? smb2_add_credits+0x124b/0x2b70 [ 425.866217][ T9716] handle_bug+0x9c/0x200 [ 425.866256][ T9716] exc_invalid_op+0x1a/0x50 [ 425.866293][ T9716] asm_exc_invalid_op+0x1a/0x20 [ 425.866320][ T9716] RIP: 0010:smb2_add_credits+0x1249/0x2b70 [ 425.866362][ T9716] Code: de 83 e6 01 31 ff e8 e6 1d be fe f6 c3 01 75 0a e8 9c 19 be fe e9 22 13 00 00 0f 1f 44 00 00 e8 8d 19 be fe e9 13 13 00 00 90 <0f> 0b 90 80 3d 3e 21 38 0d 01 0f 85 9e 03 00 00 e8 72 19 be fe 49 [ 425.866384][ T9716] RSP: 0018:ffffc90004fbf238 EFLAGS: 00010246 [ 425.866409][ T9716] RAX: ffffffff8308ec98 RBX: 1ffff1100626fc61 RCX: 0000000000000002 [ 425.866429][ T9716] RDX: ffff88807f59dd00 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.866447][ T9716] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 425.866463][ T9716] R10: dffffc0000000000 R11: ffffffff830919f0 R12: ffff88803137e308 [ 425.866484][ T9716] R13: ffffc90004fbf450 R14: ffff88803137e000 R15: 0000000000000000 [ 425.866509][ T9716] ? __pfx_smb2_get_credits_field+0x10/0x10 [ 425.866552][ T9716] ? smb2_add_credits+0x3f8/0x2b70 [ 425.866600][ T9716] ? smb2_add_credits+0x3f8/0x2b70 [ 425.866644][ T9716] ? do_raw_spin_unlock+0xf5/0x210 [ 425.866682][ T9716] compound_send_recv+0x13b4/0x2b90 [ 425.866731][ T9716] ? __asan_memset+0x22/0x50 [ 425.866768][ T9716] ? __pfx_compound_send_recv+0x10/0x10 [ 425.866810][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.866842][ T9716] ? rcu_is_watching+0x15/0xb0 [ 425.866892][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.866923][ T9716] ? __mutex_unlock_slowpath+0x731/0x900 [ 425.866959][ T9716] ? cifs_strtoUTF16+0x315/0x400 [ 425.866995][ T9716] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 425.867031][ T9716] ? __pfx_cifs_strtoUTF16+0x10/0x10 [ 425.867067][ T9716] cifs_send_recv+0x42/0x60 [ 425.867106][ T9716] SMB2_negotiate+0x164d/0x4030 [ 425.867168][ T9716] ? __pfx_SMB2_negotiate+0x10/0x10 [ 425.867208][ T9716] ? __mutex_lock+0x30d/0x1550 [ 425.867249][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.867280][ T9716] ? do_raw_spin_lock+0x12b/0x2f0 [ 425.867312][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.867345][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.867381][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.867412][ T9716] ? do_raw_spin_unlock+0xf5/0x210 [ 425.867446][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.867477][ T9716] ? _raw_spin_unlock+0x28/0x50 [ 425.867508][ T9716] cifs_negotiate_protocol+0x45d/0x680 [ 425.867548][ T9716] cifs_get_smb_ses+0x1104/0x1ff0 [ 425.867592][ T9716] cifs_mount_get_session+0xf1/0x450 [ 425.867630][ T9716] dfs_mount_share+0x22e/0x990 [ 425.867678][ T9716] cifs_mount+0xcc/0xbf0 [ 425.867710][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.867744][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.867780][ T9716] ? __pfx_cifs_mount+0x10/0x10 [ 425.867816][ T9716] ? smb3_update_mnt_flags+0x2df/0x410 [ 425.867849][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.867880][ T9716] ? cifs_setup_cifs_sb+0x5d8/0x900 [ 425.867916][ T9716] cifs_smb3_do_mount+0x2d0/0x8a0 [ 425.867947][ T9716] ? smb3_get_tree+0x2bf/0x400 [ 425.867978][ T9716] ? __pfx___mutex_lock+0x10/0x10 [ 425.868012][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.868046][ T9716] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 425.868085][ T9716] ? vfs_parse_fs_qstr+0x163/0x1e0 [ 425.868115][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.868147][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.868177][ T9716] ? smb3_handle_conflicting_options+0x40f/0xbf0 [ 425.868216][ T9716] smb3_get_tree+0x2dd/0x400 [ 425.868248][ T9716] vfs_get_tree+0x92/0x2a0 [ 425.868281][ T9716] do_new_mount+0x319/0xdc0 [ 425.868318][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.868355][ T9716] ? __pfx_do_new_mount+0x10/0x10 [ 425.868393][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.868425][ T9716] ? ns_capable+0x89/0xe0 [ 425.868459][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.868491][ T9716] ? path_mount+0x647/0x1040 [ 425.868531][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.868561][ T9716] ? user_path_at+0xd4/0x160 [ 425.868605][ T9716] __se_sys_mount+0x31d/0x420 [ 425.868650][ T9716] ? __pfx___se_sys_mount+0x10/0x10 [ 425.868694][ T9716] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.868726][ T9716] ? __x64_sys_mount+0x20/0xc0 [ 425.868762][ T9716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.868792][ T9716] do_syscall_64+0x174/0x580 [ 425.868824][ T9716] ? trace_irq_disable+0x3b/0x140 [ 425.868867][ T9716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.868894][ T9716] RIP: 0033:0x7f268639e019 [ 425.868921][ T9716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.868943][ T9716] RSP: 002b:00007f268732e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 425.868970][ T9716] RAX: ffffffffffffffda RBX: 00007f2686625fa0 RCX: 00007f268639e019 [ 425.868991][ T9716] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 425.869010][ T9716] RBP: 00007f268643500c R08: 0000000000000000 R09: 0000000000000000 [ 425.869028][ T9716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.869045][ T9716] R13: 00007f2686626038 R14: 00007f2686625fa0 R15: 00007ffd1d848c78 [ 425.869090][ T9716] [ 425.873166][ T9716] Kernel Offset: disabled