last executing test programs: 4m11.42307102s ago: executing program 4 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="b702000000000000b703000000000000850000007c000000b70000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, &(0x7f00000002c0)="000000000000000002", 0x0}, 0x50) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r1, &(0x7f0000000080)='./file0\x00') 4m9.801663604s ago: executing program 4 (id=16): syz_clone3(&(0x7f0000001380)={0x90000, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x27}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/216, &(0x7f0000001340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) prlimit64(r0, 0x0, &(0x7f0000000000)={0x6, 0xf2e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001400)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = memfd_create(&(0x7f0000001580)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1\x01\x04$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x83n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebbKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[\xf4n\xe5&$\\\xc1\x92\xe8p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3\xa4\xd4\xebE\x1a\xcb\xd8N\xbepF\xdf\x88^X;\x1b\x9a5\x800*\xd8P\xa2\x1f\x81\xe6\x88\xa7\xfb\x8d\xdb\xd5Q\xbf\x1f\xbe\xd7\xbe\xb9\xf3\xb9\xc5\x8f\x86\xbcj\xf7\xd8\xcfh\'\x92V\xfe\x19u\x86\b+}2\a\xc9\xdd\x10\xc5\xf7;\xe76\x814p\xfe2\x1b#\xe7\xbc\xddI\xce\x8eE1\x1b?a\xf2\xa07\xaecT\xd0I>S\xfa\xdf)ZJ\nP\xd4i\'\xac\xd5\xc4\xa8f\xb8.P\v\xfa\xa3\xb36\'2\x9ff\x82\xd9L\x99pJ', 0x1) r6 = dup(r5) write$binfmt_elf64(r6, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x7a, 0xa3, 0x40000023e, 0x2, 0x3e, 0x3, 0x1b8, 0x40, 0x10000000000002ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b2, 0x404}, [{0x3, 0x281, 0x70, 0xff5, 0xffffffffffffff80, 0x97, 0x7}]}, 0x78) r7 = memfd_create(&(0x7f0000001780)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) r8 = fanotify_init(0x200, 0x1000) r9 = dup(r7) r10 = openat(0xffffffffffffff9c, &(0x7f0000001980)='./file0\x00', 0x62c40, 0x0) r11 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f00000019c0)=0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000001a00)={0x38, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x8, 0xfffffffffffffffe, 0xfffffffc}, 0x0) io_submit(r12, 0x1, &(0x7f0000001a40)=[&(0x7f0000001a80)={0x0, 0x0, 0x30, 0x0, 0xb, r10, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r11}]) fanotify_mark(r8, 0x1, 0x48001028, r9, 0x0) execveat(r6, &(0x7f0000001940)='\x00', 0x0, 0x0, 0x1000) setsockopt(r4, 0x84, 0x83, &(0x7f0000001b80)="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", 0xffffffffffffffe9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001440)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r4, &(0x7f0000001480)='l', 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e23, 0x800, @loopback, 0xfffffffc}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001500), &(0x7f0000001540)=0x8) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r3, &(0x7f00000001c0), 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) 4m7.943293062s ago: executing program 4 (id=20): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000000000000f5f500"], 0xfc}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f00000007c0)='./file1\x00', 0x1000040, &(0x7f0000000800)=ANY=[@ANYRES8=r4, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r4], 0x1, 0x3a2, &(0x7f0000000b40)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000f00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) mount$9p_fd(0x0, &(0x7f0000000f40)='.\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="7472616e713d66642c7266646e6f3d7f76ab21732acb4929f2ddcef0cc0b4c69af4603dbadae35ed953b2b88f2f7045be5e63b41"]) connect$inet(r5, &(0x7f00000013c0)={0x2, 0x4e20, @empty}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x4207, r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) bind$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) 4m6.466220986s ago: executing program 4 (id=24): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000008000000000e6ea645c750be2377085889256587d9760e1cec95e21974e24155c42b8f7aa6d860e01fd90549ae93541ed276b509046751e14d871cc7ee025b14616e706a4cf3d896bf08ea6385462c9ffeeae0ad0a9dac6d0b6bf2a607317091b4051757f4585f213fba96215284d48fc26847d0dabe17d307f14042fcfe17d06d108179eb06d87318dc6a7296d57e2e53cae05ee06b8bc0e3440d0fd982624ae38a887965b6669d1968ca4ffd70274384d138cac020e4526e4bd231f610ce8a070"], 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x40, 0x89, 0x0, @rand_addr=0x1010101, @empty}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000018000000000000000000008018112e65", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200400100007b9a00fe00000000b509000000000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 4m5.787491692s ago: executing program 4 (id=27): syz_open_procfs(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000440)=0x1, 0xd, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000500)=ANY=[]) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r2, &(0x7f0000000640)="c0a801010100"/16, 0x10) write(r2, &(0x7f0000000680)="c0a801020100"/16, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000006c0)=0x80000004, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000800)=""/102400, 0x19000) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = msgget$private(0x0, 0x193) msgctl$IPC_RMID(r4, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019800), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f00000003c0)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 4m3.739395645s ago: executing program 32 (id=27): syz_open_procfs(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000440)=0x1, 0xd, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000500)=ANY=[]) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r2, &(0x7f0000000640)="c0a801010100"/16, 0x10) write(r2, &(0x7f0000000680)="c0a801020100"/16, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000006c0)=0x80000004, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000800)=""/102400, 0x19000) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = msgget$private(0x0, 0x193) msgctl$IPC_RMID(r4, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019800), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f00000003c0)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 2m38.648049649s ago: executing program 1 (id=194): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) 2m38.363591576s ago: executing program 1 (id=196): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x2, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb7020000ffffff1fb50af8ff00000000850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x2, 0xdc, &(0x7f0000000540)=""/220, 0x0, 0x1e}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x40ce, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000009c0), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000880), 0x2, 0xa4df7e26671238da) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x1c, r2, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='highspeed', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r5, &(0x7f00000002c0)='27', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x0, 0x4}}, 0x20) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f0000000900)={'fscrypt:', @desc4}, &(0x7f0000000800)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a37337e1bf4f564e4379ac8b8e76066a335e630774a8c007599fce882385170c0f", 0x100003e}, 0x5b, 0xffffffffffffffff) syz_usb_connect(0x3, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) 2m35.448866433s ago: executing program 1 (id=202): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000280)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000380)=0xfffffffe, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf7, 0x2, 0x35, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x4}, 0x1, 0x9ccd, 0x107b}}, @TCA_TBF_RATE64={0xc, 0x4, 0xa508c888da3da3d9}]}}]}, 0x64}}, 0x4000010) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=@can_newroute={0x154, 0x18, 0x1, 0x70bd26, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0xff, 0x5, 0x3, 0xff, 0x9, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x3, "5c8dc9f00000e4ffff004d01ffffff2814edb2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffd, 0xe, 0x5, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x1, 0x0, 0x0, "b21c65427e51a99d"}, 0x721c3304698d924b}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) r5 = dup(r0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000002c0)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000400)={0x0, 0xea60}, 0x10) connect$inet6(r6, &(0x7f0000000540)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000010c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000f80)="41054f144ea9ac678a4e98088cbb2cdaa488b2ee8ab5ff2adaa8b313ad3195afb91f31582fdb7d7b16e0fae9fad7f09da07f687111", 0x35, r1}, 0x68) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xffff380d, 0x8}}, './file0\x00'}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffff}, 0x10) write(r7, &(0x7f0000000080)="240000001a00590214f9f407000904101f00000000010001000000000800040001000000", 0x24) sendmsg$netlink(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1401000032000100000000000000000004015a800c000100", @ANYBLOB="a403"], 0x114}], 0x1}, 0x0) sendmmsg$inet6(r5, &(0x7f0000001000)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000005c0)="f87cd7b9af4b8b5a1e69304835e17929e7f909b608b0eac8256aaa52179db8fd56cdef148fe4aea669f21c609a4d", 0x2e}, {&(0x7f0000000600)="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", 0xfc}, {&(0x7f0000000700)="6c5f7e04bb8517bfbd948f2effa6a4429e6f1e7f87e684ea51f082368e27d9f3577df5e32cc40908aac2944187f91593a5a1b795ec57d9668cdca5fc1280c573afb3d9c85ffb9f8548ac59337cdbc65665fbc18ccd81301fa451110a5c2979352f3e6b98a190b7a40d0724561096e386c3727907a3218f761c", 0x79}, {&(0x7f0000000780)="7b4a741cb75b009fe36a56068c3da0c63c1f5736dd99fed0536e7230acd7464ff837d19336730b719362b90f634e65a4dc5a54ead6915a9c78ad154535ca5ba77663357e7c03d8ada4ab96017730b2f9a78d33836a", 0x55}, {&(0x7f0000000800)="c2d82c275c8894fe43214022e9f38d305ffb56f6601bf2f8c0f2c10ba69036a0e21b437f2dc8ff484d40f87041062a871afc5677512d285f5e8d6dd63ae11ce6822a41d8133e9e432b52530f0130fae606b673837ff51c94fbd455d26f2e37a52eb81e2772db0bca220123fd8caf58c046d620ffd0372fbc9aca7d1c419ec768ad0da10978650cf4819f5cc2ce5fb9c5a1b9d788d98924a5835788ed6fbc78ad28d64dcba30f8d5b9dafa660856aa33363ee35", 0xb3}], 0x5, &(0x7f0000000940)=[@rthdrdstopts={{0x118, 0x29, 0x37, {0x2, 0x1f, '\x00', [@generic={0xcb, 0x5b, "f610868d5795650cdf98829beb9675db9453ae6e01f05ee23a491b5732e16be86f891cf5c6a600ae10f5bc1b49600bc06ae708e1a348e1fcca75e2a557cbf377cdf07fee47209a2d28e362fa799f932688ab6f45a0e5de3bc01b22"}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x101}, @ra={0x5, 0x2, 0x8}, @generic={0x97, 0x8c, "fbb6176ce3190ac3fe0e8d23bf39d84b4c96cbf4bb6569304dce5c9b21cadf61a1a508efa8c66fc72885f32cdf48e135af5f465ece343bd7a04d0d00fef3bac7ca9c87922b61dc4da0af7043ea7cbfa383eec4cd5e9d07930c9a26e2fb31edde40ac26a329795cc0b3cc5c4adf6a659fa57131def88e37511454b3424b023d00908b3c54c2b431a1b5890ed7"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x33, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x3}]}}}, @rthdrdstopts={{0xa0, 0x29, 0x37, {0x29, 0x10, '\x00', [@ra={0x5, 0x2, 0x4e5a}, @ra={0x5, 0x2, 0x20b6}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x18, {0x1, 0x4, 0xc0, 0x0, [0x8, 0x2]}}, @pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x50, {0x3, 0x12, 0x8, 0x0, [0x1631e7bc, 0xa42a, 0x7, 0x0, 0x6, 0x1, 0xe11, 0x80, 0xcf31]}}, @ra={0x5, 0x2, 0x1ff}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r3}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x1d, 0xa, 0xb6253c9da0e8a5e8, 0x3, 0x0, [@loopback, @loopback, @loopback, @loopback, @mcast1]}}}, @hopopts={{0x30, 0x29, 0x36, {0x6c, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x5}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffc0}}], 0x2b0}}, {{&(0x7f0000000c00)={0xa, 0x4e23, 0x18f, @mcast2, 0xebbe1774}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000c40)="231e95f0bb88222fba0ea20ace5d905951d39901741578b0cffa5bfd4767ac3b25f9e3ed3c7f072a18fa14aa55db7b1a6ce5cf1761befae41bd63a14851cbdc5d8c6f952794a2741393e6588c2683c658166b0d625a1a82d7bb733a23139571513b77929e74002cdef7fd2c0b49a83689baec10779ff24559125af522453a023f47bd0b7a42d1da68ae3d2aff4b38a0f27b151253287056ba419857baea04446f53a09eaf09e588942", 0xa9}], 0x1, &(0x7f0000000d40)=[@tclass={{0x14, 0x29, 0x43, 0x40}}, @dontfrag={{0x14, 0x29, 0x3e, 0xded3}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}], 0x48}}, {{&(0x7f0000000dc0)={0xa, 0x4e24, 0x0, @private2, 0x6}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000e00)="878249145441ce0873a6c3fa921af8f932d617ee1c894a3951dc815617e53cf1a2eb014bcd891a1cfa0f00c28dcd79ece7c77092e5bd75aeb401779b43516915bb5e8e8caa394f821577a389c22599cefad79d0147849dadc3f1a6d89d97981aa8dab77479dbb287a0f51509b57bc0acc0e73e3486ad1fd69506ac9ede0af9f44734f3b9b7c42bd8e3f42fb8b8c32e6d8e19ca44582fb2f5185e1a31279f9ac58e032bbf8fdfa59b4c9bd7df09", 0xad}, {&(0x7f0000000ec0)="51ddf8a071c356f9f6a093647d649e8e92e132a3394328fe7c51fa13e6d09dec27561c15d9e6402526f7ed23f5d849b6cd1f500358e8d24b3c4adbecee9cdd5a8e995f2e937c578717fc60143873773f50378f0d3f1756affae9739b36167080", 0x60}, {&(0x7f0000000f40)="284588b14f69820be062c3c1461216eae3f388148d4adfe5bce2250bffe5f32ffbb341f82a9b7f2458d24d", 0x2b}, {&(0x7f0000000f80)}], 0x4}}], 0x3, 0x40000) write(r5, &(0x7f00000004c0)="93932e574b805633e82a9a05361eda670407a2104010b88455d3f79e1658a87bdd910e06a85071b5f19f25d2512d5497f427e6af08efe6d0144d06c02edca3896687", 0x42) 2m30.785004704s ago: executing program 1 (id=210): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x2, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb7020000ffffff1fb50af8ff00000000850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x2, 0xdc, &(0x7f0000000540)=""/220, 0x0, 0x1e}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x40ce, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000009c0), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000880), 0x2, 0xa4df7e26671238da) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x1c, r2, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r4, &(0x7f00000002c0)='27', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x0, 0x4}}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="d80000001a0081044ea1f782db4cb904021d08007b490d4f1e81f8d8150019001105142603600e059474d666ac0e7487ae12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000009fb78e643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006bb9ad809d5e1cace81ed08ffece0b42a9ecbee5de60000000000000000", 0xd8}], 0x1}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f0000000900)={'fscrypt:', @desc4}, &(0x7f0000000800)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a37337e1bf4f564e4379ac8b8e76066a335e630774a8c007599fce882385170c0f", 0x100003e}, 0x5b, 0xffffffffffffffff) syz_usb_connect(0x3, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) 2m28.4860115s ago: executing program 1 (id=215): syz_open_dev$mouse(&(0x7f00000000c0), 0x80004f, 0x19d300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x2, 0xad, &(0x7f0000000000)=""/173, 0x40f00, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000b40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c40), 0x400000000000041, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0x4010aa0a, &(0x7f00000003c0)={{&(0x7f0000005000/0x2000)=nil, 0x2000}, 0xc}) recvmmsg(r1, &(0x7f0000000c80), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r4) mount$tmpfs(0x0, &(0x7f0000000d40)='./cgroup\x00', &(0x7f0000000d80), 0x0, &(0x7f0000000dc0)=ANY=[@ANYRES8=r5]) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000300)={0x2, [0x3, 0x8]}, 0x8) poll(&(0x7f0000000340)=[{r6, 0x100}, {r2, 0x100}], 0x2, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}}, 0x24}}, 0x20004055) socket$packet(0x11, 0x2, 0x300) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x50, &(0x7f0000000280), 0x48) 2m25.383273027s ago: executing program 1 (id=224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4002, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x10cd}, 0x1c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x8710, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0305602, &(0x7f0000000240)={0x1, 0x300, {0x0, 0x40000000, 0x3006}}) syz_read_part_table(0x1051, &(0x7f00000002c0)="$eJzsz7utAjEUBNB5eou1KwIktD2QkBJTBCKnEkQLtEFEgwhkzKcDtME5gcfXGgc3TMK5xeqaTY7j8vP+/8rbdyrbrl773JPMM2uFLkONv/ecvh67MTk8f5Z1ktOQLLqU1ijZX36zHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABM2yMAAP//2qsHZg==") open(0x0, 0x121342, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) exit(0x6) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000001c0)=0x10, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000c38e000000000000003e6253dead0000000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001740)={r3, &(0x7f0000001780), &(0x7f00000017c0)=@udp=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001800)={r3, &(0x7f0000001840)}, 0x20) sync() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x101042, 0x65) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001400), 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount(0x0, &(0x7f0000001440)='./sys\x00', &(0x7f0000001480)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001500)='fd/3\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000001540)='./sys/block/loop0/make-it-fail\x00', &(0x7f0000001580)='./sys\x00') ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000015c0)) write$FUSE_CREATE_OPEN(r5, &(0x7f0000001600)={0xa0, 0xfffffffffffffffe, 0x0, {{0x4, 0x2, 0x7, 0xbb8e, 0x6, 0x0, {0x3, 0xda1, 0x79d, 0x5, 0x10000, 0x5, 0x300, 0xf, 0x10, 0x1000, 0x0, 0x0, 0x0, 0x3}}, {0x0, 0x6}}}, 0xa0) 2m9.947085582s ago: executing program 33 (id=224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4002, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x10cd}, 0x1c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x8710, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0305602, &(0x7f0000000240)={0x1, 0x300, {0x0, 0x40000000, 0x3006}}) syz_read_part_table(0x1051, &(0x7f00000002c0)="$eJzsz7utAjEUBNB5eou1KwIktD2QkBJTBCKnEkQLtEFEgwhkzKcDtME5gcfXGgc3TMK5xeqaTY7j8vP+/8rbdyrbrl773JPMM2uFLkONv/ecvh67MTk8f5Z1ktOQLLqU1ijZX36zHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABM2yMAAP//2qsHZg==") open(0x0, 0x121342, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) exit(0x6) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000001c0)=0x10, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000c38e000000000000003e6253dead0000000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001740)={r3, &(0x7f0000001780), &(0x7f00000017c0)=@udp=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001800)={r3, &(0x7f0000001840)}, 0x20) sync() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x101042, 0x65) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001400), 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount(0x0, &(0x7f0000001440)='./sys\x00', &(0x7f0000001480)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001500)='fd/3\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pivot_root(&(0x7f0000001540)='./sys/block/loop0/make-it-fail\x00', &(0x7f0000001580)='./sys\x00') ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000015c0)) write$FUSE_CREATE_OPEN(r5, &(0x7f0000001600)={0xa0, 0xfffffffffffffffe, 0x0, {{0x4, 0x2, 0x7, 0xbb8e, 0x6, 0x0, {0x3, 0xda1, 0x79d, 0x5, 0x10000, 0x5, 0x300, 0xf, 0x10, 0x1000, 0x0, 0x0, 0x0, 0x3}}, {0x0, 0x6}}}, 0xa0) 1m32.792945528s ago: executing program 6 (id=319): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001780)=ANY=[@ANYRES32=0x0], 0x50) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000100)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000380)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x19, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000000040000000000000feffffff18150000", @ANYRES32=r1, @ANYRES8=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001bc0)={r4}, 0xc) 1m32.47273738s ago: executing program 6 (id=320): r0 = openat$md_sysfs(0xffffff9c, &(0x7f00000004c0)={'/sys/block/md', @num=0x0, '/md/', @array='resync_start\x00'}, 0x1, 0x0) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000040)={'/sys/block/md', @named={'_syz', 0x0, '2'}, '/md/', @array='preread_bypass_threshold\x00'}, 0x2, 0x0) write$md_sysfs(r1, &(0x7f0000000000)=@num=0x34, 0x14) write$md_sysfs(r0, &(0x7f0000000080)=@str='-writemostly', 0xc) 1m32.263287212s ago: executing program 6 (id=321): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x800000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000900)={r0}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='/dev/nullb1', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) write(r4, &(0x7f0000000540)='1', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000f"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7cc0000000000007b8af8ff00000000bfa200000000000007020000f8ffffddb703000008000000b704000000000000850000000100000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r7}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1\x00', 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='loop', 0x4) symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write(r9, &(0x7f0000000700)='transport=loop,nqn=testsubsys', 0x1d) 1m28.683159712s ago: executing program 6 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='mtd0\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt/fillfile\x00', 0x40042, 0x0) setns(0xc9, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file1\x00', 0x1800004, &(0x7f00000002c0), 0x0, 0x642, &(0x7f0000000700)="$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") r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r1, &(0x7f0000000d80)=[{{&(0x7f0000000dc0)=@phonet={0x23, 0xff, 0x4, 0xa}, 0x80, 0x0}}], 0x1, 0x40001) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000e40)={'syzkaller0\x00', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000e80)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000ec0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000f00)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000f40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000f80), 0x0, 0x0) read$msr(r5, &(0x7f0000000fc0)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019fc0)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f000001a000)={&(0x7f000001a040)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r5], 0x0, 0x80, 0x0, 0x0, 0x0, 0x10000}, 0x28) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f000001a080)=0x1, 0x4) bind$inet(r6, &(0x7f000001a0c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f000001a100)=[{{&(0x7f000001a140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f000001a180)=[{&(0x7f000001a1c0)="b9cd14c222", 0x5}], 0x1}}], 0x1, 0x20008000) recvmmsg(r6, 0x0, 0x0, 0x100, 0x0) r7 = syz_open_dev$sg(&(0x7f000001a200), 0x6f5e, 0x2) ioctl$FIBMAP(r7, 0x1, &(0x7f000001a240)=0x85) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000880000007600000000000000270000000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0xa, '\x00', 0x0, @sock_ops}, 0x94) 1m25.876075601s ago: executing program 6 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='27', 0x2) getxattr(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc) setsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000500)=0x400000001, 0x4) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f00000004c0)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000600)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000680)=@new_dev={0x4, 0x3c9}}}, &(0x7f00000006c0)=0x0) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000ac0)='./file2\x00', 0x2200400, &(0x7f0000000b00)=ANY=[@ANYRES8=0x0], 0xfe, 0x15a, &(0x7f0000000b40)="$eJzs0L9rGmEcx/H3c/f0FKrYUgtSaBU61FYKrYVupXilUqH2oKVLJ8Fef4BiiJC4JRKyZRCyOuTHGgKZMmp0CAk65Z/I4hbIaLg7ExPif5Dva7vP9/l+nuP5/GGYVkx9qlXn5t163f2d+u4U8z9OO52cl1vQ2LsxD853c/APTVfDqAle3I/Cn/8V1yjXKt73KAchwL4/yanGLu+z45qmhrcE++nn0HvsnzO4le1f/ecTDXYs6HsDjDfhhQX2wyDz+s4AkzDKmiw9NVktZJKPFDTamd2d42+Do8LrVx/dtWy+9TKSMDNLsIWtwof9vyfmZGs4KH51is7wXTb7/tpLsdxCf4kswC8F2usz8PssEs/0T1hRsO7fNTpQUaC3ce5UQ9OCRTMFKtkulxL3tkvxBwZmWnuTMTP4E8KzRkIIIYQQQgghhBBCCCGEEEIIIe66iwAAAP//aPdRFg==") openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x101042, 0x15) syz_mount_image$msdos(&(0x7f0000000d00), &(0x7f0000000d40)='.\x00', 0x1a5a438, &(0x7f0000000d80)=ANY=[], 0xd, 0x0, &(0x7f0000000dc0)) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x42, 0x100) syz_ublk_setup_queues(r4, r9, &(0x7f0000000700)={0x0, 0x0, 0x1000, 0xfffffffe, 0x1fffe}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0x2, 0x69, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefffe, 0x40, 0x0, 0x15f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x80000, 0x3, 0xffffffff}}], 0x1, &(0x7f0000000a00)={0x2e, 0x4c, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000a80)={0xfffffffffffeffff, 0x0, 0x1}) 1m22.724556827s ago: executing program 6 (id=338): r0 = syz_open_dev$mtd(&(0x7f0000000440), 0x0, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x160341) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="73701257f3bffd5c46db8cf3d2000000000000000000"]) ioctl$BLKPG(r0, 0x1269, 0x0) 1m18.374820077s ago: executing program 34 (id=338): r0 = syz_open_dev$mtd(&(0x7f0000000440), 0x0, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x160341) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="73701257f3bffd5c46db8cf3d2000000000000000000"]) ioctl$BLKPG(r0, 0x1269, 0x0) 49.158208162s ago: executing program 7 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000840)=[{0x0, 0xe1, 0x3, 0x0, @time, {0xf}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000880)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000008c0), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000900)={0xa, {0x8, 0x1, 0xc}}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r3, &(0x7f0000000240)='1', 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2d, 0x29, 0xfc, 0x1, 0x15, @remote, @mcast2, 0x20, 0x10, 0x7f, 0x9}}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) 46.189475369s ago: executing program 7 (id=407): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000010000006910480000000000634ac900000000009500080000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x3e0, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x1a, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x12e}, 0x76}, 0x21) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000540)=0x1, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000580)={0x1d, 0x0, 0x0, {0x0, 0xff}}, 0x18) sendmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000600)=[{&(0x7f0000000640)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0xffff, 0xe}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) 45.833562802s ago: executing program 7 (id=409): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x43cb1, 0x80, 0x1, 0x20002f7, 0x0, r0}) msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x8, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES16=r3, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x20004000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="c5cbe77364c2fb0d063113daf611f5263257d3636a0c68b98591655476539055981695e8c2bfbef4ac261542b000d70e32aabda138844eaeec4541a58d84a20d1203b564a325f7621cb338b6669e811dc4dab837fa7200f5642de2b615b9558e67af39ddbcaaeff686958a5ef5a5e01dd4a981264998fed9a82452543d5960e7ba8433dadfabceb8cddc74430addf77975f510cd6ae3b0", @ANYRES16=r4, @ANYBLOB="010029bd7000fddbdf251400000008000300", @ANYRES32=r6, @ANYBLOB="0c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008011}, 0x4004014) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r7) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fcdbdf252e00000005002b000300000005002e00040000000c0005000200aaaaaaaa0000000000001ad32d6962bf8d8a63c8de7e2fcfca3c5855d40692777f7c5a3f09415b3bdaeba082d058bbe9b85c9d153b8bf7c183bc49eeff9f83360c6636142fb2aa818319c95598fd7349", @ANYRES32=r9, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r11, &(0x7f0000000600)={0x28, 0x0, 0x2710, @host}, 0x10) r12 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r12, &(0x7f0000000640)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r13 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r13, &(0x7f0000000680)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r9, @ANYRES16=r4, @ANYBLOB="000128bd7000fddbdf251f0000000c00060002000000000000000c000600030000a02a27c30008000300", @ANYRESOCT=r9, @ANYBLOB="af", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="dbaa00fea07f653600000071101d00000000009500000000b072f64ea928367f6505a82086899056ed5dda3cea071b5c923f000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0xa4}, 0x90) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 45.525727807s ago: executing program 7 (id=411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000500)="1c0001000700aaaaaaaaaa1180", 0xd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x10, 0x10, &(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_emit_ethernet(0xbd, &(0x7f0000000fc0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x87, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x40, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x4, 0xd, "9f01576f69fc07d122eac9ee1bcec72ea0a6aa8625e87a174309150e83bdf8fc671d9dd90f32dc9a8b46703796c954c1e208d050c88ce0006eff35f8b0510690b594aade2ec5cb3da82870bf24963382f23c15be7e572ba7f6ff48688241b56f99a7462124bd9f7a0b5306"}, {0x2}]}}}}}}, 0x0) r3 = syz_open_dev$ublk_chdev(&(0x7f0000000440), 0x0, 0x101001) ioctl$UBLK_U_IO_COMMIT_AND_FETCH_REQ(r3, 0xc0107521, &(0x7f0000002080)={0x1, 0x54c, 0x9, &(0x7f0000001080)=@buf_4k="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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='mtd0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000480)='\\', 0x1001}], 0x1) 44.979706599s ago: executing program 7 (id=412): r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x18, &(0x7f0000001240)=ANY=[@ANYBLOB="66d98254c5d7917101c372", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',default_permissions,blksize=0x0000000000001800,max_read=0x0000000000000001,blksize=0x0000000000001000,blksize=0x0000000000000000,blksize=0x0000000000000c00,allow_other,euid<', @ANYRESDEC, @ANYBLOB=',permit_directio,\x00'], 0x0, 0x0, &(0x7f0000000200)="b252bb099e2cf6c7bed0b5085cef72c0c785f1c73a840bb64dc71508b67828a495ea71dbab3390816c86c4784fe6f51f024dcea12b72a089f9e40efa0c6c6ce01716d6a993a9c08b9f983bec91b53705e89b03b659348d113eefd0b07bec1addaea4bbe496eef2faed48c820e2f837a6297dbfb01bc6ec84012b84b74115b4f2ff27eab67270ca14218c420d9e104462c81c5f2598f3023f442f8acf7949973016ba4fa3142427eb58ceaa880a3b92d4c4876bc699144828c4f5e08988145d09314485a914f00e0b8c103e6fc596fb490aed35aa08517be46cc0ee05149188cffbdc1d6aa75fde98ef1b9cc42201c65913d3fb741fa4d1a174a8fcab5b6121b8725df9ae154ae3a8b6e451f9e9511b445452d02288a9e0eeefa6a2984f97705d5e9d57f8a5f5775ca6e3f3726e42338d0026c3dbc9170371b4608d7500ccfab9cd2129d5c86d8e0a621517381711697191941c320f15ca38f7eaf97297ea3b11e619ccbc947f8598bde9f0edd30d4e565058af5ec7c61e9c33bb03635ffa896d97d4f55f58040c1ec1928d0402bc43ffd930a1131385d5411cd3856e1c284a436b7ea6802003ee98c5f769887b9c7814b0c9f92d2dc60e4647aeeb610ab6dd6ab1b8c6decf80908287b00a92dd2978684ae1d798e376dc7c04d5bf0d8c6f3fd1c762facf7ec6ab73f44324eae5eb54a4bdbe8d68a7ad7e24ac95451bf218abe59cb13845758e7ce81ec506d7a18bb24985b7b6913e6dc3f9b8a9899fd51c8cd6f347ba1eab7a57eef01dc192677494df0de77c105701d8b523a9baa6febe9c68e3080c82486d11fca1e293006785a30d4960728fed08689f40ace729a1f6001bc34c9dba5e05dd8808acf256610aaa0396d7e006409f36d360d2f1a765fcb2e441c1335a9157478a22f834534a54198cbb667521d2f88e0503cf8d99706e9d5b16afda34bcd41075da57bf1724542e32df6f34ffb4ae152d8795a7e475967a27b86cae901b20c1fc8f10cfce5a425d06e87168e2a5bb0591ad0c674ba7921c789034974a08ad8bfd0846e35e1ed1d208ee268892c38106efa27e139d337c1c6b5f0d62a18cce98d7f2561d505784ed706c0777d15abdb641ddff4e8eebfe94e48d0b60cb824d784f09f6184f36d06596c428f2c270275ec4aedf22d623ef438fbc2b5224703599c7d0bf6ddda8c417b03cdf7d2b271a0f86a59d8def62883d166b420e87dad0b11f8392a6d07abd3a556e936e26633ff4cd2faa4541edd26709a0eecf86fcb8fcddb6544560e99989b30a049dfd7295c9fceab06e351f440ee6ade43b3d8e6103f01b1a07a4abdae02eef32e1e94a870c075fd4ca57026066144cab2bc97f3a47d21677837bf1c3ecca8068ca75563abdf4b792732ec8e4b0f4daddd0c0e7b1dac6243a106908ea91f5a93148abcfdeefa7d18eb5008769153d8694a7a995b21acbe70b078f3aac90cd34593a90679a15e085deb8280734ee9f2833e64652ea3f3ef1e7912cb86467dec565a444415ec97c25c904a5be75a12df9bef871891b9a5307d3c907c17794014e4993fad1ef5a455d16db60f654a9b3617424f2b9a3022e4bab752e7a15d2c3cd21d44df49dc96ac80d327bed07942e9d28b21aa0bb2de5eaf13cacb682b175f11dfe2787d46d208771fb431e85016dbb1687e66b84926ade7eb0d5bac35157461f742846f600439d0243a99babf6a37b8dec40ef271015b4512a2b61ac63fdec2cb26c69b60da8a5071fe978a4a82e8bb4c35ccd9ec5e0edece5bd83e2706b5b4fffa2b975b7dd96b1d480d8a646a7a583650580e053c9ff91a6da55b59bf4acba935b58abdfa1618ff07d25b5d44939e2e956b02896a4f055ac136b643ad71090158c02577cec4a583339bed4ddf7125dafacf1cc5cd2c308272376907d90538251bbf3900b3dd11a71fd83dee2f40fb1ea1fc969c64c9c7b6632e4e4c416bbd8457faf70e5e02d9a3a602c0ef95fce2eed569a6dedd361e15c684c539e58568feb2341ff7fdbc40cc7609cfa116ea044416f5d219c3edff54fa40835353e4d3842ae007b0a37086c6d135df8d9bc9a55a64ff9f81583d544d3be67d6006437e9b3507fe3f43fbff99317fdc8b604ebbcb3ae246593c4fcea6808830257b23228b235f1969baf905b21050291c91d50968d8d03bd66d2f89d567f5ab8d535da876db08c8de7b29dc9e8a83abbcae7a0d88313969f7df519e50ae140127f55b1035840906d1d4e37648375f71b5814b4e151fc3edc1ea1275ac23c2450ca86285a097f8be1742e607908ae8c8cce0424fa2be76e0d5cf248d9a9abaa14ab174e4a4152bade494c2b55a46d67d383ed49a21f986aefaed6c8bfc7f2c494ecbfc572722eb463ea139c66871bdded8097174f01753edb5287ae8d1389d830fc60b7343e125eb766fa54bb5546f8b1e997b3712bfb5203a956e27d9ae82930bba6de6ea29bedc362de9108bfc0c5fb059e8dea04540bacc9de31fca54a99af3da721eae43a8391861b36f72e868d856f12c9b90f1dba8301792e4131dcc853e9103dc5bfd484040003d53b47f22b515c50c2c7c75cd79da29c04c8f54a559eb8b6145244edc9a34723fd38ce8386e9400b09756025de554d0a3a1d2207576787b364b4840b72f5b9b453fbdb9be26af86f0a8e60895fdeaa73bf07535d6428807abeb85683924daebd813856cf607f5ee5fa37a1f17a50833aa1d8680fd1a1aa947d5f2e22efe6dcf92ffcf885c7a18bff1c751f64fb1135ad1cc389feab5b7ed319690af405491924a21f8b9767bb250b12a253077c25040375bbee3a2abdc8a470f8f1db6b37e4d6f11ddec7f622908ad5cbc43d08da96c3c0ed700c1363545b2d780d45548a888deaf85d4144ab1ddeec6259415b1fd06510859b36bbc3c3bc4b0b680f98c5bb0ae59c548fd4a2108365e414b9cc9a87d647a9faaec92cb5933a76174740cbdd629598dff2130ba2a473c70169525c68440d65405185dd9b7234bcab52bc7905de665c2224992185d74af24187c8d8c8b252aa7b3654b89fd2f6773eec164790483da8af8e192e0f205342cbec231042c8a38c1a97e1e0d40fe95277315f989fbb9e254d5f2a2ab65f75cf5c6cfe0e880454f1381cd59228b35a25f4aa456f3f96272572168a7a5fa2cd45507901623c61fe4ccb36ac13d2735653f40de6c67230581a29550daeaa11468f905bca1a0eac95b810a25be2e255fd47fa79a0f2ee322a47094efa93fb6bab2fed4b21a612371bfe813572400cd5122a75b8f9c21a252166cb94e8a55a762e7607ba12421b9e8780847dbf9048eef1087f017c2f7819de0769bfaaceca427e3ecb22f409aa0e5f3be278a251b2c48e570184fbd8789e3b3bebced6f5f0652c43da65d6bef3341f9738eb778231c39d0ac6c58bc9db9ded9a9da687b0096299bed3158ab8e3951032f2042dd2e52373972f94906a334000710fa08021ecde8549785687ada3dad8c02da5c7b1de1b13f9dbce62b8c3dcff2f8d1b86ce013242baaf5489f0e3ff9d7b83d63e0af51e5b24c9e2c6b020be9a541b2cb50af8cdaaf7456f5e6a001408c029fbf7b842287175b18042a7133da98d3dd744e7e2feca1dacf58bd6a00bf6b345b4a9786715d4b623f3953acbb456a696e9f0974c1e786632f2defdc590e010a0f651b04aca6f1f5173f2f7180dbb65487aa04f1b1ebab64588dc13f339064e137d23fe2af8bb8b841fad7c969406bc7d2624bf2f9f27e8995da4cb3e8924d772a7919ab13b719453732a91c8d9d073260d8d870696a7b1c3935f13a02346e74966d23d4443d9b00513e1671a792df025060fcf7658eb740182f1f8ae41a541c3957e1c94209b309b34d08d8b0936fbe4c7c74d89290d5581a4a62a6a16877b66e1d426a0f8aa80a7c59b1a3920a74d0a9c044e2b48612611ecf30979c34ab5ecfc0d8a1ae11f2229a507fe269f3a561f5325ae18b8f8cde2b08fcaab672fe2aa136a6c9b3c24bfc8f165ca6dc73069cacf2f091a355b252f2555d29cc90022dd42fcc30aa2716c7419b8502e1eaa0965aea4fbc2915a007b1c8d00a3aec5cb08a45d82a41966b52fe67aca461d800f9d0d111f6ad527a9d6a5c5c0b3b19387f2ef67309542c99ca19220bef060efef6b5a4dec11e0b2784f65b5462f4f5955f1e69ed676f89f26b240c3d82d7e2ab0a7f3359c80c282a4d3f91c8b7679b41069c757c29405b0edf9fc5b6996ea7d91109a8a6e81c064759671f2c3c2aaa16fe65c4af8102633d41a0d6d81c858b02422ee91dd893ab67e96317e7faf4a529a52376eea729fe091bba15726497a355a566c1df9699f2b9879b052aad8fe5f67fce70504ca2bb2d39b446953a7ab97bcfe31e16c9fddf6d31351e148ca0b43b33f09da242875592408f5d67690371d1b4e934df590b599b7dcd384b96436ded3055d67e72333060c81bdc3a13d4d3c03a34c8b40816f3612aababd1bd53cd1c6c4468578343f8b4b9c6cdf90740a582a70e387b34e0da8fc8e7f90e64ed17090e6bc0a97b6800004ec415ccd53eab5a2d09135baf431aee5af8f53b71233cd3e2ecbf260943b4d06c38175b2207c3632378d878761bbee494a9dc79af3bac2ef39a1353caaf355b7e8c002bb9c931ec87d73e3508fb7d7f7687a210da40f40f98bf42bd62162ebbb91779998f8dd3a77a16207e5425d14e114ad990667efbbf8efd489b21a04d0c6cc493edeb40ffa442ec3348f2dd8803477416ed3692e26fe9dd25882644a5e9d99af6b1a6971594d504457066d8a9c6a10fbfe4f39dbed09175b1e67d7b0d8c25ce4d1aa589e8cfe272a0c7f9f1b00e8bc11886e096d2fe6170db9267ca52eff0410852ae306a59b96f450a0ad8f64ba70f23e7c59742c356d6da69256c07a1c1647cfbe04f8dbd63f8ab8cc2811817c207941007b19b6be462e14dad35be6decb2a5999d493436a4b3fea5c35bce424ac88412964b40428219ebe1dc92b578fdc6b5bb8fae2aa2d49868e461d5c6ba41d9d07320bf6e80fae1b495a482ede8a372b534f8ccfbfe8edc091ab98a406beb5ae030f12adeda33ff8259beaf34a0ddd6f1730f1e481cb9379430b727e7a6638bf0d0089567fe0a078bb44b561ac9b42e5c3362c195248ec2fb0e1bc1bc8f4cf172f1a64bb0cab84bf2ec9a64d1b570b682247c96e3643763554870702485173af8faaa9b80689e52d2fd6ab52ef9b2d25642f1aa0292d17f979590473794250e5594f3626bae5a47118781606b46daf4768ceb377907ac8ba633748ef7856ef9b0034f5e2cce034a671dc002f1d0239e41a7f4eb71c590ad26e95490a6d919989452fd6a65908b1d1b71f9bc10781908c19b633bcde750ba9520c2a7228e60e6d51aa896b7390ea541e45c61d6158e67a6b5b1dc099b8a1e3d53e8bf7138e198ae365835a0dedb3df2026e6e6abca402b61238c49df2431c77f8756d83d95aaa50a0aebb3d4ba6dc8b6edfec83562273b7aaa93a71efd5384c94bfc8d58151664f368456c13de3d1705d144a7d65a6c68b027f89f33ad0d8ca57126ba2f2f05a56e893785672518ffe76e8cd7c9159bb18d44b9a3fd344c1abc5cae2b8667dd9bf9cd5d409fc700707bdea3621112f1bb00c2c18f730b29fc788502b371c568ae97a2aaa081a7d6e6213ae820b2d43bc14659d282e1f40b402511f80018d914c15323ec7d9e3367c4f9ea3b780971a11fb328367c42f0fc017265af007b7874cf08732a5ff24be3b23ba8cda48e3f2ede2c55a36441b21ba321475648") mkdirat(r0, &(0x7f0000001200)='./proc/thread-self/fail-nth\x00', 0x4) mount(0x0, &(0x7f0000001640)='./proc\x00', &(0x7f0000001680)='proc\x00', 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000013c0), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000001500)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000001540)={0x0, 0x20}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000001580)={0x2, 0xfa}, 0x2) openat(0xffffffffffffff9c, &(0x7f00000016c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x202000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001440)={{}, {@void, @max}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x4, &(0x7f00000001c0)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000001740)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001a740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001400)={0xffb7, &(0x7f0000001480)={0x0, 0x19, 0x2, {0x2, 0x21}}, 0x0, &(0x7f00000014c0)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0xf, 0x650000) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f000001a780)={&(0x7f000001a7c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x1c, 0x0, 0xa}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f000001a800)={0x0, 0x0, &(0x7f000001a840)={&(0x7f000001a880)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 20.742912403s ago: executing program 2 (id=455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x5, 0xffc, 0x1000, &(0x7f000094f000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000480)={0x1008000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000004c0)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000580)={0x10000, 0x1000000}) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x2000, 0x4}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000005c0)={0x10000, 0x1000000}) 20.39215865s ago: executing program 0 (id=457): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x1818e58, &(0x7f0000000280)={[{@errors_remount}, {@grpid}]}, 0x22, 0x63f, &(0x7f00000002c0)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3") mknodat$null(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1d4e, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000001c000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x0, 0xfc) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) 18.480900531s ago: executing program 0 (id=459): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000840)=[{0x0, 0xe1, 0x3, 0x0, @time, {0xf}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000880)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000008c0), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000900)={0xa, {0x8, 0x1, 0xc}}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r3, &(0x7f0000000240)='1', 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2d, 0x29, 0xfc, 0x1, 0x15, @remote, @mcast2, 0x20, 0x10, 0x7f, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0700000083000000060000000800000000200000", @ANYRES32, @ANYBLOB="06000000000000000000000000000000000000007a71762a078c5cc8b2c89cc2fe097dd494d45759361acdebe7e69a3de0b0dd362e1839c8ac5f94f9e33461ad5aaf79c64d8f1601150162fe673d752936b6ecee6b5efd4881a87640bfb27c687f222975a2ed7062a7cf212229815fc1c079e6eeb1e44eea83d419524b40010c7c2ee4338383b6052dbb2fefe4d94bbc558e380ed604fec379f09313a1c31dd7cb9b141b64ecf64d5e3252af56be00489503ad04eac7e0f1e605993e17b9d939c9a116dc747d18e051e8d728d737", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="000000000400"/28], 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r7, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000640)={{{@in=@empty, @in=@empty, 0x4f1f, 0xfffb, 0x4e23, 0x2, 0x2, 0x2a11bad3d5f03f04, 0x0, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x104, 0xfefffffffffffffe, 0x4, 0x4}, 0xfffe, 0x6e6bb0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@empty, 0x210005, 0x33}, 0xa, @in=@remote, 0x0, 0x0, 0x1, 0x17, 0x7ff, 0x0, 0xfffffffb}}, 0xe8) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000940)=[{0x3, 0x2, {0x1, 0xf0, 0x3}, {0x2, 0xf0, 0x2}, 0xfd, 0xfe}, {0x3, 0x0, {0x2, 0x0, 0x1}, {0x2, 0xf0, 0x3}, 0x1, 0x2}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x2, 0x1}, 0x1, 0xff}, {0x1, 0x1, {0x2, 0xff}, {0x0, 0xff, 0x3}, 0x2, 0x4}, {0x1, 0x3, {0x0, 0xf0, 0x1}, {0x2, 0x1, 0x2}, 0xfe, 0x1}, {0x1, 0x1, {0x0, 0xff, 0x1}, {0x1, 0x0, 0x1}, 0x1, 0x2}, {0x0, 0x0, {0x0, 0xff, 0x2}, {0x0, 0x1, 0x2}, 0xff, 0x1}, {0x0, 0x0, {0x0, 0xf0, 0x2}, {0x1, 0xf, 0x1}, 0x2, 0x5}], 0x100) sendmmsg(r7, &(0x7f0000000740), 0x2e9, 0xffe0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) write(r6, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000400), 0x200) 18.467585446s ago: executing program 2 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000140)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f0000001300)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==") (async) r0 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000140)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f0000001300)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000006400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000006480)=@abs, 0x6e) socket$l2tp6(0xa, 0x2, 0x73) getpid() sendmmsg$unix(r3, &(0x7f0000006500), 0x651, 0x0) recvmmsg(r2, &(0x7f0000006540), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000006580)='ext4\x00', &(0x7f00000065c0)='./file0\x00', 0x200000, &(0x7f0000006600)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f00000066c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000006580)='ext4\x00', &(0x7f00000065c0)='./file0\x00', 0x200000, &(0x7f0000006600)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f00000066c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000006c40)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000006c80)='./file0/file0\x00', 0x2) (async) renameat2(0xffffffffffffff9c, &(0x7f0000006c40)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000006c80)='./file0/file0\x00', 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000006cc0)={0x4, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000006d00)=0x6) openat(0xffffffffffffff9c, &(0x7f0000006d40)='./file1\x00', 0x42, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000006d40)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x90001) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000006d80)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x200, 0x8000, 0x3d, 0x500, 0xe, 0x9d0010}) (async) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000006d80)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x200, 0x8000, 0x3d, 0x500, 0xe, 0x9d0010}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000006e00)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000006e40)={0x18, 0x6, &(0x7f0000006f00)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e500020000000000e500fcff00000000850000001e0000009500000000000000d1a2ace4e64100b55e7ffa1b66e605851c3059d81e6866e10d1f153ceb9fdf50e1f61ebca907c32c226d7e6c7b7c9d3ba0519da548a00360f19e394d8a3fbc89066790fb2d8152e0b77c1cbaaa1042cacb8398db5e816770a5b75396cfa3f981df101f24e98b44892eb161c3775daaa6b8"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000006e40)={0x18, 0x6, &(0x7f0000006f00)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e500020000000000e500fcff00000000850000001e0000009500000000000000d1a2ace4e64100b55e7ffa1b66e605851c3059d81e6866e10d1f153ceb9fdf50e1f61ebca907c32c226d7e6c7b7c9d3ba0519da548a00360f19e394d8a3fbc89066790fb2d8152e0b77c1cbaaa1042cacb8398db5e816770a5b75396cfa3f981df101f24e98b44892eb161c3775daaa6b8"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'macvlan1\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0xffd]}}}}]}, 0x88}}, 0x4008000) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0xffd]}}}}]}, 0x88}}, 0x4008000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 18.2294807s ago: executing program 5 (id=461): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) getpid() r0 = gettid() timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000002c0)) syz_open_procfs(r0, &(0x7f0000000080)='net/rfcomm\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x2, 0x0, [{0x1, 0x0, 0x3, 0x2, 0xfffffffc, 0x2f276b7, 0x14}, {0xb, 0x1, 0x3, 0x43c77ce, 0x85, 0x0, 0x9}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x79, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x4}, 0xa}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002abd7000ff"], 0x1c}}, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f00000007c0)={0x6666666666666ca, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}, {0xc0000001, 0x10000, 0x4, 0x1, 0x203a, 0x9, 0x200}]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000006c0)={'aio_iiro_16\x00', [0x100, 0x9, 0x2, 0x10, 0x9, 0x5, 0x8, 0xfffffff8, 0x80008, 0xfffffffe, 0x7, 0xfffffffd, 0x7, 0x2, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0x100103, 0x80000003, 0x489, 0x7, 0xffffdffd, 0x20001e59, 0x6, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0x1000]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000640)}, 0x20) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1e9) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 17.595846772s ago: executing program 0 (id=463): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000b80)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14.507839436s ago: executing program 3 (id=464): prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x123, 0x0, 0x0, [@typed={0xffffffffffffffbc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x2e}]}, 0x28}], 0x1}, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000001140)='[\xc0\x00', 0x2, 0x20, &(0x7f0000000100)={0x4, 0x6, 0x8, 0x6}) mq_timedreceive(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x2, 0x0) 14.460833602s ago: executing program 0 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x21c0, &(0x7f0000000340)={0x0, 0xca23, 0x200, 0xfffffff7, 0x100019}, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) 14.2677768s ago: executing program 5 (id=466): syz_mount_image$xfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x4800802, &(0x7f0000000200), 0x7, 0x9864, &(0x7f000000a240)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x25) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000000)) fallocate(r0, 0x20, 0x0, 0x8000) 14.161183731s ago: executing program 2 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000840)=[{0x0, 0xe1, 0x3, 0x0, @time, {0xf}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000880)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000008c0), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000900)={0xa, {0x8, 0x1, 0xc}}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r3, &(0x7f0000000240)='1', 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2d, 0x29, 0xfc, 0x1, 0x15, @remote, @mcast2, 0x20, 0x10, 0x7f, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0700000083000000060000000800000000200000", @ANYRES32, @ANYBLOB="06000000000000000000000000000000000000007a71762a078c5cc8b2c89cc2fe097dd494d45759361acdebe7e69a3de0b0dd362e1839c8ac5f94f9e33461ad5aaf79c64d8f1601150162fe673d752936b6ecee6b5efd4881a87640bfb27c687f222975a2ed7062a7cf212229815fc1c079e6eeb1e44eea83d419524b40010c7c2ee4338383b6052dbb2fefe4d94bbc558e380ed604fec379f09313a1c31dd7cb9b141b64ecf64d5e3252af56be00489503ad04eac7e0f1e605993e17b9d939c9a116dc747d18e051e8d728d737", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="000000000400"/28], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) 13.369860195s ago: executing program 2 (id=468): syz_open_dev$mouse(&(0x7f00000000c0), 0x80004f, 0x19d300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000ac0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000b40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c40), 0x400000000000041, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0x4010aa0a, &(0x7f00000003c0)={{&(0x7f0000005000/0x2000)=nil, 0x2000}, 0xc}) recvmmsg(r1, &(0x7f0000000c80), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r4) mount$tmpfs(0x0, &(0x7f0000000d40)='./cgroup\x00', &(0x7f0000000d80), 0x0, &(0x7f0000000dc0)=ANY=[@ANYRES8=r5]) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000300)={0x2, [0x3, 0x8]}, 0x8) poll(&(0x7f0000000340)=[{r6, 0x100}, {r2, 0x100}], 0x2, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}}, 0x24}}, 0x20004055) socket$packet(0x11, 0x2, 0x300) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x50, &(0x7f0000000280), 0x48) 12.015569998s ago: executing program 2 (id=469): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000b80)=""/102392, 0x18ff8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140), 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000480)={0x0, 0xffffffffffffff92, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 10.275009434s ago: executing program 2 (id=470): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x143102) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @remote}, 0x0, 0xfeff, 0x8}}, 0x26) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f0000000680)="a6", 0x1, 0x24000045, &(0x7f00000006c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000700)='nv', 0x2) shutdown(r5, 0x1) r6 = syz_open_dev$ndb(&(0x7f0000000740), 0x0, 0x20600) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) 9.703392507s ago: executing program 5 (id=471): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000b80)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019b80)=0x7) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140), 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000480)={0x0, 0xffffffffffffff92, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7.979593297s ago: executing program 5 (id=472): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000b80)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019b80)=0x7) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140), 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000480)={0x0, 0xffffffffffffff92, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.772544244s ago: executing program 3 (id=473): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000840)=[{0x0, 0xe1, 0x3, 0x0, @time, {0xf}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000880)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000008c0), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000900)={0xa, {0x8, 0x1, 0xc}}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r3, &(0x7f0000000240)='1', 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2d, 0x29, 0xfc, 0x1, 0x15, @remote, @mcast2, 0x20, 0x10, 0x7f, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0700000083000000060000000800000000200000", @ANYRES32, @ANYBLOB="06000000000000000000000000000000000000007a71762a078c5cc8b2c89cc2fe097dd494d45759361acdebe7e69a3de0b0dd362e1839c8ac5f94f9e33461ad5aaf79c64d8f1601150162fe673d752936b6ecee6b5efd4881a87640bfb27c687f222975a2ed7062a7cf212229815fc1c079e6eeb1e44eea83d419524b40010c7c2ee4338383b6052dbb2fefe4d94bbc558e380ed604fec379f09313a1c31dd7cb9b141b64ecf64d5e3252af56be00489503ad04eac7e0f1e605993e17b9d939c9a116dc747d18e051e8d728d737", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="000000000400"/28], 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r7, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000640)={{{@in=@empty, @in=@empty, 0x4f1f, 0xfffb, 0x4e23, 0x2, 0x2, 0x2a11bad3d5f03f04, 0x0, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x104, 0xfefffffffffffffe, 0x4, 0x4}, 0xfffe, 0x6e6bb0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@empty, 0x210005, 0x33}, 0xa, @in=@remote, 0x0, 0x0, 0x1, 0x17, 0x7ff, 0x0, 0xfffffffb}}, 0xe8) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000940)=[{0x3, 0x2, {0x1, 0xf0, 0x3}, {0x2, 0xf0, 0x2}, 0xfd, 0xfe}, {0x3, 0x0, {0x2, 0x0, 0x1}, {0x2, 0xf0, 0x3}, 0x1, 0x2}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x2, 0x1}, 0x1, 0xff}, {0x1, 0x1, {0x2, 0xff}, {0x0, 0xff, 0x3}, 0x2, 0x4}, {0x1, 0x3, {0x0, 0xf0, 0x1}, {0x2, 0x1, 0x2}, 0xfe, 0x1}, {0x1, 0x1, {0x0, 0xff, 0x1}, {0x1, 0x0, 0x1}, 0x1, 0x2}, {0x0, 0x0, {0x0, 0xff, 0x2}, {0x0, 0x1, 0x2}, 0xff, 0x1}, {0x0, 0x0, {0x0, 0xf0, 0x2}, {0x1, 0xf, 0x1}, 0x2, 0x5}], 0x100) sendmmsg(r7, &(0x7f0000000740), 0x2e9, 0xffe0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) write(r6, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000400), 0x200) 6.660529698s ago: executing program 3 (id=474): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000a80)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7\xc6yE\xa8\xd6A\xe8*\xedEd\x14m|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6E&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/717, 0x2) ftruncate(r2, 0x80079a0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000740), 0x21041, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000780)=0x19) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000d80)="95e8ceef0538f18043da4f4d92cb71eabd7b11d3b995315d197e50411b3054fd2429836398c5b1fc8345c1aaa10367fb50254abae531d5a9", 0x38}, {&(0x7f0000000dc0)="628a4ec6b031a69f88935d1a806f27ae7c4fa954a923a641d3eb469cd8f9d6b4db95012b27fc87932674eed61d71b640ebebd8f14a602fd24793775370665d9581273a24d737771c83a1b8", 0x4b}, {&(0x7f0000000e40)="68b7e5c54a4edc3b9310676f9f59e6d751", 0x11}, {&(0x7f0000000e80)="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", 0x76d}], 0x4) timer_create(0x0, 0x0, &(0x7f0000000700)=0x0) timer_delete(r4) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fcntl$addseals(r2, 0x409, 0x19) sendmsg$nl_route(r1, 0x0, 0x4040) r5 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x14c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000540)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r12, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000500)=r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r13}, &(0x7f00000005c0)=0x2, &(0x7f0000000600)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r13}, &(0x7f0000000680), &(0x7f00000006c0)=r11}, 0x20) close(0x4) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r9, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x3, 0x1a5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x362a, 0x8, 0x2000, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x40, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r15}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 6.37881964s ago: executing program 0 (id=475): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000019c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffff20b}, 0x50) timer_create(0x3, &(0x7f0000000180)={0x0, 0x11, 0x4}, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) getrlimit(0x6, &(0x7f0000000480)) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r2, &(0x7f0000005b00)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f000001eb00)={0x0, 0x0, &(0x7f000001eb40)={&(0x7f000001eb80)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f000001ec00)={0x0, 0x0, &(0x7f000001ec40)={&(0x7f000001ec80)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 4.681194065s ago: executing program 5 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x840000000002, 0x3, 0x100) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpgid(0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x21, 0x0, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000008440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=[@ip_retopts={{0x18, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x4, 0xc, 0x1, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x30}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d80)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x5, 0x2}]}]}}}], 0x18}}], 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x200000003, 0x84) fcntl$setlease(r8, 0x400, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) setns(0xc9, 0x8000000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) 2.311236606s ago: executing program 3 (id=477): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0x9, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x1, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x0, 0x5, 0x3c5b, 0x7d, 0x24, 0xd, 0x7, 0x0, 0x800, 0x7, 0x4, 0x7, 0x3, 0x9, 0x4c73, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x80002, 0xc, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000212f, 0x2008004, 0x5, 0x15f, 0x401, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x6, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x2ea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0xd37, 0x5, 0x4, 0x1b, 0x2000004, 0x9, 0x80000002, 0x9, 0x6, 0x147, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x20000004, 0x4, 0x3, 0x50, 0x2, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0xd3, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0xff, 0x0, 0x5, 0x0, 0x1, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x2000000c, 0x8000094, 0x6d01, 0x2, 0x38, 0x800083, 0x2000200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1003, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x4006, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x4, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ee, 0x4, 0xb], [0x9, 0xbb33, 0x6, 0xb, 0x1, 0x2, 0x5, 0x0, 0x0, 0xb9, 0xce7, 0x1ff, 0x3, 0x17, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a9, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0xc, 0xaf, 0x5, 0x1dec, 0x227, 0x42, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x76, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) r0 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2000413, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c7283959d49b507ef896f6f746d6f64653d30303030303030303030303030303030303130303030302c", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r1, &(0x7f0000006c00)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.090142115s ago: executing program 7 (id=412): r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x18, &(0x7f0000001240)=ANY=[@ANYBLOB="66d98254c5d7917101c372", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',default_permissions,blksize=0x0000000000001800,max_read=0x0000000000000001,blksize=0x0000000000001000,blksize=0x0000000000000000,blksize=0x0000000000000c00,allow_other,euid<', @ANYRESDEC, @ANYBLOB=',permit_directio,\x00'], 0x0, 0x0, &(0x7f0000000200)="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") mkdirat(r0, &(0x7f0000001200)='./proc/thread-self/fail-nth\x00', 0x4) mount(0x0, &(0x7f0000001640)='./proc\x00', &(0x7f0000001680)='proc\x00', 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000013c0), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000001500)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000001540)={0x0, 0x20}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000001580)={0x2, 0xfa}, 0x2) openat(0xffffffffffffff9c, &(0x7f00000016c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x202000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001440)={{}, {@void, @max}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x4, &(0x7f00000001c0)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000001740)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001a740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001400)={0xffb7, &(0x7f0000001480)={0x0, 0x19, 0x2, {0x2, 0x21}}, 0x0, &(0x7f00000014c0)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0xf, 0x650000) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f000001a780)={&(0x7f000001a7c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x1c, 0x0, 0xa}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f000001a800)={0x0, 0x0, &(0x7f000001a840)={&(0x7f000001a880)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.964627618s ago: executing program 3 (id=478): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000840)=[{0x0, 0xe1, 0x3, 0x0, @time, {0xf}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000880)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000008c0), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000900)={0xa, {0x8, 0x1, 0xc}}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r3, &(0x7f0000000240)='1', 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2d, 0x29, 0xfc, 0x1, 0x15, @remote, @mcast2, 0x20, 0x10, 0x7f, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0700000083000000060000000800000000200000", @ANYRES32, @ANYBLOB="06000000000000000000000000000000000000007a71762a078c5cc8b2c89cc2fe097dd494d45759361acdebe7e69a3de0b0dd362e1839c8ac5f94f9e33461ad5aaf79c64d8f1601150162fe673d752936b6ecee6b5efd4881a87640bfb27c687f222975a2ed7062a7cf212229815fc1c079e6eeb1e44eea83d419524b40010c7c2ee4338383b6052dbb2fefe4d94bbc558e380ed604fec379f09313a1c31dd7cb9b141b64ecf64d5e3252af56be00489503ad04eac7e0f1e605993e17b9d939c9a116dc747d18e051e8d728d737", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="000000000400"/28], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) 1.817731169s ago: executing program 0 (id=479): syz_open_dev$mouse(&(0x7f00000000c0), 0x80004f, 0x19d300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000ac0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000b40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c40), 0x400000000000041, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0x4010aa0a, &(0x7f00000003c0)={{&(0x7f0000005000/0x2000)=nil, 0x2000}, 0xc}) recvmmsg(r1, &(0x7f0000000c80), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r4) mount$tmpfs(0x0, &(0x7f0000000d40)='./cgroup\x00', &(0x7f0000000d80), 0x0, &(0x7f0000000dc0)=ANY=[@ANYRES8=r5]) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000300)={0x2, [0x3, 0x8]}, 0x8) poll(&(0x7f0000000340)=[{r6, 0x100}, {r2, 0x100}], 0x2, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}}, 0x24}}, 0x20004055) socket$packet(0x11, 0x2, 0x300) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x50, &(0x7f0000000280), 0x48) 1.744376672s ago: executing program 3 (id=480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x2, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb7020000ffffff1fb50af8ff00000000850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x2, 0xdc, &(0x7f0000000540)=""/220, 0x0, 0x1e}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x40ce, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000009c0), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000880), 0x2, 0xa4df7e26671238da) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x1c, r2, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='highspeed', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r5, &(0x7f00000002c0)='27', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x0, 0x4}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f0000000900)={'fscrypt:', @desc4}, &(0x7f0000000800)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a37337e1bf4f564e4379ac8b8e76066a335e630774a8c007599fce882385170c0f", 0x100003e}, 0x5b, 0xffffffffffffffff) syz_usb_connect(0x3, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) 0s ago: executing program 5 (id=481): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ith an up link [ 223.314243][ T7091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.391637][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 223.396706][ T7148] hsr_slave_0: left promiscuous mode [ 223.398680][ T7148] hsr_slave_1: left promiscuous mode [ 223.512942][ T6235] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 223.516400][ T7151] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 223.555880][ T7091] team0: Port device team_slave_0 added [ 223.558144][ T6235] usb 6-1: USB disconnect, device number 8 [ 223.573390][ T7091] team0: Port device team_slave_1 added [ 223.683027][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.683048][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.683075][ T7091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.701874][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.701913][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.701968][ T7091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.935100][ T7155] zram: Cannot change disksize for initialized device [ 224.388730][ T7156] tmpfs: Unknown parameter '&' [ 224.766444][ T7091] hsr_slave_0: entered promiscuous mode [ 224.768887][ T7091] hsr_slave_1: entered promiscuous mode [ 224.769844][ T7091] debugfs: 'hsr0' already exists in 'hsr' [ 224.769862][ T7091] Cannot create hsr debugfs directory [ 224.841776][ T7160] loop2: detected capacity change from 0 to 512 [ 224.857740][ T7160] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.259: iget: bad i_size value: 38620345925642 [ 224.857765][ T7160] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 224.870621][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 224.870649][ C0] EXT4-fs (loop2): initial error at time 1792907020: ext4_orphan_get:1404: inode 15 [ 224.870695][ C0] EXT4-fs (loop2): last error at time 1792907020: ext4_orphan_get:1404: inode 15 [ 224.870983][ T7160] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.259: couldn't read orphan inode 15 (err -117) [ 224.871012][ T7160] loop2: lost filesystem error report for type 5 error -117 [ 224.879848][ T5645] Bluetooth: hci5: command tx timeout [ 224.890090][ T7160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.902348][ T7160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.151446][ T7165] FAULT_INJECTION: forcing a failure. [ 225.151446][ T7165] name failslab, interval 1, probability 0, space 0, times 0 [ 225.151501][ T7165] CPU: 1 UID: 0 PID: 7165 Comm: syz.5.260 Not tainted syzkaller #0 PREEMPT(full) [ 225.151529][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 225.151543][ T7165] Call Trace: [ 225.151552][ T7165] [ 225.151563][ T7165] dump_stack_lvl+0xe8/0x150 [ 225.151618][ T7165] should_fail_ex+0x3eb/0x540 [ 225.151651][ T7165] should_failslab+0xa8/0x100 [ 225.151689][ T7165] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 225.151721][ T7165] ? key_alloc+0x38c/0xd20 [ 225.151751][ T7165] ? key_alloc+0x38c/0xd20 [ 225.151790][ T7165] kmemdup_noprof+0x2b/0x70 [ 225.151818][ T7165] key_alloc+0x38c/0xd20 [ 225.151865][ T7165] __key_create_or_update+0x867/0xab0 [ 225.151912][ T7165] ? __pfx___key_create_or_update+0x10/0x10 [ 225.151947][ T7165] ? lookup_user_key+0x1101/0x1230 [ 225.152006][ T7165] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 225.152055][ T7165] key_create_or_update+0x42/0x60 [ 225.152093][ T7165] __se_sys_add_key+0x349/0x420 [ 225.152124][ T7165] ? __pfx___se_sys_add_key+0x10/0x10 [ 225.152161][ T7165] ? __x64_sys_add_key+0x20/0xc0 [ 225.152190][ T7165] do_syscall_64+0x166/0x520 [ 225.152215][ T7165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.152238][ T7165] ? clear_bhb_loop+0x70/0xc0 [ 225.152266][ T7165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.152288][ T7165] RIP: 0033:0x7fbee539f559 [ 225.152309][ T7165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.152328][ T7165] RSP: 002b:00007fbee61a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 225.152352][ T7165] RAX: ffffffffffffffda RBX: 00007fbee5626090 RCX: 00007fbee539f559 [ 225.152369][ T7165] RDX: 0000200000000800 RSI: 0000200000000900 RDI: 0000200000000780 [ 225.152384][ T7165] RBP: 00007fbee5436b20 R08: ffffffffffffffff R09: 0000000000000000 [ 225.152400][ T7165] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000 [ 225.152413][ T7165] R13: 00007fbee5626128 R14: 00007fbee5626090 R15: 00007ffdedca3038 [ 225.152450][ T7165] [ 225.510428][ T6235] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 225.691467][ T6235] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 225.694330][ T6235] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.694393][ T6235] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 225.694423][ T6235] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 225.694467][ T6235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.748595][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 225.767775][ T7169] netlink: 124 bytes leftover after parsing attributes in process `syz.2.261'. [ 225.969074][ T6235] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 225.988976][ T7171] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 226.011954][ T6235] usb 6-1: USB disconnect, device number 9 [ 226.155512][ T7174] netlink: 'syz.2.263': attribute type 25 has an invalid length. [ 226.155785][ T7174] FAULT_INJECTION: forcing a failure. [ 226.155785][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 226.155812][ T7174] CPU: 1 UID: 0 PID: 7174 Comm: syz.2.263 Not tainted syzkaller #0 PREEMPT(full) [ 226.155835][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 226.155845][ T7174] Call Trace: [ 226.155865][ T7174] [ 226.155875][ T7174] dump_stack_lvl+0xe8/0x150 [ 226.155916][ T7174] should_fail_ex+0x3eb/0x540 [ 226.155947][ T7174] should_failslab+0xa8/0x100 [ 226.155980][ T7174] ? sk_prot_alloc+0x57/0x210 [ 226.156004][ T7174] kmem_cache_alloc_noprof+0x9c/0x600 [ 226.156023][ T7174] ? security_inode_alloc+0x39/0x310 [ 226.156048][ T7174] ? sk_prot_alloc+0x57/0x210 [ 226.156072][ T7174] ? lock_acquire+0x115/0x350 [ 226.156094][ T7174] sk_prot_alloc+0x57/0x210 [ 226.156117][ T7174] ? sk_alloc+0x27/0x390 [ 226.156142][ T7174] sk_alloc+0x3a/0x390 [ 226.156168][ T7174] inet6_create+0x81a/0x1270 [ 226.156185][ T7174] ? inet6_create+0x80/0x1270 [ 226.156204][ T7174] __sock_create+0x4b5/0xac0 [ 226.156231][ T7174] __sys_socket+0xd6/0x1b0 [ 226.156254][ T7174] __x64_sys_socket+0x7a/0x90 [ 226.156275][ T7174] do_syscall_64+0x166/0x520 [ 226.156294][ T7174] ? trace_irq_disable+0x3b/0x140 [ 226.156315][ T7174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.156331][ T7174] ? clear_bhb_loop+0x70/0xc0 [ 226.156350][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.156366][ T7174] RIP: 0033:0x7ffbc139f559 [ 226.156380][ T7174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.156394][ T7174] RSP: 002b:00007ffbc2336028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 226.156410][ T7174] RAX: ffffffffffffffda RBX: 00007ffbc1625fa0 RCX: 00007ffbc139f559 [ 226.156422][ T7174] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 226.156431][ T7174] RBP: 00007ffbc1436b20 R08: 0000000000000000 R09: 0000000000000000 [ 226.156440][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.156449][ T7174] R13: 00007ffbc1626038 R14: 00007ffbc1625fa0 R15: 00007fff13df5f88 [ 226.156474][ T7174] [ 226.438129][ T7091] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 226.450683][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.451954][ T7091] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 226.456607][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.457460][ T7091] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 226.510474][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.513236][ T7091] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 226.522641][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 226.574796][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.740560][ T31] usb 3-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 226.742201][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.742261][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 226.742288][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 226.742331][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.893758][ T7091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.930153][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.954961][ T31] cxacru 3-1:1.0: send of cm 0x90 failed (-71) [ 226.970034][ T7187] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 226.974409][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.974701][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.007391][ T31] usb 3-1: USB disconnect, device number 11 [ 227.263909][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 227.298928][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.299051][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.970297][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 228.992639][ T7197] loop0: detected capacity change from 0 to 64 [ 228.993452][ T7197] hfs: Unknown parameter 'quiat' [ 229.180044][ T7202] zram: Can't change algorithm for initialized device [ 229.643447][ T7211] zram: Cannot change disksize for initialized device [ 230.675411][ T7091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.742564][ T7219] netlink: 20 bytes leftover after parsing attributes in process `syz.5.272'. [ 231.008590][ T7222] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 231.028798][ T7222] loop3: detected capacity change from 0 to 128 [ 231.253060][ T7222] loop3: detected capacity change from 0 to 32768 [ 231.379423][ T7229] FAULT_INJECTION: forcing a failure. [ 231.379423][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 231.379473][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.5.274 Not tainted syzkaller #0 PREEMPT(full) [ 231.379499][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 231.379514][ T7229] Call Trace: [ 231.379523][ T7229] [ 231.379532][ T7229] dump_stack_lvl+0xe8/0x150 [ 231.379576][ T7229] should_fail_ex+0x3eb/0x540 [ 231.379609][ T7229] should_failslab+0xa8/0x100 [ 231.379648][ T7229] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 231.379682][ T7229] ? key_alloc+0x38c/0xd20 [ 231.379713][ T7229] ? key_alloc+0x38c/0xd20 [ 231.379753][ T7229] kmemdup_noprof+0x2b/0x70 [ 231.379781][ T7229] key_alloc+0x38c/0xd20 [ 231.379830][ T7229] __key_create_or_update+0x867/0xab0 [ 231.379880][ T7229] ? __pfx___key_create_or_update+0x10/0x10 [ 231.379923][ T7229] ? lookup_user_key+0x1101/0x1230 [ 231.379979][ T7229] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 231.380030][ T7229] key_create_or_update+0x42/0x60 [ 231.380070][ T7229] __se_sys_add_key+0x349/0x420 [ 231.380103][ T7229] ? __pfx___se_sys_add_key+0x10/0x10 [ 231.380141][ T7229] ? __x64_sys_add_key+0x20/0xc0 [ 231.380171][ T7229] do_syscall_64+0x166/0x520 [ 231.380198][ T7229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.380222][ T7229] ? clear_bhb_loop+0x70/0xc0 [ 231.380251][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.380274][ T7229] RIP: 0033:0x7fbee539f559 [ 231.380296][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.380317][ T7229] RSP: 002b:00007fbee61a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 231.380341][ T7229] RAX: ffffffffffffffda RBX: 00007fbee5626090 RCX: 00007fbee539f559 [ 231.380358][ T7229] RDX: 0000200000000800 RSI: 0000200000000900 RDI: 0000200000000780 [ 231.380375][ T7229] RBP: 00007fbee5436b20 R08: ffffffffffffffff R09: 0000000000000000 [ 231.380391][ T7229] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000 [ 231.380405][ T7229] R13: 00007fbee5626128 R14: 00007fbee5626090 R15: 00007ffdedca3038 [ 231.380443][ T7229] [ 231.789352][ T5793] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 231.940269][ T5793] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 231.941720][ T5793] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.941772][ T5793] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 231.941800][ T5793] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 231.941843][ T5793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.003890][ T7091] veth0_vlan: entered promiscuous mode [ 233.036597][ T7091] veth1_vlan: entered promiscuous mode [ 233.083659][ T5793] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 233.109363][ T5793] usb 6-1: USB disconnect, device number 10 [ 233.112983][ T7238] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 233.192820][ T7091] veth0_macvtap: entered promiscuous mode [ 233.227737][ T7091] veth1_macvtap: entered promiscuous mode [ 233.267418][ T7240] FAULT_INJECTION: forcing a failure. [ 233.267418][ T7240] name fail_futex, interval 1, probability 0, space 0, times 0 [ 233.267455][ T7240] CPU: 0 UID: 0 PID: 7240 Comm: syz.2.277 Not tainted syzkaller #0 PREEMPT(full) [ 233.267482][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 233.267496][ T7240] Call Trace: [ 233.267504][ T7240] [ 233.267514][ T7240] dump_stack_lvl+0xe8/0x150 [ 233.267559][ T7240] should_fail_ex+0x3eb/0x540 [ 233.267591][ T7240] get_futex_key+0x1ab/0x1410 [ 233.267630][ T7240] ? __lock_acquire+0x747/0x2de0 [ 233.267666][ T7240] ? kasan_save_free_info+0x40/0x50 [ 233.267692][ T7240] ? __pfx_get_futex_key+0x10/0x10 [ 233.267723][ T7240] ? do_syscall_64+0x166/0x520 [ 233.267747][ T7240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.267784][ T7240] futex_wake+0x119/0x5f0 [ 233.267819][ T7240] ? __pfx_futex_wake+0x10/0x10 [ 233.267867][ T7240] do_futex+0x458/0x4e0 [ 233.267897][ T7240] ? __pfx_do_futex+0x10/0x10 [ 233.267932][ T7240] __se_sys_futex+0x3a8/0x450 [ 233.267963][ T7240] ? __pfx___se_sys_futex+0x10/0x10 [ 233.267987][ T7240] ? __pfx___se_sys_mount+0x10/0x10 [ 233.268021][ T7240] ? __x64_sys_futex+0x21/0xf0 [ 233.268048][ T7240] do_syscall_64+0x166/0x520 [ 233.268070][ T7240] ? trace_irq_disable+0x3b/0x140 [ 233.268101][ T7240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.268123][ T7240] ? clear_bhb_loop+0x70/0xc0 [ 233.268150][ T7240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.268183][ T7240] RIP: 0033:0x7ffbc139f559 [ 233.268205][ T7240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.268224][ T7240] RSP: 002b:00007ffbc23360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 233.268248][ T7240] RAX: ffffffffffffffda RBX: 00007ffbc1625fa8 RCX: 00007ffbc139f559 [ 233.268273][ T7240] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffbc1625fac [ 233.268289][ T7240] RBP: 00007ffbc1625fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 233.268304][ T7240] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 233.268320][ T7240] R13: 00007ffbc1626038 R14: 00007fff13df5ea0 R15: 00007fff13df5f88 [ 233.268357][ T7240] [ 233.309985][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.456512][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.539573][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.275'. [ 233.559539][ T3027] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.560158][ T3027] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.560200][ T3027] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.560237][ T3027] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.621401][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 233.653843][ T7242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.653872][ T7242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.662827][ T7242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.662895][ T7242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.890674][ T7248] null_blk: my_zoned_dev: using native zone append [ 233.928575][ T7251] netlink: 'syz.5.279': attribute type 25 has an invalid length. [ 233.928829][ T7251] FAULT_INJECTION: forcing a failure. [ 233.928829][ T7251] name failslab, interval 1, probability 0, space 0, times 0 [ 233.928850][ T7251] CPU: 1 UID: 0 PID: 7251 Comm: syz.5.279 Not tainted syzkaller #0 PREEMPT(full) [ 233.928867][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 233.928877][ T7251] Call Trace: [ 233.928882][ T7251] [ 233.928889][ T7251] dump_stack_lvl+0xe8/0x150 [ 233.928920][ T7251] should_fail_ex+0x3eb/0x540 [ 233.928942][ T7251] should_failslab+0xa8/0x100 [ 233.928967][ T7251] ? sk_prot_alloc+0x57/0x210 [ 233.928993][ T7251] kmem_cache_alloc_noprof+0x9c/0x600 [ 233.929011][ T7251] ? security_inode_alloc+0x39/0x310 [ 233.929036][ T7251] ? sk_prot_alloc+0x57/0x210 [ 233.929061][ T7251] ? lock_acquire+0x115/0x350 [ 233.929083][ T7251] sk_prot_alloc+0x57/0x210 [ 233.929137][ T7251] ? sk_alloc+0x27/0x390 [ 233.929171][ T7251] sk_alloc+0x3a/0x390 [ 233.929208][ T7251] inet6_create+0x81a/0x1270 [ 233.929232][ T7251] ? inet6_create+0x80/0x1270 [ 233.929260][ T7251] __sock_create+0x4b5/0xac0 [ 233.929300][ T7251] __sys_socket+0xd6/0x1b0 [ 233.929334][ T7251] __x64_sys_socket+0x7a/0x90 [ 233.929364][ T7251] do_syscall_64+0x166/0x520 [ 233.929387][ T7251] ? trace_irq_disable+0x3b/0x140 [ 233.929418][ T7251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.929441][ T7251] ? clear_bhb_loop+0x70/0xc0 [ 233.929468][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.929491][ T7251] RIP: 0033:0x7fbee539f559 [ 233.929512][ T7251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.929530][ T7251] RSP: 002b:00007fbee61ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 233.929553][ T7251] RAX: ffffffffffffffda RBX: 00007fbee5625fa0 RCX: 00007fbee539f559 [ 233.929571][ T7251] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 233.929583][ T7251] RBP: 00007fbee5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 233.929598][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.929611][ T7251] R13: 00007fbee5626038 R14: 00007fbee5625fa0 R15: 00007ffdedca3038 [ 233.929654][ T7251] [ 234.098518][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.098539][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.277407][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.277431][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.301815][ T26] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 234.311550][ T7256] tmpfs: Unknown parameter '’' [ 234.536848][ T26] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 234.621944][ T26] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.623210][ T26] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 234.623692][ T26] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 234.625819][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.318301][ T26] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 235.337705][ T7263] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 235.390209][ T26] usb 6-1: USB disconnect, device number 11 [ 235.406504][ T7248] null_blk: disk my_zoned_dev created [ 237.959013][ T5645] Bluetooth: hci0: Invalid handle: 0x6465 > 0x0eff [ 238.045233][ T7279] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 238.045357][ T7279] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 239.639016][ T7279] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.639240][ T7279] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 239.661618][ T7279] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 239.661858][ T7279] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 239.685575][ T7279] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 239.685711][ T7279] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 239.729324][ T7279] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.729977][ T7279] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 239.782142][ T7279] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 239.782241][ T7279] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 239.821240][ T7279] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 240.062297][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 240.190274][ T7291] FAULT_INJECTION: forcing a failure. [ 240.190274][ T7291] name fail_futex, interval 1, probability 0, space 0, times 0 [ 240.190411][ T7291] CPU: 1 UID: 0 PID: 7291 Comm: syz.3.288 Not tainted syzkaller #0 PREEMPT(full) [ 240.190438][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 240.190458][ T7291] Call Trace: [ 240.190468][ T7291] [ 240.190477][ T7291] dump_stack_lvl+0xe8/0x150 [ 240.190523][ T7291] should_fail_ex+0x3eb/0x540 [ 240.190556][ T7291] get_futex_key+0x1ab/0x1410 [ 240.190604][ T7291] ? kasan_save_free_info+0x40/0x50 [ 240.190631][ T7291] ? __pfx_get_futex_key+0x10/0x10 [ 240.190679][ T7291] futex_wake+0x119/0x5f0 [ 240.190715][ T7291] ? __pfx_futex_wake+0x10/0x10 [ 240.190747][ T7291] ? irqentry_exit+0x2a0/0x9b0 [ 240.190780][ T7291] ? lockdep_hardirqs_on+0x7b/0x110 [ 240.190805][ T7291] ? irqentry_exit+0x2a0/0x9b0 [ 240.190846][ T7291] do_futex+0x458/0x4e0 [ 240.190875][ T7291] ? __pfx_do_futex+0x10/0x10 [ 240.190897][ T7291] ? __se_sys_futex+0xf2/0x450 [ 240.190920][ T7291] ? __sanitizer_cov_trace_switch+0x5b/0x120 [ 240.190956][ T7291] __se_sys_futex+0x3a8/0x450 [ 240.190988][ T7291] ? __pfx___se_sys_futex+0x10/0x10 [ 240.191021][ T7291] ? __x64_sys_futex+0x21/0xf0 [ 240.191047][ T7291] do_syscall_64+0x166/0x520 [ 240.191072][ T7291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.191095][ T7291] ? clear_bhb_loop+0x70/0xc0 [ 240.191124][ T7291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.191147][ T7291] RIP: 0033:0x7f9dc679f559 [ 240.191167][ T7291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.191190][ T7291] RSP: 002b:00007f9dc76490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 240.191214][ T7291] RAX: ffffffffffffffda RBX: 00007f9dc6a26188 RCX: 00007f9dc679f559 [ 240.191230][ T7291] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9dc6a2618c [ 240.191246][ T7291] RBP: 00007f9dc6a26180 R08: 3fffffffffffffff R09: 0000000000000000 [ 240.191261][ T7291] R10: 000000002ced790b R11: 0000000000000246 R12: 0000000000000000 [ 240.191275][ T7291] R13: 00007f9dc6a26218 R14: 00007fff03d94780 R15: 00007fff03d94868 [ 240.191311][ T7291] [ 240.569300][ T6235] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 240.569550][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 240.706291][ T6235] usb 4-1: device descriptor read/64, error -32 [ 240.940605][ T6235] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 241.000581][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 241.043891][ T7298] loop0: detected capacity change from 0 to 256 [ 241.056301][ T7298] vfat: Unknown parameter 'IF?©ęż„}utf8' [ 241.112480][ T6235] usb 4-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 241.117548][ T6235] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.117603][ T6235] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 241.117632][ T6235] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 241.117675][ T6235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.401505][ T7294] loop5: detected capacity change from 0 to 32768 [ 241.402850][ T7294] xfs: Unknown parameter 'smackfsdef' [ 241.430600][ T6235] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 241.438435][ T7302] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 241.466464][ T7301] loop6: detected capacity change from 0 to 512 [ 241.496475][ T7301] EXT4-fs error (device loop6): __ext4_iget:6490: inode #2: block 131072: comm syz.6.284: invalid block [ 241.496512][ T7301] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 241.509812][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 241.509838][ C1] EXT4-fs (loop6): initial error at time 1792907036: __ext4_iget:6490: inode 2: block 131072 [ 241.509881][ C1] EXT4-fs (loop6): last error at time 1792907036: __ext4_iget:6490: inode 2: block 131072 [ 241.551010][ T7301] EXT4-fs (loop6): get root inode failed [ 241.551031][ T7301] EXT4-fs (loop6): mount failed [ 241.573863][ T6235] usb 4-1: USB disconnect, device number 17 [ 241.670062][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 241.708533][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 241.739294][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 241.739357][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 241.739500][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 241.898081][ T55] Bluetooth: hci5: command 0x0c1a tx timeout [ 242.139274][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 242.426316][ T7310] loop0: detected capacity change from 0 to 256 [ 242.427483][ T7310] vfat: Unknown parameter 'IF?©ęż„}utf8' [ 242.906331][ T7322] loop2: detected capacity change from 0 to 2048 [ 242.927121][ T7322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27742, location=27742 [ 242.944640][ T7322] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 242.944901][ T7322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27998, location=27998 [ 242.944923][ T7322] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 242.944954][ T7322] UDF-fs: Scanning with blocksize 512 failed [ 242.994682][ T7322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27742, location=27742 [ 243.005766][ T7322] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 243.024539][ T7322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27998, location=27998 [ 243.024568][ T7322] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 243.024582][ T7322] UDF-fs: Scanning with blocksize 1024 failed [ 243.025824][ T7322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27742, location=27742 [ 243.048444][ T7322] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 243.050732][ T6235] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 243.051083][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 243.070250][ T7322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27998, location=27998 [ 243.070334][ T7322] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 243.070371][ T7322] UDF-fs: Scanning with blocksize 2048 failed [ 243.123647][ T7322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27742, location=27742 [ 243.126600][ T7322] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 243.126962][ T7322] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27998, location=27998 [ 243.127013][ T7322] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 243.127027][ T7322] UDF-fs: Scanning with blocksize 4096 failed [ 243.127038][ T7322] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 243.214194][ T7327] netlink: 'syz.0.295': attribute type 25 has an invalid length. [ 243.214443][ T7327] FAULT_INJECTION: forcing a failure. [ 243.214443][ T7327] name failslab, interval 1, probability 0, space 0, times 0 [ 243.214463][ T7327] CPU: 1 UID: 0 PID: 7327 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(full) [ 243.214481][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 243.214490][ T7327] Call Trace: [ 243.214496][ T7327] [ 243.214503][ T7327] dump_stack_lvl+0xe8/0x150 [ 243.214533][ T7327] should_fail_ex+0x3eb/0x540 [ 243.214556][ T7327] should_failslab+0xa8/0x100 [ 243.214589][ T7327] ? sk_prot_alloc+0x57/0x210 [ 243.214614][ T7327] kmem_cache_alloc_noprof+0x9c/0x600 [ 243.214632][ T7327] ? security_inode_alloc+0x39/0x310 [ 243.214658][ T7327] ? sk_prot_alloc+0x57/0x210 [ 243.214681][ T7327] ? lock_acquire+0x115/0x350 [ 243.214704][ T7327] sk_prot_alloc+0x57/0x210 [ 243.214727][ T7327] ? sk_alloc+0x27/0x390 [ 243.214752][ T7327] sk_alloc+0x3a/0x390 [ 243.214778][ T7327] inet6_create+0x81a/0x1270 [ 243.214796][ T7327] ? inet6_create+0x80/0x1270 [ 243.214815][ T7327] __sock_create+0x4b5/0xac0 [ 243.214842][ T7327] __sys_socket+0xd6/0x1b0 [ 243.214868][ T7327] __x64_sys_socket+0x7a/0x90 [ 243.214890][ T7327] do_syscall_64+0x166/0x520 [ 243.214906][ T7327] ? trace_irq_disable+0x3b/0x140 [ 243.214930][ T7327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.214947][ T7327] ? clear_bhb_loop+0x70/0xc0 [ 243.214966][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.214982][ T7327] RIP: 0033:0x7f596ff9f559 [ 243.214996][ T7327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.215010][ T7327] RSP: 002b:00007f5970e7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 243.215026][ T7327] RAX: ffffffffffffffda RBX: 00007f5970225fa0 RCX: 00007f596ff9f559 [ 243.215038][ T7327] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 243.215047][ T7327] RBP: 00007f5970036b20 R08: 0000000000000000 R09: 0000000000000000 [ 243.215056][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.215066][ T7327] R13: 00007f5970226038 R14: 00007f5970225fa0 R15: 00007ffc20fe23b8 [ 243.215091][ T7327] [ 243.249859][ T6235] usb 4-1: Using ep0 maxpacket: 32 [ 243.255771][ T6235] usb 4-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 243.256573][ T31] usb 3-1: New USB device found: idVendor=a257, idProduct=2013, bcdDevice=0.01 [ 243.285689][ T6235] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 243.285819][ T6235] usb 4-1: config 0 has no interface number 0 [ 243.375001][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 243.375087][ T31] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 243.375181][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.438582][ T6235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.438648][ T6235] usb 4-1: Product: syz [ 243.438681][ T6235] usb 4-1: Manufacturer: syz [ 243.438723][ T6235] usb 4-1: SerialNumber: syz [ 243.537401][ T6235] usb 4-1: config 0 descriptor?? [ 243.556892][ T6235] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 243.579843][ T31] dln2 3-1:1.0: USB write failed: -90 [ 243.580064][ T31] dln2 3-1:1.0: failed to initialize hardware [ 243.621253][ T31] dln2 3-1:1.0: probe with driver dln2 failed with error -90 [ 243.749867][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 243.759035][ T5772] usb 3-1: USB disconnect, device number 12 [ 243.802889][ T6235] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 243.830617][ T4956] Bluetooth: hci0: command 0x0406 tx timeout [ 243.830661][ T4956] Bluetooth: hci3: command 0x0406 tx timeout [ 243.830689][ T4956] Bluetooth: hci4: command 0x0406 tx timeout [ 243.838439][ T6235] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 243.923643][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 243.979201][ T55] Bluetooth: hci5: command 0x0c1a tx timeout [ 243.998327][ T7324] ip_tables: iptables: counters copy to user failed while replacing table [ 244.066571][ T7329] loop5: detected capacity change from 0 to 32768 [ 244.087209][ T31] usb 7-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 244.100194][ T31] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.100259][ T31] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.100287][ T31] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 244.100333][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.154211][ T7331] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 244.183881][ T7329] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 244.188831][ T7329] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 244.278344][ T7329] XFS (loop5): Ending clean mount [ 244.313972][ T7329] XFS (loop5): Quotacheck needed: Please wait. [ 244.402137][ T6105] XFS (loop5): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 [ 244.402184][ T6105] XFS (loop5): Unmount and run xfs_repair [ 244.402196][ T6105] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 244.402212][ T6105] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 244.402227][ T6105] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 244.402279][ T6105] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 244.402295][ T6105] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 244.402311][ T6105] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 244.402327][ T6105] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 244.402342][ T6105] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 244.402357][ T6105] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 244.402496][ T6105] XFS (loop5): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74 [ 244.402714][ T6105] loop5: lost filesystem error report for type 5 error -117 [ 244.505535][ T7329] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 244.562020][ T7329] loop5: lost filesystem error report for type 5 error -117 [ 244.686876][ T7344] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 244.817224][ T5978] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 244.841383][ T5978] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 244.981677][ T7350] vivid-000: disconnect [ 245.142699][ T31] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 245.145918][ T31] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input5 [ 245.216363][ T7331] loop6: detected capacity change from 0 to 32768 [ 245.430644][ T7331] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 245.590935][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 245.595304][ T5746] usb 4-1: USB disconnect, device number 18 [ 245.612283][ T5746] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 245.641179][ T5746] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 245.646826][ T5746] quatech2 4-1:0.51: device disconnected [ 245.750216][ T7331] XFS (loop6): Ending clean mount [ 245.959669][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880673bcc00: rx timeout, send abort [ 245.960354][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880673bcc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 246.059285][ T55] Bluetooth: hci5: command 0x0c1a tx timeout [ 246.129469][ T7350] netlink: 'syz.2.299': attribute type 4 has an invalid length. [ 246.133796][ T7349] vivid-000: reconnect [ 246.239093][ T7364] tmpfs: Unknown parameter '&' [ 247.201530][ T7375] FAULT_INJECTION: forcing a failure. [ 247.201530][ T7375] name failslab, interval 1, probability 0, space 0, times 0 [ 247.201567][ T7375] CPU: 0 UID: 0 PID: 7375 Comm: syz.0.303 Not tainted syzkaller #0 PREEMPT(full) [ 247.201594][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 247.201608][ T7375] Call Trace: [ 247.201617][ T7375] [ 247.201626][ T7375] dump_stack_lvl+0xe8/0x150 [ 247.201669][ T7375] should_fail_ex+0x3eb/0x540 [ 247.201702][ T7375] should_failslab+0xa8/0x100 [ 247.201744][ T7375] __kmalloc_cache_noprof+0x9e/0x600 [ 247.201775][ T7375] ? __kmalloc_cache_noprof+0x148/0x600 [ 247.201803][ T7375] ? assoc_array_insert+0x417/0x2f60 [ 247.201830][ T7375] ? assoc_array_insert+0x417/0x2f60 [ 247.201868][ T7375] assoc_array_insert+0x417/0x2f60 [ 247.201915][ T7375] ? __pfx_down_write+0x10/0x10 [ 247.201955][ T7375] __key_link_begin+0xd6/0x1f0 [ 247.201984][ T7375] __key_create_or_update+0x427/0xab0 [ 247.202030][ T7375] ? __pfx___key_create_or_update+0x10/0x10 [ 247.202064][ T7375] ? lookup_user_key+0x1101/0x1230 [ 247.202117][ T7375] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 247.202166][ T7375] key_create_or_update+0x42/0x60 [ 247.202215][ T7375] __se_sys_add_key+0x349/0x420 [ 247.202247][ T7375] ? __pfx___se_sys_add_key+0x10/0x10 [ 247.202284][ T7375] ? __x64_sys_add_key+0x20/0xc0 [ 247.202313][ T7375] do_syscall_64+0x166/0x520 [ 247.202336][ T7375] ? trace_irq_disable+0x3b/0x140 [ 247.202368][ T7375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.202393][ T7375] ? clear_bhb_loop+0x70/0xc0 [ 247.202422][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.202445][ T7375] RIP: 0033:0x7f596ff9f559 [ 247.202467][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.202487][ T7375] RSP: 002b:00007f5970e5b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 247.202511][ T7375] RAX: ffffffffffffffda RBX: 00007f5970226090 RCX: 00007f596ff9f559 [ 247.202529][ T7375] RDX: 0000200000000800 RSI: 0000200000000900 RDI: 0000200000000780 [ 247.202545][ T7375] RBP: 00007f5970036b20 R08: ffffffffffffffff R09: 0000000000000000 [ 247.202561][ T7375] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000 [ 247.202575][ T7375] R13: 00007f5970226128 R14: 00007f5970226090 R15: 00007ffc20fe23b8 [ 247.202614][ T7375] [ 247.507567][ T5772] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 247.839393][ T5772] usb 6-1: Using ep0 maxpacket: 8 [ 247.840166][ T5772] usb 6-1: New USB device found: idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 247.841453][ T5772] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 247.875377][ T5793] usb 7-1: USB disconnect, device number 2 [ 247.875433][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 247.875813][ T5772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.875837][ T5772] usb 6-1: Product: syz [ 247.875851][ T5772] usb 6-1: Manufacturer: syz [ 247.875867][ T5772] usb 6-1: SerialNumber: syz [ 247.889416][ T5772] usb 6-1: config 0 descriptor?? [ 247.929784][ T7091] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 247.971795][ T5772] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 247.971866][ T5772] usb 6-1: setting power ON [ 247.983875][ T5772] dvb-usb: bulk message failed: -22 (2/0) [ 248.094409][ T5772] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.104050][ T5772] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 248.104222][ T5772] usb 6-1: media controller created [ 248.191517][ T5772] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.221732][ T7367] dvb-usb: bulk message failed: -22 (3/0) [ 248.221759][ T7367] dvb-usb: bulk message failed: -22 (4/0) [ 248.221773][ T7367] cxusb: i2c read failed [ 248.325413][ T5772] usb 6-1: selecting invalid altsetting 6 [ 248.325440][ T5772] usb 6-1: digital interface selection failed (-22) [ 248.325454][ T5772] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 248.329356][ T5772] usb 6-1: setting power OFF [ 248.329543][ T5772] dvb-usb: bulk message failed: -22 (2/0) [ 248.329587][ T5772] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 248.329623][ T5772] (NULL device *): no alternate interface [ 248.577022][ T5772] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 248.587604][ T5772] usb 6-1: USB disconnect, device number 12 [ 249.372078][ T27] block nbd2: Possible stuck request ffff8880286d7000: control (read@0,1024B). Runtime 60 seconds [ 249.372126][ T27] block nbd2: Possible stuck request ffff8880286d71c0: control (read@1024,1024B). Runtime 60 seconds [ 249.372155][ T27] block nbd2: Possible stuck request ffff8880286d7380: control (read@2048,1024B). Runtime 60 seconds [ 249.372181][ T27] block nbd2: Possible stuck request ffff8880286d7540: control (read@3072,1024B). Runtime 60 seconds [ 250.115096][ T7409] tmpfs: Unknown parameter '&' [ 250.121200][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 250.951321][ T31] usb 7-1: New USB device found: idVendor=1d0e, idProduct=9584, bcdDevice=61.ef [ 250.952303][ T31] usb 7-1: config 192 has an invalid interface number: 180 but max is 0 [ 250.952328][ T31] usb 7-1: config 192 contains an unexpected descriptor of type 0x2, skipping [ 250.952346][ T31] usb 7-1: config 192 has no interface number 0 [ 250.952375][ T31] usb 7-1: config 192 interface 180 has no altsetting 0 [ 251.006588][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.006617][ T31] usb 7-1: Product: syz [ 251.006633][ T31] usb 7-1: Manufacturer: syz [ 251.006649][ T31] usb 7-1: SerialNumber: syz [ 251.270473][ T7392] loop6: detected capacity change from 0 to 32768 [ 251.342920][ T7392] loop6: p1 p9 p11 [ 251.415278][ T31] usb-storage 7-1:192.180: USB Mass Storage device detected [ 251.505858][ T7415] netlink: 'syz.0.313': attribute type 25 has an invalid length. [ 251.506161][ T7415] FAULT_INJECTION: forcing a failure. [ 251.506161][ T7415] name failslab, interval 1, probability 0, space 0, times 0 [ 251.506182][ T7415] CPU: 1 UID: 0 PID: 7415 Comm: syz.0.313 Not tainted syzkaller #0 PREEMPT(full) [ 251.506200][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 251.506209][ T7415] Call Trace: [ 251.506215][ T7415] [ 251.506222][ T7415] dump_stack_lvl+0xe8/0x150 [ 251.506265][ T7415] should_fail_ex+0x3eb/0x540 [ 251.506287][ T7415] should_failslab+0xa8/0x100 [ 251.506310][ T7415] ? sk_prot_alloc+0x57/0x210 [ 251.506335][ T7415] kmem_cache_alloc_noprof+0x9c/0x600 [ 251.506352][ T7415] ? security_inode_alloc+0x39/0x310 [ 251.506377][ T7415] ? sk_prot_alloc+0x57/0x210 [ 251.506407][ T7415] ? lock_acquire+0x115/0x350 [ 251.506429][ T7415] sk_prot_alloc+0x57/0x210 [ 251.506451][ T7415] ? sk_alloc+0x27/0x390 [ 251.506475][ T7415] sk_alloc+0x3a/0x390 [ 251.506501][ T7415] inet6_create+0x81a/0x1270 [ 251.506536][ T7415] ? inet6_create+0x80/0x1270 [ 251.506555][ T7415] __sock_create+0x4b5/0xac0 [ 251.506582][ T7415] __sys_socket+0xd6/0x1b0 [ 251.506605][ T7415] __x64_sys_socket+0x7a/0x90 [ 251.506626][ T7415] do_syscall_64+0x166/0x520 [ 251.506643][ T7415] ? trace_irq_disable+0x3b/0x140 [ 251.506692][ T7415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.506715][ T7415] ? clear_bhb_loop+0x70/0xc0 [ 251.506743][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.506766][ T7415] RIP: 0033:0x7f596ff9f559 [ 251.506788][ T7415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.506814][ T7415] RSP: 002b:00007f5970e7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 251.506831][ T7415] RAX: ffffffffffffffda RBX: 00007f5970225fa0 RCX: 00007f596ff9f559 [ 251.506843][ T7415] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 251.506852][ T7415] RBP: 00007f5970036b20 R08: 0000000000000000 R09: 0000000000000000 [ 251.506862][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.506874][ T7415] R13: 00007f5970226038 R14: 00007f5970225fa0 R15: 00007ffc20fe23b8 [ 251.506901][ T7415] [ 251.775143][ T31] usb 7-1: USB disconnect, device number 3 [ 251.873787][ T7400] loop5: detected capacity change from 0 to 32768 [ 251.994701][ T7400] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 252.043707][ T32] audit: type=1326 audit(1792907047.262:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc139f559 code=0x7ffc0000 [ 252.084504][ T32] audit: type=1326 audit(1792907047.302:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc139f559 code=0x7ffc0000 [ 252.085503][ T32] audit: type=1326 audit(1792907047.302:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc139f559 code=0x7ffc0000 [ 252.085539][ T32] audit: type=1326 audit(1792907047.302:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc139f559 code=0x7ffc0000 [ 252.125217][ T32] audit: type=1326 audit(1792907047.342:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbc139f559 code=0x7ffc0000 [ 252.149583][ T32] audit: type=1326 audit(1792907047.362:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc139f559 code=0x7ffc0000 [ 252.149741][ T32] audit: type=1326 audit(1792907047.362:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc139f559 code=0x7ffc0000 [ 252.205824][ T32] audit: type=1326 audit(1792907047.422:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc139f559 code=0x7ffc0000 [ 252.244857][ T32] audit: type=1326 audit(1792907047.462:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ffbc139f559 code=0x7ffc0000 [ 252.258239][ T32] audit: type=1326 audit(1792907047.422:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.2.314" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc139f559 code=0x7ffc0000 [ 252.758030][ T5978] ocfs2: Unmounting device (7,5) on (node local) [ 252.942373][ T6212] udevd[6212]: inotify_add_watch(7, /dev/loop6p9, 10) failed: No such file or directory [ 252.943754][ T6138] udevd[6138]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 252.978221][ T6350] udevd[6350]: inotify_add_watch(7, /dev/loop6p11, 10) failed: No such file or directory [ 253.326571][ T7438] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 253.357370][ T7438] bond1 (unregistering): Released all slaves [ 253.382262][ T7428] loop2: detected capacity change from 0 to 32768 [ 253.407415][ T7428] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.316 (7428) [ 253.515027][ T7428] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 253.515066][ T7428] BTRFS info (device loop2): using blake2b checksum algorithm [ 253.729481][ T7444] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 253.736747][ T7443] null_blk: disk nullb1 created [ 253.775750][ T7428] BTRFS info (device loop2): enabling ssd optimizations [ 253.775784][ T7428] BTRFS info (device loop2): turning on async discard [ 253.775803][ T7428] BTRFS info (device loop2): enabling free space tree [ 254.255936][ T7432] IPVS: length: 137 != 8 [ 254.277964][ T7463] netlink: 'syz.5.322': attribute type 21 has an invalid length. [ 254.281088][ T7463] netlink: 156 bytes leftover after parsing attributes in process `syz.5.322'. [ 256.167149][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.167211][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.404453][ T5646] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 256.542075][ T7471] jffs2: notice: (7471) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 257.014131][ T7475] jffs2: notice: (7475) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 257.152949][ T7477] loop6: detected capacity change from 0 to 1024 [ 257.178529][ T7477] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 257.206763][ T7480] Bluetooth: MGMT ver 1.23 [ 257.206816][ T7480] Bluetooth: hci0: unsupported parameter 5135 [ 257.206833][ T7480] Bluetooth: hci0: unsupported parameter 8192 [ 257.206851][ T7480] Bluetooth: hci0: unsupported parameter 5135 [ 257.206865][ T7480] Bluetooth: hci0: unsupported parameter 8192 [ 257.557883][ T7481] tmpfs: Unknown parameter '&' [ 257.775195][ T7477] program syz.6.328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.689281][ T5793] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 259.549471][ T5793] usb 4-1: device descriptor read/64, error -71 [ 259.789479][ T5793] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 259.919222][ T5793] usb 4-1: device descriptor read/64, error -71 [ 259.919314][ T31] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 260.007126][ T7499] netlink: 'syz.5.334': attribute type 25 has an invalid length. [ 260.007442][ T7499] FAULT_INJECTION: forcing a failure. [ 260.007442][ T7499] name failslab, interval 1, probability 0, space 0, times 0 [ 260.007464][ T7499] CPU: 1 UID: 0 PID: 7499 Comm: syz.5.334 Not tainted syzkaller #0 PREEMPT(full) [ 260.007481][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 260.007491][ T7499] Call Trace: [ 260.007497][ T7499] [ 260.007503][ T7499] dump_stack_lvl+0xe8/0x150 [ 260.007533][ T7499] should_fail_ex+0x3eb/0x540 [ 260.007557][ T7499] should_failslab+0xa8/0x100 [ 260.007586][ T7499] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 260.007607][ T7499] ? __d_alloc+0x37/0x820 [ 260.007626][ T7499] ? __d_alloc+0x37/0x820 [ 260.007652][ T7499] __d_alloc+0x37/0x820 [ 260.007676][ T7499] d_alloc_pseudo+0x21/0xc0 [ 260.007698][ T7499] alloc_path_pseudo+0x107/0x220 [ 260.007718][ T7499] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 260.007737][ T7499] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.007758][ T7499] alloc_file_pseudo+0xa8/0x1e0 [ 260.007777][ T7499] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 260.007795][ T7499] ? _raw_spin_unlock+0x28/0x50 [ 260.007825][ T7499] sock_alloc_file+0xb8/0x2e0 [ 260.007855][ T7499] ? __sys_socket+0x12b/0x1b0 [ 260.007876][ T7499] __sys_socket+0x13f/0x1b0 [ 260.007899][ T7499] __x64_sys_socket+0x7a/0x90 [ 260.007920][ T7499] do_syscall_64+0x166/0x520 [ 260.007935][ T7499] ? trace_irq_disable+0x3b/0x140 [ 260.007956][ T7499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.007971][ T7499] ? clear_bhb_loop+0x70/0xc0 [ 260.007990][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.008005][ T7499] RIP: 0033:0x7fbee539f559 [ 260.008019][ T7499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.008032][ T7499] RSP: 002b:00007fbee61ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 260.008048][ T7499] RAX: ffffffffffffffda RBX: 00007fbee5625fa0 RCX: 00007fbee539f559 [ 260.008059][ T7499] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 260.008067][ T7499] RBP: 00007fbee5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 260.008077][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.008086][ T7499] R13: 00007fbee5626038 R14: 00007fbee5625fa0 R15: 00007ffdedca3038 [ 260.008109][ T7499] [ 260.031634][ T5793] usb usb4-port1: attempt power cycle [ 260.083239][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 260.083277][ T31] usb 3-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 260.087830][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.087965][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.088035][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.088093][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 260.107451][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.107541][ T31] usb 3-1: Product: syz [ 260.107575][ T31] usb 3-1: Manufacturer: syz [ 260.107618][ T31] usb 3-1: SerialNumber: syz [ 260.178142][ T31] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 260.211813][ T31] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 260.285058][ T6235] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 260.384889][ T31] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 260.416820][ T31] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 260.490035][ T7503] loop0: detected capacity change from 0 to 128 [ 261.397638][ T31] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 261.431315][ T6235] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 261.435295][ T6235] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.435351][ T6235] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 261.435379][ T6235] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 261.435422][ T6235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.484528][ T5793] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 261.495796][ T31] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 261.788143][ T6235] cxacru_cm: 44 callbacks suppressed [ 261.788173][ T6235] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 261.817072][ T7504] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 261.847698][ T6235] usb 6-1: USB disconnect, device number 13 [ 261.953342][ T5793] usb 4-1: device descriptor read/8, error -71 [ 262.005640][ T7495] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.264101][ T7497] loop2: detected capacity change from 0 to 8192 [ 262.287831][ T7497] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.555636][ T32] audit: type=1800 audit(1792907057.772:58): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.332" name="file0" dev="loop2" ino=117 res=0 errno=-4 [ 262.638813][ T7495] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.737550][ T5746] usb 3-1: USB disconnect, device number 13 [ 262.804367][ T5746] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 262.820629][ T6235] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 262.895949][ T5746] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 262.944082][ T5746] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 262.970809][ T6235] usb 6-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 262.970853][ T6235] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 262.972010][ T6235] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.972061][ T6235] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.972090][ T6235] usb 6-1: config 0 interface 0 has no altsetting 0 [ 262.974939][ T6235] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.974990][ T6235] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.975021][ T6235] usb 6-1: config 0 interface 0 has no altsetting 0 [ 264.778539][ T5746] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 264.798861][ T6235] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.798895][ T6235] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.798912][ T6235] usb 6-1: config 0 interface 0 has no altsetting 0 [ 264.832290][ T6235] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.832346][ T6235] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.832375][ T6235] usb 6-1: config 0 interface 0 has no altsetting 0 [ 264.834098][ T6235] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.834147][ T6235] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.834174][ T6235] usb 6-1: config 0 interface 0 has no altsetting 0 [ 264.836680][ T6235] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.836730][ T6235] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.836757][ T6235] usb 6-1: config 0 interface 0 has no altsetting 0 [ 264.890025][ T6235] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.890078][ T6235] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.890106][ T6235] usb 6-1: config 0 interface 0 has no altsetting 0 [ 264.934141][ T6235] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 264.934193][ T6235] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 264.934219][ T6235] usb 6-1: config 0 interface 0 has no altsetting 0 [ 265.412163][ T5746] keyspan 3-1:1.0: device disconnected [ 265.412767][ T6235] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 265.412793][ T6235] usb 6-1: Product: syz [ 265.412809][ T6235] usb 6-1: Manufacturer: syz [ 265.412823][ T6235] usb 6-1: SerialNumber: syz [ 265.815734][ T6235] usb 6-1: config 0 descriptor?? [ 265.905839][ T6235] usb 6-1: can't set config #0, error -71 [ 265.926151][ T7495] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.941193][ T6235] usb 6-1: USB disconnect, device number 14 [ 266.137523][ T7523] zram: Cannot change disksize for initialized device [ 267.158890][ T7495] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.256926][ T7528] jffs2: notice: (7528) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 267.444128][ T7531] loop5: detected capacity change from 0 to 128 [ 269.264946][ T7531] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 269.264991][ T7531] hpfs: filesystem error: improperly stopped [ 269.265001][ T7531] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 269.265012][ T7531] hpfs: You really don't want any checks? You are crazy... [ 269.265021][ T7531] hpfs: Code page index out of array [ 269.265026][ T7531] hpfs: code page support is disabled [ 269.265664][ T7531] hpfs: hpfs_map_4sectors(): unaligned read [ 269.265936][ T7531] hpfs: hpfs_map_4sectors(): unaligned read [ 269.265948][ T7531] hpfs: filesystem error: unable to find root dir [ 269.426082][ T4956] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 269.435838][ T4956] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 269.451976][ T4956] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 269.458766][ T4956] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 269.481806][ T4956] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.703255][ T7495] bridge_slave_1: left allmulticast mode [ 269.703284][ T7495] bridge_slave_1: left promiscuous mode [ 269.703513][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.736444][ T7495] bridge_slave_0: left allmulticast mode [ 269.736472][ T7495] bridge_slave_0: left promiscuous mode [ 269.736690][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.902046][ T7542] netlink: 'syz.3.347': attribute type 25 has an invalid length. [ 269.902350][ T7542] FAULT_INJECTION: forcing a failure. [ 269.902350][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 269.902371][ T7542] CPU: 0 UID: 0 PID: 7542 Comm: syz.3.347 Not tainted syzkaller #0 PREEMPT(full) [ 269.902388][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 269.902397][ T7542] Call Trace: [ 269.902403][ T7542] [ 269.902410][ T7542] dump_stack_lvl+0xe8/0x150 [ 269.902438][ T7542] should_fail_ex+0x3eb/0x540 [ 269.902463][ T7542] should_failslab+0xa8/0x100 [ 269.902486][ T7542] ? sk_prot_alloc+0x57/0x210 [ 269.902510][ T7542] kmem_cache_alloc_noprof+0x9c/0x600 [ 269.902527][ T7542] ? security_inode_alloc+0x39/0x310 [ 269.902552][ T7542] ? sk_prot_alloc+0x57/0x210 [ 269.902581][ T7542] ? lock_acquire+0x115/0x350 [ 269.902603][ T7542] sk_prot_alloc+0x57/0x210 [ 269.902625][ T7542] ? sk_alloc+0x27/0x390 [ 269.902649][ T7542] sk_alloc+0x3a/0x390 [ 269.902675][ T7542] inet6_create+0x81a/0x1270 [ 269.902692][ T7542] ? inet6_create+0x80/0x1270 [ 269.902710][ T7542] __sock_create+0x4b5/0xac0 [ 269.902736][ T7542] __sys_socket+0xd6/0x1b0 [ 269.902758][ T7542] __x64_sys_socket+0x7a/0x90 [ 269.902779][ T7542] do_syscall_64+0x166/0x520 [ 269.902795][ T7542] ? trace_irq_disable+0x3b/0x140 [ 269.902816][ T7542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.902831][ T7542] ? clear_bhb_loop+0x70/0xc0 [ 269.902850][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.902865][ T7542] RIP: 0033:0x7f9dc679f559 [ 269.902879][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.902892][ T7542] RSP: 002b:00007f9dc768b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 269.902927][ T7542] RAX: ffffffffffffffda RBX: 00007f9dc6a25fa0 RCX: 00007f9dc679f559 [ 269.902939][ T7542] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 269.902948][ T7542] RBP: 00007f9dc6836b20 R08: 0000000000000000 R09: 0000000000000000 [ 269.902958][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.902967][ T7542] R13: 00007f9dc6a26038 R14: 00007f9dc6a25fa0 R15: 00007fff03d94868 [ 269.902992][ T7542] [ 270.303415][ T7545] loop2: detected capacity change from 0 to 256 [ 270.321731][ T7545] vfat: Unknown parameter 'IF?©ęż„}utf8' [ 270.351414][ T5793] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 270.455704][ T7555] hpfs: hpfs_map_4sectors(): unaligned read [ 270.501406][ T5793] usb 4-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 270.502823][ T5793] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.502877][ T5793] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 270.502907][ T5793] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 270.502951][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.790588][ T5793] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 270.808737][ T7567] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 270.848974][ T5793] usb 4-1: USB disconnect, device number 23 [ 271.198916][ T7495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.223240][ T7495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.243842][ T7495] bond0 (unregistering): Released all slaves [ 271.286538][ T5301] 8021q: adding VLAN 0 to HW filter on device eth5 [ 271.589506][ T55] Bluetooth: hci5: command tx timeout [ 272.728478][ T7599] ip_tables: iptables: counters copy to user failed while replacing table [ 272.970835][ T7537] rxe_eth0 speed is unknown, defaulting to 1000 [ 273.450991][ T7606] loop5: detected capacity change from 0 to 512 [ 273.522292][ T7606] EXT4-fs error (device loop5): __ext4_iget:6490: inode #2: block 131072: comm syz.5.352: invalid block [ 273.522329][ T7606] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 273.529263][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 273.529325][ C0] EXT4-fs (loop5): initial error at time 1792907068: __ext4_iget:6490: inode 2: block 131072 [ 273.529426][ C0] EXT4-fs (loop5): last error at time 1792907068: __ext4_iget:6490: inode 2: block 131072 [ 273.543434][ T7606] EXT4-fs (loop5): get root inode failed [ 273.543502][ T7606] EXT4-fs (loop5): mount failed [ 273.793738][ T55] Bluetooth: hci5: command tx timeout [ 273.925847][ T7608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.353'. [ 273.928702][ T7495] hsr_slave_0: left promiscuous mode [ 273.952271][ T7495] hsr_slave_1: left promiscuous mode [ 273.965131][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.965155][ T7495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.000134][ T7613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.353'. [ 274.055033][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.055052][ T7495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.181654][ T7617] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl812) [ 274.213319][ T7495] veth1_macvtap: left promiscuous mode [ 274.571795][ T7495] veth0_macvtap: left promiscuous mode [ 274.571924][ T7495] veth1_vlan: left promiscuous mode [ 274.571997][ T7495] veth0_vlan: left promiscuous mode [ 274.945193][ T7592] loop3: detected capacity change from 0 to 32768 [ 275.074309][ T7592] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.200131][ T7592] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 275.216919][ T7592] XFS (loop3): Starting recovery (logdev: internal) [ 275.258767][ T7592] XFS (loop3): Ending recovery (logdev: internal) [ 275.463891][ T5647] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.796211][ T7495] team0 (unregistering): Port device team_slave_1 removed [ 275.816981][ T7495] team0 (unregistering): Port device team_slave_0 removed [ 275.824880][ T55] Bluetooth: hci5: command tx timeout [ 275.847854][ T7635] FAULT_INJECTION: forcing a failure. [ 275.847854][ T7635] name failslab, interval 1, probability 0, space 0, times 0 [ 275.847889][ T7635] CPU: 1 UID: 0 PID: 7635 Comm: syz.3.356 Not tainted syzkaller #0 PREEMPT(full) [ 275.847913][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 275.847926][ T7635] Call Trace: [ 275.847935][ T7635] [ 275.847944][ T7635] dump_stack_lvl+0xe8/0x150 [ 275.847985][ T7635] should_fail_ex+0x3eb/0x540 [ 275.848016][ T7635] should_failslab+0xa8/0x100 [ 275.848052][ T7635] __kvmalloc_node_noprof+0x171/0x820 [ 275.848087][ T7635] ? traverse+0xf1/0x620 [ 275.848106][ T7635] ? traverse+0xf1/0x620 [ 275.848134][ T7635] traverse+0xf1/0x620 [ 275.848169][ T7635] seq_read_iter+0xb6a/0xca0 [ 275.848196][ T7635] ? apparmor_file_permission+0x1fb/0x2b0 [ 275.848235][ T7635] proc_reg_read_iter+0x1b7/0x280 [ 275.848265][ T7635] vfs_read+0x595/0xa80 [ 275.848304][ T7635] ? __pfx_vfs_read+0x10/0x10 [ 275.848344][ T7635] ? __fget_files+0x2a/0x420 [ 275.848388][ T7635] ? fdget+0x1ac/0x250 [ 275.848434][ T7635] __x64_sys_pread64+0x196/0x220 [ 275.848469][ T7635] ? __pfx___x64_sys_pread64+0x10/0x10 [ 275.848514][ T7635] do_syscall_64+0x166/0x520 [ 275.848548][ T7635] ? trace_irq_disable+0x3b/0x140 [ 275.848578][ T7635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.848601][ T7635] ? clear_bhb_loop+0x70/0xc0 [ 275.848628][ T7635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.848651][ T7635] RIP: 0033:0x7f9dc679f559 [ 275.848671][ T7635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.848694][ T7635] RSP: 002b:00007f9dc768b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 275.848717][ T7635] RAX: ffffffffffffffda RBX: 00007f9dc6a25fa0 RCX: 00007f9dc679f559 [ 275.848734][ T7635] RDX: 00000000000000cb RSI: 0000200000000740 RDI: 0000000000000003 [ 275.848748][ T7635] RBP: 00007f9dc768b090 R08: 0000000000000000 R09: 0000000000000000 [ 275.848762][ T7635] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 275.848774][ T7635] R13: 00007f9dc6a26038 R14: 00007f9dc6a25fa0 R15: 00007fff03d94868 [ 275.848809][ T7635] [ 276.285167][ T7638] zram: Cannot change disksize for initialized device [ 277.244343][ T5301] 8021q: adding VLAN 0 to HW filter on device eth6 [ 277.313470][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.5.358'. [ 277.373493][ T7641] netlink: 288 bytes leftover after parsing attributes in process `syz.5.358'. [ 277.456476][ T7641] loop5: detected capacity change from 0 to 512 [ 277.521809][ T7641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.521891][ T7641] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.899171][ T55] Bluetooth: hci5: command tx timeout [ 277.906901][ T7655] netlink: 'syz.2.359': attribute type 25 has an invalid length. [ 277.927723][ T7655] FAULT_INJECTION: forcing a failure. [ 277.927723][ T7655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.927757][ T7655] CPU: 1 UID: 0 PID: 7655 Comm: syz.2.359 Not tainted syzkaller #0 PREEMPT(full) [ 277.927784][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 277.927798][ T7655] Call Trace: [ 277.927808][ T7655] [ 277.927817][ T7655] dump_stack_lvl+0xe8/0x150 [ 277.927860][ T7655] should_fail_ex+0x3eb/0x540 [ 277.927891][ T7655] strncpy_from_user+0x36/0x2c0 [ 277.927930][ T7655] __se_sys_add_key+0xdb/0x420 [ 277.927960][ T7655] ? __pfx___se_sys_add_key+0x10/0x10 [ 277.927996][ T7655] ? __x64_sys_add_key+0x20/0xc0 [ 277.928024][ T7655] do_syscall_64+0x166/0x520 [ 277.928048][ T7655] ? trace_irq_disable+0x3b/0x140 [ 277.928079][ T7655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.928102][ T7655] ? clear_bhb_loop+0x70/0xc0 [ 277.928130][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.928153][ T7655] RIP: 0033:0x7ffbc139f559 [ 277.928174][ T7655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.928193][ T7655] RSP: 002b:00007ffbc2315028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 277.928217][ T7655] RAX: ffffffffffffffda RBX: 00007ffbc1626090 RCX: 00007ffbc139f559 [ 277.928233][ T7655] RDX: 0000200000000800 RSI: 0000200000000900 RDI: 0000200000000780 [ 277.928249][ T7655] RBP: 00007ffbc1436b20 R08: ffffffffffffffff R09: 0000000000000000 [ 277.928264][ T7655] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000 [ 277.928278][ T7655] R13: 00007ffbc1626128 R14: 00007ffbc1626090 R15: 00007fff13df5f88 [ 277.928314][ T7655] [ 278.360628][ T5978] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.421441][ T998] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 278.570038][ T998] usb 3-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 278.571532][ T998] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.571581][ T998] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 278.571609][ T998] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 278.571649][ T998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.726665][ T7668] Bluetooth: hci0: unsupported parameter 5161 [ 278.726691][ T7668] Bluetooth: hci0: unsupported parameter 8192 [ 278.726706][ T7668] Bluetooth: hci0: unsupported parameter 5161 [ 278.726718][ T7668] Bluetooth: hci0: unsupported parameter 8192 [ 278.776012][ T7668] 0x000000000000-0x000000010001 : "" [ 278.807105][ T998] cxacru 3-1:1.0: send of cm 0x90 failed (-71) [ 278.816202][ T7671] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 278.869264][ T998] usb 3-1: USB disconnect, device number 14 [ 279.150305][ T7668] ftl_cs: FTL header corrupt! [ 279.381747][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.383717][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.387063][ T7537] bridge_slave_0: entered allmulticast mode [ 279.418509][ T7537] bridge_slave_0: entered promiscuous mode [ 279.433118][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.433307][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.433469][ T7537] bridge_slave_1: entered allmulticast mode [ 279.436312][ T7537] bridge_slave_1: entered promiscuous mode [ 279.543428][ T7537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.559220][ T7537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.586887][ T27] block nbd2: Possible stuck request ffff8880286d7000: control (read@0,1024B). Runtime 90 seconds [ 279.586930][ T27] block nbd2: Possible stuck request ffff8880286d71c0: control (read@1024,1024B). Runtime 90 seconds [ 279.586990][ T27] block nbd2: Possible stuck request ffff8880286d7380: control (read@2048,1024B). Runtime 90 seconds [ 279.587019][ T27] block nbd2: Possible stuck request ffff8880286d7540: control (read@3072,1024B). Runtime 90 seconds [ 279.646378][ T7664] loop0: detected capacity change from 0 to 32768 [ 279.672929][ T7537] team0: Port device team_slave_0 added [ 279.685378][ T7537] team0: Port device team_slave_1 added [ 279.710925][ T7664] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.363 (7664) [ 279.740715][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.740733][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.740761][ T7537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.742721][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.742735][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.742761][ T7537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.852870][ T7664] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 279.852905][ T7664] BTRFS info (device loop0): using sha256 checksum algorithm [ 279.887499][ T5301] 8021q: adding VLAN 0 to HW filter on device eth7 [ 279.952093][ T7537] hsr_slave_0: entered promiscuous mode [ 279.955130][ T7537] hsr_slave_1: entered promiscuous mode [ 279.955906][ T7537] debugfs: 'hsr0' already exists in 'hsr' [ 279.955934][ T7537] Cannot create hsr debugfs directory [ 280.077079][ T7664] BTRFS info (device loop0): enabling ssd optimizations [ 280.077107][ T7664] BTRFS info (device loop0): turning on sync discard [ 280.077124][ T7664] BTRFS info (device loop0): enabling free space tree [ 280.343180][ T7707] loop2: detected capacity change from 0 to 512 [ 280.383089][ T7707] EXT4-fs error (device loop2): __ext4_iget:6490: inode #2: block 131072: comm syz.2.367: invalid block [ 280.383125][ T7707] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 280.383790][ T7707] EXT4-fs (loop2): get root inode failed [ 280.383809][ T7707] EXT4-fs (loop2): mount failed [ 281.050113][ T7704] loop5: detected capacity change from 0 to 32768 [ 281.149220][ T7704] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 281.315563][ T7704] XFS (loop5): Ending clean mount [ 281.337164][ T5652] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 281.457483][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.5.366'. [ 281.514435][ T7704] netlink: 68 bytes leftover after parsing attributes in process `syz.5.366'. [ 281.514467][ T7704] netlink: 48 bytes leftover after parsing attributes in process `syz.5.366'. [ 281.549008][ T32] audit: type=1800 audit(1792907076.762:59): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.366" name="file1" dev="loop5" ino=4422 res=0 errno=-22 [ 281.575780][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 281.730610][ T7729] loop3: detected capacity change from 0 to 256 [ 281.731837][ T7729] vfat: Unknown parameter 'IF?©ęż„}utf8' [ 281.822509][ T7537] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 281.914601][ T7537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 281.934302][ T7537] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 281.991005][ T7537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.023014][ T7537] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 282.048610][ T7537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 282.058562][ T7537] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 282.080985][ T7537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 282.194549][ T5978] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 282.618984][ T5301] 8021q: adding VLAN 0 to HW filter on device eth8 [ 282.664275][ T7753] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl812) [ 282.939745][ T26] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 283.069620][ T7537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.123198][ T26] usb 4-1: unable to get BOS descriptor or descriptor too short [ 283.123252][ T26] usb 4-1: New USB device found: idVendor=0582, idProduct=0114, bcdDevice=0.40 [ 283.124444][ T26] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8 [ 283.124472][ T26] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 283.174193][ T26] usb 4-1: string descriptor 0 read error: -22 [ 283.174340][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.178866][ T7752] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.179014][ T7752] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.225594][ T7537] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.241952][ T26] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.242007][ T26] usb 4-1: MIDIStreaming interface descriptor not found [ 283.313968][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.314101][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.374971][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.375090][ T7495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.484069][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.508521][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.675740][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.676254][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.728280][ T998] usb 4-1: USB disconnect, device number 24 [ 283.977748][ T7764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.372'. [ 283.995134][ T7764] netlink: 288 bytes leftover after parsing attributes in process `syz.0.372'. [ 284.020541][ T26] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 284.152538][ T26] usb 6-1: device descriptor read/64, error -71 [ 284.435227][ T26] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 284.533276][ T7775] FAULT_INJECTION: forcing a failure. [ 284.533276][ T7775] name failslab, interval 1, probability 0, space 0, times 0 [ 284.533341][ T7775] CPU: 0 UID: 0 PID: 7775 Comm: syz.2.373 Not tainted syzkaller #0 PREEMPT(full) [ 284.533368][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 284.533393][ T7775] Call Trace: [ 284.533403][ T7775] [ 284.533413][ T7775] dump_stack_lvl+0xe8/0x150 [ 284.533463][ T7775] should_fail_ex+0x3eb/0x540 [ 284.533495][ T7775] should_failslab+0xa8/0x100 [ 284.533534][ T7775] __kvmalloc_node_noprof+0x171/0x820 [ 284.533570][ T7775] ? __se_sys_add_key+0x289/0x420 [ 284.533598][ T7775] ? __se_sys_add_key+0x289/0x420 [ 284.533625][ T7775] ? memdup_user+0x99/0xd0 [ 284.533655][ T7775] __se_sys_add_key+0x289/0x420 [ 284.533685][ T7775] ? __pfx___se_sys_add_key+0x10/0x10 [ 284.533722][ T7775] ? __x64_sys_add_key+0x20/0xc0 [ 284.533751][ T7775] do_syscall_64+0x166/0x520 [ 284.533777][ T7775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.533800][ T7775] ? clear_bhb_loop+0x70/0xc0 [ 284.533829][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.533852][ T7775] RIP: 0033:0x7ffbc139f559 [ 284.533873][ T7775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.533893][ T7775] RSP: 002b:00007ffbc2315028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 284.533918][ T7775] RAX: ffffffffffffffda RBX: 00007ffbc1626090 RCX: 00007ffbc139f559 [ 284.533935][ T7775] RDX: 0000200000000800 RSI: 0000200000000900 RDI: 0000200000000780 [ 284.533952][ T7775] RBP: 00007ffbc1436b20 R08: ffffffffffffffff R09: 0000000000000000 [ 284.533968][ T7775] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000 [ 284.533982][ T7775] R13: 00007ffbc1626128 R14: 00007ffbc1626090 R15: 00007fff13df5f88 [ 284.534019][ T7775] [ 284.699375][ T26] usb 6-1: device descriptor read/64, error -71 [ 284.816516][ T26] usb usb6-port1: attempt power cycle [ 284.979280][ T998] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 285.153956][ T998] usb 3-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 285.168894][ T998] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.169243][ T998] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 285.169310][ T998] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 285.169424][ T998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.280754][ T26] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 285.336842][ T26] usb 6-1: device descriptor read/8, error -71 [ 285.864701][ T26] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 285.942648][ T26] usb 6-1: device descriptor read/8, error -71 [ 286.132537][ T998] cxacru 3-1:1.0: send of cm 0x90 failed (-71) [ 286.205203][ T26] usb usb6-port1: unable to enumerate USB device [ 286.328943][ T7786] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 286.574151][ T998] usb 3-1: USB disconnect, device number 15 [ 286.671177][ T7537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.086219][ T7797] MTD: Couldn't look up './cgroup': -15 [ 287.494709][ T7537] veth0_vlan: entered promiscuous mode [ 287.555968][ T7537] veth1_vlan: entered promiscuous mode [ 287.655077][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 287.686894][ T7537] veth0_macvtap: entered promiscuous mode [ 287.716231][ T7537] veth1_macvtap: entered promiscuous mode [ 287.726073][ T7808] loop3: detected capacity change from 0 to 256 [ 287.741467][ T7808] vfat: Unknown parameter 'IF?©ęż„}utf8' [ 287.787774][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.832305][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.940012][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.940222][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.940371][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.940409][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.327270][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 288.345154][ T303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.345177][ T303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.538430][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.538454][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.843673][ T7831] FAULT_INJECTION: forcing a failure. [ 288.843673][ T7831] name failslab, interval 1, probability 0, space 0, times 0 [ 288.843722][ T7831] CPU: 1 UID: 0 PID: 7831 Comm: syz.5.385 Not tainted syzkaller #0 PREEMPT(full) [ 288.843749][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 288.843763][ T7831] Call Trace: [ 288.843772][ T7831] [ 288.843781][ T7831] dump_stack_lvl+0xe8/0x150 [ 288.843826][ T7831] should_fail_ex+0x3eb/0x540 [ 288.843859][ T7831] should_failslab+0xa8/0x100 [ 288.843893][ T7831] ? key_alloc+0x340/0xd20 [ 288.843925][ T7831] kmem_cache_alloc_noprof+0x9c/0x600 [ 288.843955][ T7831] ? key_alloc+0x340/0xd20 [ 288.844013][ T7831] key_alloc+0x340/0xd20 [ 288.844062][ T7831] __key_create_or_update+0x867/0xab0 [ 288.844112][ T7831] ? __pfx___key_create_or_update+0x10/0x10 [ 288.844146][ T7831] ? lookup_user_key+0x1101/0x1230 [ 288.844201][ T7831] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 288.844251][ T7831] key_create_or_update+0x42/0x60 [ 288.844292][ T7831] __se_sys_add_key+0x349/0x420 [ 288.844347][ T7831] ? __pfx___se_sys_add_key+0x10/0x10 [ 288.844386][ T7831] ? __x64_sys_add_key+0x20/0xc0 [ 288.844416][ T7831] do_syscall_64+0x166/0x520 [ 288.844442][ T7831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.844466][ T7831] ? clear_bhb_loop+0x70/0xc0 [ 288.844495][ T7831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.844519][ T7831] RIP: 0033:0x7fbee539f559 [ 288.844541][ T7831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.844561][ T7831] RSP: 002b:00007fbee61a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 288.844594][ T7831] RAX: ffffffffffffffda RBX: 00007fbee5626090 RCX: 00007fbee539f559 [ 288.844611][ T7831] RDX: 0000200000000800 RSI: 0000200000000900 RDI: 0000200000000780 [ 288.844628][ T7831] RBP: 00007fbee5436b20 R08: ffffffffffffffff R09: 0000000000000000 [ 288.844644][ T7831] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000 [ 288.844658][ T7831] R13: 00007fbee5626128 R14: 00007fbee5626090 R15: 00007ffdedca3038 [ 288.844697][ T7831] [ 289.058818][ T7833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.386'. [ 289.062687][ T7833] netlink: 288 bytes leftover after parsing attributes in process `syz.3.386'. [ 289.089391][ T7833] loop3: detected capacity change from 0 to 512 [ 289.248352][ T7833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.248471][ T7833] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.399906][ T26] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 289.429119][ T5647] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.709352][ T26] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 289.714695][ T26] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.714748][ T26] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 289.714776][ T26] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 289.714819][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.847108][ T7845] tmpfs: Unknown parameter '&' [ 292.072690][ T7857] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 292.165289][ T7857] loop0: detected capacity change from 0 to 128 [ 292.635972][ T7857] loop0: detected capacity change from 0 to 32768 [ 292.699934][ T26] cxacru 6-1:1.0: send of cm 0x90 failed (-104) [ 292.701808][ T7862] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 292.841626][ T26] usb 6-1: USB disconnect, device number 19 [ 293.194656][ T7867] FAULT_INJECTION: forcing a failure. [ 293.194656][ T7867] name failslab, interval 1, probability 0, space 0, times 0 [ 293.194778][ T7867] CPU: 0 UID: 0 PID: 7867 Comm: syz.3.392 Not tainted syzkaller #0 PREEMPT(full) [ 293.194813][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 293.194827][ T7867] Call Trace: [ 293.194836][ T7867] [ 293.194847][ T7867] dump_stack_lvl+0xe8/0x150 [ 293.194890][ T7867] should_fail_ex+0x3eb/0x540 [ 293.194925][ T7867] should_failslab+0xa8/0x100 [ 293.194963][ T7867] __kmalloc_cache_noprof+0x9e/0x600 [ 293.194995][ T7867] ? assoc_array_insert+0x90/0x2f60 [ 293.195025][ T7867] ? assoc_array_insert+0x90/0x2f60 [ 293.195062][ T7867] assoc_array_insert+0x90/0x2f60 [ 293.195108][ T7867] ? down_write+0x166/0x200 [ 293.195137][ T7867] ? __pfx_down_write+0x10/0x10 [ 293.195166][ T7867] ? __pfx_key_set_index_key+0x10/0x10 [ 293.195196][ T7867] __key_link_begin+0xd6/0x1f0 [ 293.195224][ T7867] __key_create_or_update+0x427/0xab0 [ 293.195271][ T7867] ? __pfx___key_create_or_update+0x10/0x10 [ 293.195304][ T7867] ? lookup_user_key+0x1101/0x1230 [ 293.195356][ T7867] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 293.195406][ T7867] key_create_or_update+0x42/0x60 [ 293.195446][ T7867] __se_sys_add_key+0x349/0x420 [ 293.195478][ T7867] ? __pfx___se_sys_add_key+0x10/0x10 [ 293.195516][ T7867] ? __x64_sys_add_key+0x20/0xc0 [ 293.195545][ T7867] do_syscall_64+0x166/0x520 [ 293.195570][ T7867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.195594][ T7867] ? clear_bhb_loop+0x70/0xc0 [ 293.195622][ T7867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.195646][ T7867] RIP: 0033:0x7f9dc679f559 [ 293.195668][ T7867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.195688][ T7867] RSP: 002b:00007f9dc766a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 293.195713][ T7867] RAX: ffffffffffffffda RBX: 00007f9dc6a26090 RCX: 00007f9dc679f559 [ 293.195731][ T7867] RDX: 0000200000000800 RSI: 0000200000000900 RDI: 0000200000000780 [ 293.195747][ T7867] RBP: 00007f9dc6836b20 R08: ffffffffffffffff R09: 0000000000000000 [ 293.195763][ T7867] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000 [ 293.195776][ T7867] R13: 00007f9dc6a26128 R14: 00007f9dc6a26090 R15: 00007fff03d94868 [ 293.195822][ T7867] [ 293.545695][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 293.751044][ T1573] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 293.906341][ T1573] usb 4-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 293.927067][ T1573] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.927123][ T1573] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 293.927152][ T1573] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 293.927196][ T1573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.038772][ T7866] loop7: detected capacity change from 0 to 256 [ 294.064454][ T7874] loop0: detected capacity change from 0 to 32768 [ 294.095136][ T7874] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 294.147981][ T7874] XFS (loop0): Ending clean mount [ 294.163052][ T7874] netlink: 52 bytes leftover after parsing attributes in process `syz.0.397'. [ 296.066661][ T1573] cxacru 4-1:1.0: send of cm 0x90 failed (-104) [ 296.088615][ T7896] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 296.237700][ T5757] usb 4-1: USB disconnect, device number 25 [ 296.779183][ T7908] tmpfs: Unknown parameter '&' [ 299.221024][ T5652] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 299.535984][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.7.407'. [ 299.629273][ T5746] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 299.688365][ T7924] loop0: detected capacity change from 0 to 512 [ 299.697586][ T7924] EXT4-fs: Ignoring removed orlov option [ 299.697610][ T7924] EXT4-fs: Ignoring removed nobh option [ 299.697669][ T7924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.697690][ T7924] EXT4-fs: Ignoring removed bh option [ 299.697751][ T7924] ext4: Unknown parameter 'fsuuid' [ 299.798901][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.7.409'. [ 299.805905][ T5746] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 299.834222][ T5746] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.834272][ T5746] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.834322][ T5746] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 299.871638][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.871672][ T5746] usb 4-1: Product: syz [ 299.871683][ T5746] usb 4-1: Manufacturer: syz [ 299.871693][ T5746] usb 4-1: SerialNumber: syz [ 300.002296][ T7537] cgroup: fork rejected by pids controller in /syz7 [ 300.215702][ T7914] loop3: detected capacity change from 0 to 128 [ 300.368978][ T7932] jffs2: notice: (7932) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 300.531321][ T5746] cdc_ncm 4-1:1.0: bind() failure [ 300.580311][ T5746] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 300.580361][ T5746] cdc_ncm 4-1:1.1: bind() failure [ 300.651620][ T5746] usb 4-1: USB disconnect, device number 26 [ 300.898714][ T52] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.047720][ T52] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.197839][ T52] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.335959][ T52] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.578862][ T7956] loop5: detected capacity change from 0 to 512 [ 301.687858][ T4956] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.707650][ T4956] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.716677][ T4956] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.735156][ T4956] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.747403][ T4956] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.810247][ T5850] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 301.978835][ T5850] usb 4-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 301.995282][ T5850] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 301.995313][ T5850] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 301.995333][ T5850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.995350][ T5850] usb 4-1: config 0 has no interface number 0 [ 301.995387][ T5850] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 301.995409][ T5850] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.995430][ T5850] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 301.995472][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.074142][ T5850] usb 4-1: config 0 descriptor?? [ 302.417945][ T5850] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 302.679346][ T7981] loop5: detected capacity change from 0 to 32768 [ 302.790268][ T7982] tmpfs: Unknown parameter '&' [ 303.179875][ T314] usb 4-1: Failed to submit usb control message: -71 [ 303.180258][ T314] usb 4-1: unable to send the bmi data to the device: -71 [ 303.180325][ T314] usb 4-1: unable to get target info from device [ 303.180405][ T314] usb 4-1: could not get target info (-71) [ 303.180588][ T314] usb 4-1: could not probe fw (-71) [ 303.390813][ T5850] usb 4-1: USB disconnect, device number 27 [ 303.899388][ T55] Bluetooth: hci5: command tx timeout [ 304.028248][ T52] bridge_slave_1: left allmulticast mode [ 304.028278][ T52] bridge_slave_1: left promiscuous mode [ 304.028653][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.116469][ T52] bridge_slave_0: left allmulticast mode [ 304.116500][ T52] bridge_slave_0: left promiscuous mode [ 304.116742][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.330716][ T7987] loop2: detected capacity change from 0 to 512 [ 304.467505][ T7987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.467626][ T7987] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.503098][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 305.548646][ T5646] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.683980][ T8006] loop5: detected capacity change from 0 to 256 [ 305.684777][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.720950][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.742041][ T52] bond0 (unregistering): Released all slaves [ 305.979900][ T4956] Bluetooth: hci5: command tx timeout [ 306.502197][ T8035] loop2: detected capacity change from 0 to 128 [ 306.727492][ T8036] 0x000000000000-0x000000010000 : "" [ 306.727779][ T8036] FAULT_INJECTION: forcing a failure. [ 306.727779][ T8036] name failslab, interval 1, probability 0, space 0, times 0 [ 306.727813][ T8036] CPU: 1 UID: 0 PID: 8036 Comm: syz.0.425 Not tainted syzkaller #0 PREEMPT(full) [ 306.727841][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 306.727855][ T8036] Call Trace: [ 306.727864][ T8036] [ 306.727874][ T8036] dump_stack_lvl+0xe8/0x150 [ 306.727918][ T8036] should_fail_ex+0x3eb/0x540 [ 306.727951][ T8036] should_failslab+0xa8/0x100 [ 306.727987][ T8036] ? __kernfs_new_node+0xe6/0x980 [ 306.728012][ T8036] kmem_cache_alloc_noprof+0x9c/0x600 [ 306.728042][ T8036] ? __kernfs_new_node+0xe6/0x980 [ 306.728074][ T8036] __kernfs_new_node+0xe6/0x980 [ 306.728111][ T8036] ? __pfx___kernfs_new_node+0x10/0x10 [ 306.728133][ T8036] ? lock_acquire+0x115/0x350 [ 306.728163][ T8036] ? kernfs_root+0x1c/0x230 [ 306.728193][ T8036] ? kernfs_root+0x1c/0x230 [ 306.728227][ T8036] ? kernfs_root+0x1c/0x230 [ 306.728246][ T8036] ? kernfs_root+0x1c/0x230 [ 306.728280][ T8036] kernfs_new_node+0xeb/0x140 [ 306.728309][ T8036] __kernfs_create_file+0x4b/0x2e0 [ 306.728340][ T8036] sysfs_add_file_mode_ns+0x237/0x300 [ 306.728382][ T8036] internal_create_group+0x679/0x1180 [ 306.728423][ T8036] ? __pfx_internal_create_group+0x10/0x10 [ 306.728448][ T8036] ? up_write+0x19d/0x4a0 [ 306.728470][ T8036] ? kernfs_activate_one+0x22d/0x340 [ 306.728497][ T8036] sysfs_create_groups+0x59/0x120 [ 306.728523][ T8036] device_add_attrs+0x12c/0x600 [ 306.728560][ T8036] ? __pfx_device_add_attrs+0x10/0x10 [ 306.728600][ T8036] ? device_add_class_symlinks+0x21f/0x240 [ 306.728638][ T8036] device_add+0x488/0xb80 [ 306.728674][ T8036] add_mtd_device+0xda9/0x17b0 [ 306.728714][ T8036] ? __pfx_add_mtd_device+0x10/0x10 [ 306.728742][ T8036] ? mtd_add_partition+0x37b/0x590 [ 306.728771][ T8036] ? __mutex_unlock_slowpath+0x731/0x900 [ 306.728804][ T8036] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 306.728847][ T8036] mtd_add_partition+0x388/0x590 [ 306.728878][ T8036] ? __pfx_mtd_add_partition+0x10/0x10 [ 306.728911][ T8036] ? __might_fault+0xaf/0x130 [ 306.728941][ T8036] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 306.728973][ T8036] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 306.729023][ T8036] ? __might_fault+0xaf/0x130 [ 306.729052][ T8036] mtdchar_ioctl+0x14f7/0x1bc0 [ 306.729084][ T8036] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 306.729118][ T8036] ? __lock_acquire+0x747/0x2de0 [ 306.729164][ T8036] ? tomoyo_path_number_perm+0x219/0x5f0 [ 306.729204][ T8036] ? __mutex_trylock_common+0x15f/0x270 [ 306.729242][ T8036] ? __pfx___mutex_trylock_common+0x10/0x10 [ 306.729288][ T8036] ? rcu_is_watching+0x16/0xb0 [ 306.729323][ T8036] ? trace_contention_end+0x3d/0x140 [ 306.729359][ T8036] ? __mutex_lock+0x305/0x15a0 [ 306.729384][ T8036] ? do_futex+0x3e7/0x4e0 [ 306.729416][ T8036] ? mtdchar_unlocked_ioctl+0xa1/0xd0 [ 306.729445][ T8036] ? __pfx___mutex_lock+0x10/0x10 [ 306.729481][ T8036] ? __fget_files+0x2a/0x420 [ 306.729509][ T8036] ? __fget_files+0x2a/0x420 [ 306.729540][ T8036] mtdchar_unlocked_ioctl+0xae/0xd0 [ 306.729567][ T8036] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 306.729594][ T8036] __se_sys_ioctl+0xfc/0x170 [ 306.729632][ T8036] do_syscall_64+0x166/0x520 [ 306.729673][ T8036] ? trace_irq_disable+0x3b/0x140 [ 306.729704][ T8036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.729727][ T8036] ? clear_bhb_loop+0x70/0xc0 [ 306.729756][ T8036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.729778][ T8036] RIP: 0033:0x7f596ff9f559 [ 306.729801][ T8036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.729821][ T8036] RSP: 002b:00007f5970e3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.729847][ T8036] RAX: ffffffffffffffda RBX: 00007f5970226180 RCX: 00007f596ff9f559 [ 306.729864][ T8036] RDX: 00002000000004c0 RSI: 0000000000001269 RDI: 000000000000000a [ 306.729879][ T8036] RBP: 00007f5970036b20 R08: 0000000000000000 R09: 0000000000000000 [ 306.729893][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.729907][ T8036] R13: 00007f5970226218 R14: 00007f5970226180 R15: 00007ffc20fe23b8 [ 306.729945][ T8036] [ 307.498817][ T7960] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.063555][ T4956] Bluetooth: hci5: command tx timeout [ 308.088266][ T8054] tmpfs: Unknown parameter '&' [ 310.406832][ T4956] Bluetooth: hci5: command tx timeout [ 310.474383][ T27] block nbd2: Possible stuck request ffff8880286d7000: control (read@0,1024B). Runtime 120 seconds [ 310.474432][ T27] block nbd2: Possible stuck request ffff8880286d71c0: control (read@1024,1024B). Runtime 120 seconds [ 310.474462][ T27] block nbd2: Possible stuck request ffff8880286d7380: control (read@2048,1024B). Runtime 120 seconds [ 310.474490][ T27] block nbd2: Possible stuck request ffff8880286d7540: control (read@3072,1024B). Runtime 120 seconds [ 311.030529][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 311.154873][ T52] hsr_slave_0: left promiscuous mode [ 311.263471][ T52] hsr_slave_1: left promiscuous mode [ 311.338552][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.338665][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.495308][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.495338][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.593829][ T52] veth1_macvtap: left promiscuous mode [ 311.593873][ T52] veth0_macvtap: left promiscuous mode [ 311.593981][ T52] veth1_vlan: left promiscuous mode [ 311.594047][ T52] veth0_vlan: left promiscuous mode [ 312.361674][ T52] team0 (unregistering): Port device team_slave_1 removed [ 312.391273][ T5772] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 312.408288][ T52] team0 (unregistering): Port device team_slave_0 removed [ 312.539607][ T5772] usb 3-1: Using ep0 maxpacket: 32 [ 312.540339][ T5772] usb 3-1: New USB device found: idVendor=06cd, idProduct=0104, bcdDevice=35.09 [ 312.542556][ T5772] usb 3-1: config 2 has an invalid interface number: 51 but max is 0 [ 312.542586][ T5772] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 312.542606][ T5772] usb 3-1: config 2 has no interface number 0 [ 312.542648][ T5772] usb 3-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 312.542674][ T5772] usb 3-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 312.542697][ T5772] usb 3-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 312.542720][ T5772] usb 3-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 312.542745][ T5772] usb 3-1: config 2 interface 51 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 312.542773][ T5772] usb 3-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 312.542796][ T5772] usb 3-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 312.542819][ T5772] usb 3-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 312.542843][ T5772] usb 3-1: config 2 interface 51 altsetting 255 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 312.542869][ T5772] usb 3-1: config 2 interface 51 altsetting 255 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 312.542895][ T5772] usb 3-1: config 2 interface 51 altsetting 255 endpoint 0x84 has invalid wMaxPacketSize 0 [ 312.542918][ T5772] usb 3-1: config 2 interface 51 altsetting 255 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 312.542946][ T5772] usb 3-1: config 2 interface 51 has no altsetting 0 [ 312.545343][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.545368][ T5772] usb 3-1: Product: syz [ 312.545384][ T5772] usb 3-1: Manufacturer: syz [ 312.545400][ T5772] usb 3-1: SerialNumber: syz [ 312.551290][ T8098] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 312.808833][ T8102] netlink: 'syz.5.438': attribute type 61 has an invalid length. [ 315.061368][ T5772] keyspan_pda 3-1:2.51: Keyspan PDA converter detected [ 315.080268][ T5772] usb 3-1: Keyspan PDA converter now attached to ttyUSB0 [ 315.120685][ T5772] usb 3-1: USB disconnect, device number 16 [ 315.158014][ T5772] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 315.158695][ T5772] keyspan_pda 3-1:2.51: device disconnected [ 315.818119][ T8112] FAULT_INJECTION: forcing a failure. [ 315.818119][ T8112] name failslab, interval 1, probability 0, space 0, times 0 [ 315.818175][ T8112] CPU: 0 UID: 0 PID: 8112 Comm: syz.3.441 Not tainted syzkaller #0 PREEMPT(full) [ 315.818201][ T8112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 315.818214][ T8112] Call Trace: [ 315.818223][ T8112] [ 315.818231][ T8112] dump_stack_lvl+0xe8/0x150 [ 315.818270][ T8112] should_fail_ex+0x3eb/0x540 [ 315.818291][ T8112] should_failslab+0xa8/0x100 [ 315.818316][ T8112] __kmalloc_noprof+0xf9/0x710 [ 315.818333][ T8112] ? rcu_is_watching+0x16/0xb0 [ 315.818356][ T8112] ? tomoyo_realpath_from_path+0xef/0x640 [ 315.818370][ T8112] ? tomoyo_realpath_from_path+0xef/0x640 [ 315.818396][ T8112] tomoyo_realpath_from_path+0xef/0x640 [ 315.818418][ T8112] ? tomoyo_path_number_perm+0x219/0x5f0 [ 315.818440][ T8112] tomoyo_path_number_perm+0x246/0x5f0 [ 315.818482][ T8112] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 315.818510][ T8112] ? preempt_schedule_thunk+0x16/0x40 [ 315.818555][ T8112] ? __rcu_read_unlock+0x83/0xe0 [ 315.818575][ T8112] ? __fget_files+0x2a/0x420 [ 315.818595][ T8112] ? __fget_files+0x2a/0x420 [ 315.818618][ T8112] security_file_ioctl+0xc3/0x2a0 [ 315.818642][ T8112] __se_sys_ioctl+0x47/0x170 [ 315.818670][ T8112] do_syscall_64+0x166/0x520 [ 315.818694][ T8112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.818710][ T8112] ? clear_bhb_loop+0x70/0xc0 [ 315.818729][ T8112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.818745][ T8112] RIP: 0033:0x7f9dc679f559 [ 315.818759][ T8112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.818773][ T8112] RSP: 002b:00007f9dc766a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.818789][ T8112] RAX: ffffffffffffffda RBX: 00007f9dc6a26090 RCX: 00007f9dc679f559 [ 315.818800][ T8112] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000005 [ 315.818810][ T8112] RBP: 00007f9dc766a090 R08: 0000000000000000 R09: 0000000000000000 [ 315.818820][ T8112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.818829][ T8112] R13: 00007f9dc6a26128 R14: 00007f9dc6a26090 R15: 00007fff03d94868 [ 315.818854][ T8112] [ 315.818911][ T8112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 317.343362][ T8119] tmpfs: Unknown parameter '&' [ 317.420215][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.420304][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.442116][ T8132] loop5: detected capacity change from 0 to 256 [ 318.458434][ T8132] vfat: Unknown parameter 'IF?©ęż„}utf8' [ 319.659003][ T7960] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.659482][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.659866][ T7960] bridge_slave_0: entered allmulticast mode [ 319.664797][ T7960] bridge_slave_0: entered promiscuous mode [ 319.690715][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.690824][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.690982][ T7960] bridge_slave_1: entered allmulticast mode [ 319.695220][ T7960] bridge_slave_1: entered promiscuous mode [ 321.428202][ T8156] loop5: detected capacity change from 0 to 256 [ 321.441228][ T7960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.441616][ T8156] vfat: Unknown parameter 'IF?©ęż„}utf8' [ 321.473239][ T7960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.716779][ T5301] 8021q: adding VLAN 0 to HW filter on device eth9 [ 321.747020][ T7960] team0: Port device team_slave_0 added [ 321.780812][ T7960] team0: Port device team_slave_1 added [ 321.861102][ T7960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.861318][ T7960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.861347][ T7960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.931826][ T7960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.931844][ T7960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.931876][ T7960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.214025][ T7960] hsr_slave_0: entered promiscuous mode [ 322.219887][ T7960] hsr_slave_1: entered promiscuous mode [ 322.225716][ T7960] debugfs: 'hsr0' already exists in 'hsr' [ 322.225773][ T7960] Cannot create hsr debugfs directory [ 324.302172][ T8169] loop5: detected capacity change from 0 to 8192 [ 324.439468][ T8169] loop5: p1 p2 p3 p4[DM] [ 324.439704][ T8169] loop5: p1 size 835329 extends beyond EOD, truncated [ 324.458091][ T8169] loop5: p2 size 327680 extends beyond EOD, truncated [ 324.490998][ T8169] loop5: p3 start 1052673 is beyond EOD, truncated [ 324.491028][ T8169] loop5: p4 size 262144 extends beyond EOD, truncated [ 324.777388][ T8169] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 325.234510][ T5301] 8021q: adding VLAN 0 to HW filter on device eth10 [ 325.341901][ T6138] udevd[6138]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 325.432932][ T8212] tmpfs: Unknown parameter '&' [ 325.533733][ T6350] udevd[6350]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 325.802787][ T6212] udevd[6212]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 326.153161][ T8209] loop0: detected capacity change from 0 to 1024 [ 326.341580][ T8209] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 326.483878][ T8209] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.457: Invalid block bitmap block 0 in block_group 0 [ 326.483918][ T8209] loop0: lost filesystem error report for type 5 error -117 [ 326.501218][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 326.501252][ C0] EXT4-fs (loop0): initial error at time 1792907121: ext4_read_block_bitmap_nowait:487 [ 326.501280][ C0] EXT4-fs (loop0): last error at time 1792907121: ext4_read_block_bitmap_nowait:487 [ 326.562971][ T8209] EXT4-fs (loop0): Remounting filesystem read-only [ 326.563144][ T8209] Quota error (device loop0): write_blk: dquota write failed [ 326.563204][ T8209] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 326.563370][ T8209] EXT4-fs (loop0): 1 orphan inode deleted [ 326.605580][ T8209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.608749][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.458'. [ 326.646400][ T8219] loop5: detected capacity change from 0 to 256 [ 326.659787][ T8219] vfat: Unknown parameter 'IF?©ęż„}utf8' [ 326.872310][ T8227] loop3: detected capacity change from 0 to 256 [ 326.958297][ T5652] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.442894][ T8234] loop2: detected capacity change from 0 to 32768 [ 327.444317][ T8234] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 327.445411][ T8234] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.460 (8234) [ 327.477959][ T8234] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 327.477995][ T8234] BTRFS info (device loop2): using crc32c checksum algorithm [ 327.681110][ T8234] BTRFS info (device loop2): rebuilding free space tree [ 327.711728][ T8234] BTRFS info (device loop2): disabling free space tree [ 327.711820][ T8234] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 327.711844][ T8234] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 327.754999][ T8234] BTRFS info (device loop2): enabling ssd optimizations [ 327.755030][ T8234] BTRFS info (device loop2): turning on async discard [ 327.755048][ T8234] BTRFS info (device loop2): force clearing of disk cache [ 327.755083][ T8234] BTRFS info (device loop2): use zstd compression, level 3 [ 329.247897][ T8263] loop3: detected capacity change from 0 to 32768 [ 329.704903][ T8263] Dev loop3 SGI disklabel: csum bad, label corrupted [ 329.739798][ T7960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 329.775024][ T7960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.777143][ T7960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 330.968763][ T7960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.969870][ T7960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 331.022293][ T7960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.034948][ T7960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 331.068251][ T7960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.300243][ T5646] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 331.343946][ T7960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.411417][ T7960] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.443581][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.443702][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.504080][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.504210][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.596960][ T8298] tmpfs: Unknown parameter '&' [ 335.414246][ T5006] udevd[5006]: worker [6155] /devices/virtual/block/nbd2 is taking a long time [ 335.506514][ T7960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.165471][ T7960] veth0_vlan: entered promiscuous mode [ 338.206717][ T7960] veth1_vlan: entered promiscuous mode [ 338.374943][ T7960] veth0_macvtap: entered promiscuous mode [ 338.406599][ T7960] veth1_macvtap: entered promiscuous mode [ 338.493805][ T7960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.535705][ T7960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.609663][ T303] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.610614][ T303] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.610652][ T303] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.610687][ T303] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.975217][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.975241][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.031554][ T8342] input: syz0 as /devices/virtual/input/input9 [ 339.250357][ T6429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.250379][ T6429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.020849][ T27] block nbd2: Possible stuck request ffff8880286d7000: control (read@0,1024B). Runtime 150 seconds [ 341.024222][ T27] block nbd2: Possible stuck request ffff8880286d71c0: control (read@1024,1024B). Runtime 150 seconds [ 341.024248][ T27] block nbd2: Possible stuck request ffff8880286d7380: control (read@2048,1024B). Runtime 150 seconds [ 341.024268][ T27] block nbd2: Possible stuck request ffff8880286d7540: control (read@3072,1024B). Runtime 150 seconds [ 343.347935][ T8367] fuse: Unknown parameter 'rƒ•Iµļ‰ootmode' [ 344.017732][ T8378] FAULT_INJECTION: forcing a failure. [ 344.017732][ T8378] name failslab, interval 1, probability 0, space 0, times 0 [ 344.017781][ T8378] CPU: 1 UID: 0 PID: 8378 Comm: syz.3.480 Not tainted syzkaller #0 PREEMPT(full) [ 344.017808][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 344.017821][ T8378] Call Trace: [ 344.017829][ T8378] [ 344.017839][ T8378] dump_stack_lvl+0xe8/0x150 [ 344.017880][ T8378] should_fail_ex+0x3eb/0x540 [ 344.017912][ T8378] should_failslab+0xa8/0x100 [ 344.017946][ T8378] ? key_alloc+0x340/0xd20 [ 344.017978][ T8378] kmem_cache_alloc_noprof+0x9c/0x600 [ 344.018007][ T8378] ? key_alloc+0x340/0xd20 [ 344.018046][ T8378] key_alloc+0x340/0xd20 [ 344.018094][ T8378] __key_create_or_update+0x867/0xab0 [ 344.018142][ T8378] ? __pfx___key_create_or_update+0x10/0x10 [ 344.018191][ T8378] ? lookup_user_key+0x1101/0x1230 [ 344.018243][ T8378] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 344.018292][ T8378] key_create_or_update+0x42/0x60 [ 344.018333][ T8378] __se_sys_add_key+0x349/0x420 [ 344.018365][ T8378] ? __pfx___se_sys_add_key+0x10/0x10 [ 344.018407][ T8378] ? __x64_sys_add_key+0x20/0xc0 [ 344.018436][ T8378] do_syscall_64+0x166/0x520 [ 344.018463][ T8378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.018487][ T8378] ? clear_bhb_loop+0x70/0xc0 [ 344.018516][ T8378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.018540][ T8378] RIP: 0033:0x7f9dc679f559 [ 344.018561][ T8378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.018582][ T8378] RSP: 002b:00007f9dc7649028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 344.018606][ T8378] RAX: ffffffffffffffda RBX: 00007f9dc6a26180 RCX: 00007f9dc679f559 [ 344.018623][ T8378] RDX: 0000200000000800 RSI: 0000200000000900 RDI: 0000200000000780 [ 344.018639][ T8378] RBP: 00007f9dc6836b20 R08: ffffffffffffffff R09: 0000000000000000 [ 344.018663][ T8378] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000 [ 344.018677][ T8378] R13: 00007f9dc6a26218 R14: 00007f9dc6a26180 R15: 00007fff03d94868 [ 344.018715][ T8378] [ 344.580597][ T5746] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 344.730681][ T5746] usb 4-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 344.742512][ T5746] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.742574][ T5746] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 344.742603][ T5746] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 344.742648][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.750366][ T5746] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 345.754093][ T8386] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 345.792406][ T5746] usb 4-1: USB disconnect, device number 28 [ 346.315027][ T35] INFO: task syz.1.224:6948 blocked for more than 144 seconds. [ 346.315053][ T35] Not tainted syzkaller #0 [ 346.315066][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 346.315077][ T35] task:syz.1.224 state:D stack:27216 pid:6948 tgid:6944 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 346.315144][ T35] Call Trace: [ 346.315153][ T35] [ 346.315168][ T35] __schedule+0x17dd/0x5830 [ 346.315227][ T35] ? __pfx___schedule+0x10/0x10 [ 346.315260][ T35] ? schedule+0x90/0x2b0 [ 346.315304][ T35] schedule+0x164/0x2b0 [ 346.315330][ T35] schedule_preempt_disabled+0x13/0x30 [ 346.315352][ T35] __mutex_lock+0x7c4/0x15a0 [ 346.315383][ T35] ? __mutex_lock+0x5cd/0x15a0 [ 346.315413][ T35] ? sync_bdevs+0x276/0x470 [ 346.315449][ T35] ? __pfx___mutex_lock+0x10/0x10 ** replaying previous printk message ** [ 346.315449][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 346.315487][ T35] ? iput+0x451/0xf00 [ 346.315523][ T35] sync_bdevs+0x276/0x470 [ 346.315561][ T35] __ia32_sys_sync+0xc5/0x120 [ 346.315595][ T35] ? __pfx___ia32_sys_sync+0x10/0x10 [ 346.315631][ T35] ? do_syscall_64+0xc8/0x520 [ 346.315658][ T35] do_syscall_64+0x166/0x520 [ 346.315679][ T35] ? trace_irq_disable+0x3b/0x140 [ 346.315709][ T35] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.315732][ T35] ? clear_bhb_loop+0x70/0xc0 [ 346.315760][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.315783][ T35] RIP: 0033:0x7fa1ca99f559 [ 346.315811][ T35] RSP: 002b:00007fa1cb7ad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 346.315833][ T35] RAX: ffffffffffffffda RBX: 00007fa1cac26180 RCX: 00007fa1ca99f559 [ 346.315849][ T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.315862][ T35] RBP: 00007fa1cac26180 R08: 0000000000000000 R09: 0000000000000000 [ 346.315876][ T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.315890][ T35] R13: 00007fa1cac26218 R14: 00007fa1cac26180 R15: 00007ffce0b17e28 [ 346.315927][ T35] [ 346.315963][ T35] [ 346.315963][ T35] Showing all locks held in the system: [ 346.315975][ T35] locks held by khungtaskd/35: 1, last CPU#1: [ 346.315991][ T35] #0: ffffffff9015a4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 346.316092][ T35] locks held by getty/5397: 2, on CPU#0: [ 346.316107][ T35] #0: ffff888036f4a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 346.316161][ T35] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 346.316224][ T35] locks held by syz-executor/5652: 1, last CPU#1: [ 346.316240][ T35] #0: ffff88807a06e460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 346.327569][ T35] locks held by kworker/0:4/5746: 5, last CPU#0: [ 346.327588][ T35] #0: ffff888024694948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 346.327762][ T35] #1: ffffc900041e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 346.327934][ T35] #2: ffff888028edd1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 346.328085][ T35] #3: ffff888055c491d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 346.328296][ T35] #4: ffffffff91a33b00 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 346.328475][ T35] locks held by syz-executor/5978: 4, last CPU#0: [ 346.328509][ T35] #0: ffffffff9023a610 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 346.328660][ T35] #1: ffff88807dc74cc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18a/0x1e10 [ 346.328797][ T35] #2: ffff88807c38e540 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x277/0x1e10 [ 346.341121][ T35] #3: ffffffff9015a4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 346.341328][ T35] locks held by kworker/u8:13/6105: 3, last CPU#1: [ 346.341343][ T35] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 346.341405][ T35] #1: ffffc9000511fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 346.341466][ T35] #2: ffff8880794a7258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 346.341528][ T35] locks held by udevd/6155: 1, on CPU#1: [ 346.341543][ T35] #0: ffff8880284a8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 346.341604][ T35] locks held by kworker/u8:14/6429: 3, last CPU#1: [ 346.341619][ T35] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 346.341680][ T35] #1: ffffc90003597c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 346.341743][ T35] #2: ffff88802cc16258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 346.341812][ T35] locks held by syz.1.224/6948: 1, on CPU#1: [ 346.341827][ T35] #0: ffff8880284a8350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 346.341892][ T35] locks held by syz.2.470/8360: 1, on CPU#1: [ 346.341907][ T35] #0: ffff8880284a8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 346.341965][ T35] locks held by syz.7.412/8369: 2, last CPU#1: [ 346.341980][ T35] #0: ffff88807dc27180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 346.342030][ T35] #1: ffffffff9015a4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 346.342091][ T35] locks held by syz.3.480/8374: 2, on CPU#1: [ 346.342106][ T35] #0: ffffffff915ee320 (register_mutex#4){+.+.}-{4:4}, at: odev_release+0x4b/0x70 [ 346.342167][ T35] #1: ffffffff90160b28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 346.342219][ T35] locks held by syz.5.476/8385: 1, last CPU#0: [ 346.342234][ T35] #0: ffffffff90160b28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 346.342286][ T35] [ 346.342292][ T35] ============================================= [ 346.342292][ T35] [ 346.342302][ T35] NMI backtrace for cpu 1 [ 346.342316][ T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 346.342337][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 346.342349][ T35] Call Trace: [ 346.342357][ T35] [ 346.342366][ T35] dump_stack_lvl+0xe8/0x150 [ 346.342400][ T35] nmi_cpu_backtrace+0x274/0x2d0 [ 346.342433][ T35] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 346.342461][ T35] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 346.342496][ T35] sys_info+0x135/0x170 [ 346.342523][ T35] watchdog+0x1073/0x10f0 [ 346.342565][ T35] ? watchdog+0x209/0x10f0 [ 346.342601][ T35] kthread+0x38b/0x480 [ 346.342625][ T35] ? __pfx_watchdog+0x10/0x10 [ 346.342649][ T35] ? __pfx_kthread+0x10/0x10 [ 346.342674][ T35] ret_from_fork+0x514/0xb70 [ 346.342702][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 346.342726][ T35] ? __switch_to+0xc78/0x1410 [ 346.342762][ T35] ? __pfx_kthread+0x10/0x10 [ 346.342796][ T35] ret_from_fork_asm+0x1a/0x30 [ 346.342835][ T35] [ 346.342859][ T35] Sending NMI from CPU 1 to CPUs 0: [ 346.342900][ C0] NMI backtrace for cpu 0 [ 346.342913][ C0] CPU: 0 UID: 0 PID: 8385 Comm: syz.5.476 Not tainted syzkaller #0 PREEMPT(full) [ 346.342933][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 346.342943][ C0] RIP: 0010:__lock_acquire+0x4d4/0x2de0 [ 346.342969][ C0] Code: 84 db 0f 84 cf 01 00 00 48 8b 45 20 66 85 c0 0f 88 c2 01 00 00 0f b6 89 c5 00 00 00 84 c9 0f b6 d3 0f b6 c9 0f 44 ca 89 0c 24 <45> 8b a6 a0 0b 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff ff ff ff 44 [ 346.342984][ C0] RSP: 0018:ffffc900000076d8 EFLAGS: 00000002 [ 346.342999][ C0] RAX: e100000000022007 RBX: 0000000000000003 RCX: 0000000000000001 [ 346.343011][ C0] RDX: 0000000000000003 RSI: 0000000000022000 RDI: e100000000000000 [ 346.343023][ C0] RBP: ffff8880288ee9c0 R08: ffffffff8178798f R09: 0000000000000000 [ 346.343035][ C0] R10: ffffc900000079b8 R11: ffffffff81b3ad40 R12: 0000000000000007 [ 346.343047][ C0] R13: ffff8880288ee970 R14: ffff8880288eddc0 R15: ffff8880288eddc0 [ 346.343061][ C0] FS: 0000000000000000(0000) GS:ffff888123411000(0000) knlGS:0000000000000000 [ 346.343076][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.343087][ C0] CR2: 00007fbee61556c8 CR3: 000000000ff48000 CR4: 00000000003526f0 [ 346.343103][ C0] Call Trace: [ 346.343109][ C0] [ 346.343120][ C0] ? __lock_acquire+0x747/0x2de0 [ 346.343145][ C0] ? lock_acquire+0x115/0x350 [ 346.343168][ C0] lock_acquire+0x115/0x350 [ 346.343189][ C0] ? unwind_next_frame+0x8f/0x2550 [ 346.343217][ C0] ? unwind_next_frame+0x8f/0x2550 [ 346.343240][ C0] ? arch_stack_walk+0x11b/0x150 [ 346.343262][ C0] ? unwind_next_frame+0x8f/0x2550 [ 346.343292][ C0] unwind_next_frame+0xac/0x2550 [ 346.343314][ C0] ? unwind_next_frame+0x8f/0x2550 [ 346.343339][ C0] ? unwind_next_frame+0xd09/0x2550 [ 346.343362][ C0] ? unwind_next_frame+0x8f/0x2550 [ 346.343386][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 346.343410][ C0] arch_stack_walk+0x11b/0x150 [ 346.343434][ C0] ? arch_stack_walk+0x11b/0x150 [ 346.343458][ C0] stack_trace_save+0xa9/0x100 [ 346.343479][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 346.343503][ C0] ? __lock_acquire+0x747/0x2de0 [ 346.343526][ C0] kasan_save_track+0x3e/0x80 [ 346.343548][ C0] ? kasan_save_track+0x3e/0x80 [ 346.343569][ C0] ? kasan_save_free_info+0x40/0x50 [ 346.343587][ C0] ? __kasan_slab_free+0x5c/0x80 [ 346.343609][ C0] ? kfree+0x1c5/0x650 [ 346.343625][ C0] ? slab_free_after_rcu_debug+0x62/0x220 [ 346.343650][ C0] ? rcu_core+0x92e/0x1230 [ 346.343674][ C0] ? handle_softirqs+0x265/0x8d0 [ 346.343697][ C0] ? __irq_exit_rcu+0xc6/0x220 [ 346.343719][ C0] ? irq_exit_rcu+0x9/0x30 [ 346.343741][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 346.343758][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 346.343777][ C0] ? unwind_next_frame+0xd09/0x2550 [ 346.343801][ C0] ? arch_stack_walk+0x11b/0x150 [ 346.343843][ C0] kasan_save_free_info+0x40/0x50 [ 346.343861][ C0] __kasan_slab_free+0x5c/0x80 [ 346.343885][ C0] kfree+0x1c5/0x650 [ 346.343902][ C0] ? slab_free_after_rcu_debug+0x62/0x220 [ 346.343931][ C0] slab_free_after_rcu_debug+0x62/0x220 [ 346.343957][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 346.343983][ C0] ? rcu_core+0x8b0/0x1230 [ 346.344006][ C0] rcu_core+0x92e/0x1230 [ 346.344037][ C0] ? __pfx_rcu_core+0x10/0x10 [ 346.344062][ C0] ? lapic_next_event+0x11/0x20 [ 346.344083][ C0] ? clockevents_program_event+0x491/0x630 [ 346.344106][ C0] handle_softirqs+0x265/0x8d0 [ 346.344135][ C0] __irq_exit_rcu+0xc6/0x220 [ 346.344159][ C0] irq_exit_rcu+0x9/0x30 [ 346.344181][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 346.344199][ C0] [ 346.344204][ C0] [ 346.344211][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 346.344229][ C0] RIP: 0010:unwind_next_frame+0xd09/0x2550 [ 346.344254][ C0] Code: 18 74 08 48 89 df e8 96 66 c7 00 48 8b 04 24 48 89 03 ba 10 00 00 00 49 8d 5e 50 48 89 df 31 f6 e8 5c 68 c7 00 48 8b 54 24 08 c7 04 00 00 48 89 5c 24 48 49 8d 7e 08 48 89 fb 48 c1 eb 03 42 [ 346.344269][ C0] RSP: 0018:ffffc9000551f580 EFLAGS: 00000246 [ 346.344288][ C0] RAX: ffffc9000551f678 RBX: ffffc9000551f678 RCX: 0000000000000000 [ 346.344301][ C0] RDX: ffffffff92579ca6 RSI: 0000000000000000 RDI: ffffc9000551f688 [ 346.344314][ C0] RBP: 1ffffffff24af394 R08: ffffc9000551f687 R09: 0000000000000000 [ 346.344326][ C0] R10: ffffc9000551f678 R11: fffff52000aa3ed1 R12: dffffc0000000000 [ 346.344339][ C0] R13: ffffffff92579ca2 R14: ffffc9000551f628 R15: ffffc9000551f670 [ 346.344364][ C0] ? do_group_exit+0x22d/0x2f0 [ 346.344381][ C0] ? unwind_next_frame+0x8f/0x2550 [ 346.344406][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 346.344428][ C0] arch_stack_walk+0x11b/0x150 [ 346.344453][ C0] ? get_signal+0x1216/0x12c0 [ 346.344478][ C0] stack_trace_save+0xa9/0x100 [ 346.344500][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 346.344523][ C0] ? stack_depot_save_flags+0x33/0x810 [ 346.344543][ C0] ? arch_stack_walk+0x90/0x150 [ 346.344567][ C0] kasan_save_stack+0x3e/0x60 [ 346.344589][ C0] ? kasan_save_stack+0x3e/0x60 [ 346.344611][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 346.344628][ C0] ? call_rcu+0x86/0x300 [ 346.344642][ C0] ? task_work_run+0x1d9/0x260 [ 346.344662][ C0] ? do_exit+0x705/0x2360 [ 346.344678][ C0] ? do_group_exit+0x22d/0x2f0 [ 346.344719][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 346.344737][ C0] ? __pfx_delayed_free_vfsmnt+0x10/0x10 [ 346.344762][ C0] call_rcu+0x86/0x300 [ 346.344776][ C0] ? xa_erase+0xc6/0xf0 [ 346.344797][ C0] ? __pfx_call_rcu+0x10/0x10 [ 346.344814][ C0] ? cleanup_mnt+0x237/0x2a0 [ 346.344840][ C0] task_work_run+0x1d9/0x260 [ 346.344864][ C0] ? __pfx_task_work_run+0x10/0x10 [ 346.344885][ C0] ? do_exit+0x700/0x2360 [ 346.344906][ C0] ? kmem_cache_free+0x182/0x650 [ 346.344927][ C0] ? put_net+0x191/0x260 [ 346.344973][ C0] do_exit+0x705/0x2360 [ 346.344995][ C0] ? __pfx_do_exit+0x10/0x10 [ 346.345021][ C0] do_group_exit+0x22d/0x2f0 [ 346.345042][ C0] get_signal+0x1216/0x12c0 [ 346.345076][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 346.345096][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 346.345125][ C0] irqentry_exit+0x348/0x9b0 [ 346.345143][ C0] ? trace_irq_disable+0x3b/0x140 [ 346.345172][ C0] asm_exc_page_fault+0x26/0x30 [ 346.345189][ C0] RIP: 0033:0x7fbee5254cb7 [ 346.345204][ C0] Code: Unable to access opcode bytes at 0x7fbee5254c8d. [ 346.345213][ C0] RSP: 002b:00007fbee6169120 EFLAGS: 00010202 [ 346.345227][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbee539f559 [ 346.345239][ C0] RDX: 00007fbee6169140 RSI: 00007fbee6169270 RDI: 000000000000000b [ 346.345251][ C0] RBP: 00007fbee5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 346.345263][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 346.345274][ C0] R13: 00007fbee5626218 R14: 00007fbee5626180 R15: 00007ffdedca3038 [ 346.345302][ C0] [ 346.470345][ T35] Kernel panic - not syncing: hung_task: blocked tasks [ 347.750335][ T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 347.759461][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 347.769535][ T35] Call Trace: [ 347.772830][ T35] [ 347.775795][ T35] vpanic+0x26f/0x710 [ 347.779813][ T35] panic+0xc5/0xd0 [ 347.783550][ T35] ? __pfx_panic+0x10/0x10 [ 347.787976][ T35] ? preempt_schedule_common+0x7f/0xd0 [ 347.793459][ T35] ? preempt_schedule_thunk+0x16/0x40 [ 347.798887][ T35] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 347.805115][ T35] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 347.811321][ T35] watchdog+0x10e7/0x10f0 [ 347.815705][ T35] ? watchdog+0x209/0x10f0 [ 347.820159][ T35] kthread+0x38b/0x480 [ 347.824275][ T35] ? __pfx_watchdog+0x10/0x10 [ 347.828986][ T35] ? __pfx_kthread+0x10/0x10 [ 347.833657][ T35] ret_from_fork+0x514/0xb70 [ 347.838293][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 347.843436][ T35] ? __switch_to+0xc78/0x1410 [ 347.848151][ T35] ? __pfx_kthread+0x10/0x10 [ 347.852790][ T35] ret_from_fork_asm+0x1a/0x30 [ 347.857598][ T35] [ 347.861260][ T35] Kernel Offset: disabled [ 347.865634][ T35] Rebooting in 86400 seconds..