last executing test programs: 18m2.111616418s ago: executing program 32 (id=486): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0', 0x1) 17m10.930792064s ago: executing program 33 (id=826): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./mnt\x00', 0x10006, &(0x7f0000000380)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@discard_size={'discard', 0x3d, 0x2}}, {@discard_size}, {@gid}, {}, {@quota}, {@nodiscard}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x1, 0x61eb, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) (fail_nth: 1) 16m51.022126864s ago: executing program 34 (id=903): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x20080, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f0000000300)='./file1\x00', 0x18e97e, 0x13e) sendfile(r0, r0, 0x0, 0x10000006) (fail_nth: 1) 15m26.997789135s ago: executing program 3 (id=1202): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') read$FUSE(r0, &(0x7f0000002ec0)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) 15m26.752996477s ago: executing program 3 (id=1203): syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c36e8240ac051c92fb9d0000000109023600010000000009040000040341000009050a"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x10000, 0x0) syz_usb_connect(0x3, 0x39e, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x31, 0xe5, 0xb2, 0x20, 0x12d1, 0x8640, 0x4329, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38c, 0x1, 0x1, 0x7, 0x90, 0x9, "", [{{0x9, 0x4, 0xac, 0xdd, 0x6, 0xff, 0x6, 0x17, 0xd, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "3bb68a882a"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x5, 0x3, 0x1}, [@ncm={0x6, 0x24, 0x1a, 0x1, 0x15}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x9, 0xb747}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x3, 0x7, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x4dbe, 0x1c}, @obex={0x5, 0x24, 0x15, 0x5}]}, @generic={0xf9, 0xc, "9b06b67b43da65fc393dce02ce07cc7d977120ab1f4a32109f8d23425753678aed5f8ce31e755a0531ed511bc24b47a095e0661d2ecf5a47064dc38e684120653b47b191d81d21846ff5e701775b017e8ffe123a2185a8d4a2c7d00705f31eb97c323006b4a659901a4f0d4b843544e0465b4d93b69ac330f62a6ea6e285706cf40c1c03ba7cbd2a1f23f930e64e80cd4a5b9e6ce2d834a2514dfc112e6f76724a8c3c478794fef21f167b2250745d112d06c311dc0fcfc16a0cb9b9d5aa9dccdfc7ba60e5fce92bab42907bc2269f6c930876057c6e9b8f598d724085cae3c1f300ec44f36478493dbd011a5ebe48f425a5a9af826adb"}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x4, 0xfd, 0xcf, [@generic={0x43, 0x4, "b07682f3111804ccea10a551f430855fcfe0d1118f531fd2cdc4ec0d8e99d35faf12515dfe0431443a12f56101dba321c4d3f46916de53d8b01b859d425b7683c4"}]}}, {{0x9, 0x5, 0x3, 0x1c, 0x200, 0xe, 0x0, 0x5, [@generic={0x6f, 0xa, "efb9f194a85ae341f781fb57191c49b496d8ba21522ccc3e5a22274bd4b9b8f0e36fb1969f7e1b42cca351676be77732b77f576369d127700ae896286bdda2a3f48c3525f648b6ccf75ce6b252e7d9d7b6f5a747623f4c9ee5453b760537e2ec2f6f5d3ffd45de985cb4c3a44d"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x400, 0x3, 0x29, 0x6, [@generic={0x90, 0x31, "31248e8a32e14916129a57e15ad771ad14563266338fecf9c90412a005bba21f296e86044af021605847ff81211c59f94bf55a8258f9a9723bf1a9dcfb9ad95cc6158f70cd5a97b21517bfda115d448a90b2bfd11246161542a4dbe0f3dc7307605c3fbce3f0a1724dcbb8ee1be919ee5e4a453a9f84fc1c3126cf173932d91f0f1f2cdc59ebbc5e18066b4c001d"}, @generic={0x3b, 0x3, "edc403f7c912a4c0bee301292ec9cf84cfe825336cb67933fc68fc5f9dbfb765de0acd188c53d984842965f92932124b7149b48705d54c17bf"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x240, 0x6, 0x0, 0x5, [@generic={0x6a, 0x5, "e610639336f3b89eb79600385db7b2a1f3e4549b5d3c90d54a3353778351721341cfa2201960681d932cadf9728c3c4b54df0860b42010bfcfc47ee587081366569a577b6c86bd162f520c93c8eba52e6be55f4e0ebb0d83c4d7d6df3027bb94980c6652ab53d871"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2ea0}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x59, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x1}]}}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xfa9}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x200, 0x3f, 0xf8, 0x6, 0x8, 0x6}, 0x5, &(0x7f00000009c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x40d}}, {0x62, &(0x7f0000000a40)=@string={0x62, 0x3, "1761db1817bfdcb6a483b799edb3f36c96423c584e3d6c91ff7598e098968043e13a6e0e23949dab4ba0623356aada85fc0fc6bdd0fc22123feaf767c2d9fa2bcd359ec70872d5c15f763683fe1615ae5ddc7c6e1c75e421993da1431556f900"}}]}) getdents64(r0, &(0x7f0000000580)=""/1021, 0x3fd) openat(r0, &(0x7f0000000143), 0x800, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 15m26.447362981s ago: executing program 2 (id=1205): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x100000000000011, 0x203f, 0x7fff) 15m26.291523079s ago: executing program 2 (id=1206): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x69e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfcff}, {}, {0xe, 0x10}}, [@TCA_RATE={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r1 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='v\x02rs\x00', 0x0, 0x0) 15m26.122970866s ago: executing program 3 (id=1207): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x2000000, &(0x7f00000019c0)=ANY=[@ANYBLOB='trans=virtio,cache=readahead,cache=fscache,access=any,access=', @ANYRES32]) 15m25.939558815s ago: executing program 3 (id=1208): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x7e, 0x3b00, 0x0, 0xfffffffffffffdfd) 15m25.83446141s ago: executing program 3 (id=1210): getrandom(&(0x7f0000000000)=""/301, 0xfffffc32, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) r0 = socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt(r0, 0x111, 0x2, 0x0, &(0x7f00000000c0)) 15m25.667178408s ago: executing program 2 (id=1211): gettid() timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000003100), 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) read$FUSE(r4, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x4}}, 0x10) 15m24.804910778s ago: executing program 3 (id=1213): socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) memfd_create(0x0, 0x4) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) 15m24.663273665s ago: executing program 2 (id=1214): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0xc, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) 15m24.443010006s ago: executing program 2 (id=1216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x4004080) 15m24.195410307s ago: executing program 2 (id=1217): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x11, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x0, 'rr\x00'}, {@loopback, 0x4e24, 0x2000, 0xa}}, 0x44) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000300)="0303ec58000000004500001c0000000040110000ac14140b7f0000014e", 0x1d, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030529e400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 15m13.012780135s ago: executing program 35 (id=1196): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000280)=0x1, 0x4) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000001c0)=[{0x1, 0x1, {0x2, 0xf0, 0x1}, {0x2, 0xf0, 0x3}, 0x1, 0x2}, {0x1, 0x1, {0x2, 0x0, 0x1}, {0x3, 0xf0}, 0x0, 0xfd}], 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x74, r6, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, &(0x7f00000009c0)='9', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x10, r7, 0x1, 0x2, 0x6, @random="3b8a1c3c34a9"}, 0x14) 15m9.005061634s ago: executing program 36 (id=1217): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x11, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x0, 'rr\x00'}, {@loopback, 0x4e24, 0x2000, 0xa}}, 0x44) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000300)="0303ec58000000004500001c0000000040110000ac14140b7f0000014e", 0x1d, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030529e400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 15m8.947936777s ago: executing program 37 (id=1213): socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) memfd_create(0x0, 0x4) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) 13m20.095769733s ago: executing program 8 (id=1713): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x8000, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f0000000040)=[{r0, 0x35e5}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 13m12.966514539s ago: executing program 8 (id=1734): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe4a4}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$binfmt_misc(r1, &(0x7f0000000000)="a5ce", 0xfed0) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0xcea5, 0x6) syz_usb_connect(0x3, 0x46, &(0x7f0000001d80)=ANY=[@ANYBLOB="12010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a03080003010107250108"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pipe(&(0x7f00000000c0)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe4a4}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) write$binfmt_misc(r1, &(0x7f0000000000)="a5ce", 0xfed0) (async) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0xcea5, 0x6) (async) syz_usb_connect(0x3, 0x46, &(0x7f0000001d80)=ANY=[@ANYBLOB="12010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a03080003010107250108"], 0x0) (async) 13m9.433725456s ago: executing program 8 (id=1741): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e003000028008000300030000000900", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 13m7.938618686s ago: executing program 8 (id=1743): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x448, &(0x7f0000000400)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x2, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000200)=ANY=[], 0x3, 0x274, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fanotify_init(0xf00, 0x0) (async) r0 = fanotify_init(0xf00, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) read$FUSE(r0, &(0x7f0000002f80)={0x2020}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2856c26, &(0x7f0000000240)={[], [{@flag='rw'}]}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='udf\x00', 0x800000, &(0x7f0000000180)='rw') 13m6.639699718s ago: executing program 8 (id=1747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a00000005000100070000000500040000000000"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) 13m1.526654869s ago: executing program 8 (id=1760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d05, 0x0, 0xcb}]}) 13m1.07644293s ago: executing program 38 (id=1760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d05, 0x0, 0xcb}]}) 11m46.055205798s ago: executing program 6 (id=1971): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000440)=0x8) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$inet(r3, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) r4 = accept4$inet(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d424", 0x86) write$ublk_bdev(r0, &(0x7f00000000c0)="9f6b2a3b6c45356c362ed6178b0796953e41e1e8e553e8851a3644bfb2f4a553eff4f562d78eab1b1770009e8b", 0x2d) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') socket$kcm(0x29, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"a2e3ad2109c752f91b5d470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 11m43.903246779s ago: executing program 6 (id=1974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="45000018123440004011"], 0x1c) (fail_nth: 1) 11m42.169436941s ago: executing program 6 (id=1978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) 11m41.817528788s ago: executing program 6 (id=1981): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', &(0x7f0000000200), 0x1828000, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x3, 0x0) (async) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 11m41.587664608s ago: executing program 6 (id=1982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='E'], 0x1c) 11m40.830025414s ago: executing program 6 (id=1985): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c43000101020301010902190001010080fa0904000001ffffff00070584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000003c0)={0x14, &(0x7f00000001c0)={0x0, 0x21, 0xe4, {0xe4, 0x10, "21e0b5b6c1dec56000f9c142409c63efedcc6e7413fc2c3afff5bc626d3ea46778ab9b490fd162eeb0ddb036953037e447e4f26c184e87729f3cb7028a0ce5fe0112cae9f386595949ec49cff03feb6cf522c390a363b7bf66e72f6e43633bf57cb7573c21e00654c31b7639bb7bca7a3df81a5f63d71dd803802a157c746e22c976fb3fbf4e4d328b789414b0d04bb1cf78124eabadd234d7e914e036c2e9921a7911e893e2ebc81ba68c09427dac7d60b2e04598481bf4a35d3adc2247d8b3ed40b065f3d59138324f6b165616c1da01255f3c86fcbf6c29c5181aa288a57cbd16"}}, &(0x7f00000002c0)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "86ce940533e2b1f1cde058740637354a5031e7be1466b4230111c780fabbc30fde05cd76e000a4b2ebeb8908e7f93e828e87a2d4f34704c85cbd4a55a3eabf6271ce7732078ec241c3923a7e2860249ba06c285ad89f109cc5e8ed8e29da11e1369d5bb53e8b08a59cb3b60c2b9186333406f858d36301bf862fd650bb4dd690f2d336971cb9ea3d2c3afb3640270f5bbede8335dd78b2753f46818a59e6472627ae14bae7f794969ae054618681b7b2bfa43b4d62157520ca904668a89dcedf"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x40, 0x5, 0xd5, "d11c3c4f64d24bd703bb58e7034ec0b89dfaacc8b1150180a0dccc3f475b6646ab896942ad3865e0d0a885e0113d003fbb17929f520f72682975a75e89a5c83ea6693783d57d33fcfbff47f1c8f726a28e7b92be81cb5fc97a73456d346a5d352c899004855a51f7e1dc2418c6a231733191f161daacea0047bd5f3e1452219b4ff85ecc3e8a1cc275e690a27d3ef46ce105edce0d387626bc3a9d568e8811d6af2a75e9d99fe1a9c6042ac77d696cce0a56e7342dc83a9970c6f1ac539d4a64b87a1190e89098045a5d52b6d8d645451189fe0b9c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x69}, &(0x7f0000000580)={0x20, 0x81, 0x2, "6617"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, "98"}, &(0x7f0000000600)={0x20, 0x83, 0x2, "0cdb"}, &(0x7f0000000640)={0x20, 0x84, 0x3, "0b3da2"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "53d60b"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m39.971691375s ago: executing program 39 (id=1985): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c43000101020301010902190001010080fa0904000001ffffff00070584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000003c0)={0x14, &(0x7f00000001c0)={0x0, 0x21, 0xe4, {0xe4, 0x10, "21e0b5b6c1dec56000f9c142409c63efedcc6e7413fc2c3afff5bc626d3ea46778ab9b490fd162eeb0ddb036953037e447e4f26c184e87729f3cb7028a0ce5fe0112cae9f386595949ec49cff03feb6cf522c390a363b7bf66e72f6e43633bf57cb7573c21e00654c31b7639bb7bca7a3df81a5f63d71dd803802a157c746e22c976fb3fbf4e4d328b789414b0d04bb1cf78124eabadd234d7e914e036c2e9921a7911e893e2ebc81ba68c09427dac7d60b2e04598481bf4a35d3adc2247d8b3ed40b065f3d59138324f6b165616c1da01255f3c86fcbf6c29c5181aa288a57cbd16"}}, &(0x7f00000002c0)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "86ce940533e2b1f1cde058740637354a5031e7be1466b4230111c780fabbc30fde05cd76e000a4b2ebeb8908e7f93e828e87a2d4f34704c85cbd4a55a3eabf6271ce7732078ec241c3923a7e2860249ba06c285ad89f109cc5e8ed8e29da11e1369d5bb53e8b08a59cb3b60c2b9186333406f858d36301bf862fd650bb4dd690f2d336971cb9ea3d2c3afb3640270f5bbede8335dd78b2753f46818a59e6472627ae14bae7f794969ae054618681b7b2bfa43b4d62157520ca904668a89dcedf"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x40, 0x5, 0xd5, "d11c3c4f64d24bd703bb58e7034ec0b89dfaacc8b1150180a0dccc3f475b6646ab896942ad3865e0d0a885e0113d003fbb17929f520f72682975a75e89a5c83ea6693783d57d33fcfbff47f1c8f726a28e7b92be81cb5fc97a73456d346a5d352c899004855a51f7e1dc2418c6a231733191f161daacea0047bd5f3e1452219b4ff85ecc3e8a1cc275e690a27d3ef46ce105edce0d387626bc3a9d568e8811d6af2a75e9d99fe1a9c6042ac77d696cce0a56e7342dc83a9970c6f1ac539d4a64b87a1190e89098045a5d52b6d8d645451189fe0b9c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x69}, &(0x7f0000000580)={0x20, 0x81, 0x2, "6617"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, "98"}, &(0x7f0000000600)={0x20, 0x83, 0x2, "0cdb"}, &(0x7f0000000640)={0x20, 0x84, 0x3, "0b3da2"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "53d60b"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m5.568626409s ago: executing program 9 (id=2764): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000600000004"], 0x48) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x8fb5, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 7m4.273284911s ago: executing program 9 (id=2768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 7m4.133365497s ago: executing program 9 (id=2769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000180)="92", 0x1, 0x40, &(0x7f0000000000)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 6m59.697588416s ago: executing program 9 (id=2773): r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000080), 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x8, 0x0, 0x0) (async) close(0x3) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) wait4(r5, 0x0, 0x40000000, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x0, 0x0) (async) r6 = open$dir(0x0, 0x800, 0x10a) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, 0x0) (async) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffb) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x41) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000e2894474b244f9e2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc21e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fedf01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000", 0x89}], 0x1}, 0x4004010) 6m59.256694397s ago: executing program 9 (id=2778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 6m58.490380223s ago: executing program 9 (id=2782): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1be, &(0x7f0000000280)="$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") timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r2, 0x0, 0x0}, 0x20) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "b146baff07590d3233de69d03e92affcf2e7d89bff09de8ecb00200000100c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4}) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x628496b7890b988b}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x200004, 0x18, 0x28b, 0x0, r5, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x50) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) timerfd_create(0x0, 0x0) (async) timerfd_settime(r1, 0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1be, &(0x7f0000000280)="$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") (async) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r2, 0x0, 0x0}, 0x20) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "b146baff07590d3233de69d03e92affcf2e7d89bff09de8ecb00200000100c00"}) (async) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x628496b7890b988b}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x200004, 0x18, 0x28b, 0x0, r5, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x50) (async) 6m42.962734325s ago: executing program 40 (id=2782): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1be, &(0x7f0000000280)="$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") timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r2, 0x0, 0x0}, 0x20) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "b146baff07590d3233de69d03e92affcf2e7d89bff09de8ecb00200000100c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4}) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x628496b7890b988b}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x200004, 0x18, 0x28b, 0x0, r5, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x50) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) timerfd_create(0x0, 0x0) (async) timerfd_settime(r1, 0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1be, &(0x7f0000000280)="$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") (async) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r2, 0x0, 0x0}, 0x20) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "b146baff07590d3233de69d03e92affcf2e7d89bff09de8ecb00200000100c00"}) (async) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x628496b7890b988b}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x200004, 0x18, 0x28b, 0x0, r5, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x50) (async) 6m3.099610524s ago: executing program 4 (id=2878): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = getpgid(0x0) syz_pidfd_open(r2, 0x0) sched_rr_get_interval(r2, &(0x7f0000000180)) read$FUSE(r1, &(0x7f0000000880)={0x2020}, 0x2020) 6m1.812767024s ago: executing program 4 (id=2880): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (fail_nth: 1) 5m59.79734097s ago: executing program 4 (id=2887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) getrlimit(0x1, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0xa, 0x6, 0x106) mkdir(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in6=@remote}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) sendmsg$kcm(r3, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x20040010) r4 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x6e24, 0xdc, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (fail_nth: 1) 5m55.947553171s ago: executing program 4 (id=2888): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000f00)='./file0\x00', 0x200800, &(0x7f0000001340)={[{@lazytime}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@gquota}], [{@flag='async'}]}, 0x4, 0x9649, &(0x7f000001c300)="$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") r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(r0, 0x47, &(0x7f0000000200)=0x7) setpriority(0x1, r0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x20042, 0x40) fallocate(r1, 0x11, 0x0, 0x88ffff) 5m53.192472871s ago: executing program 4 (id=2898): syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@dioread_lock}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@noquota}, {@nomblk_io_submit}]}, 0x1, 0x476, &(0x7f0000000e00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) lremovexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='os']) openat(0xffffffffffffff9c, 0x0, 0x511001, 0x498) 5m51.475715022s ago: executing program 4 (id=2905): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='n.', 0x2) (fail_nth: 1) 5m50.473975819s ago: executing program 41 (id=2905): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='n.', 0x2) (fail_nth: 1) 7.63153359s ago: executing program 0 (id=3932): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x200841a, &(0x7f0000001b00)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC], 0x1, 0x553b, &(0x7f00000024c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") unshare(0x20060400) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x2042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x0, 0x10000}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nodelalloc}, {@nobarrier}, {@errors_remount}]}, 0x1, 0x57c, &(0x7f00000129c0)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) capset(&(0x7f0000000400)={0x19980330}, &(0x7f0000000440)={0x0, 0x5, 0xd, 0x4d14, 0x4, 0x4}) 5.256016082s ago: executing program 5 (id=3938): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b007661"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x215b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 4.584303094s ago: executing program 1 (id=3941): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff97422012, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000021000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffff0000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) setreuid(0xffffffffffffffff, 0xee01) mknod$loop(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) 4.43956396s ago: executing program 0 (id=3942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x200001, 0x0, 0x2a}, 0x18) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010) 4.332847715s ago: executing program 1 (id=3943): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) write$FUSE_LSEEK(r0, 0x0, 0x0) 4.215657851s ago: executing program 0 (id=3945): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x10010, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) fchdir(0xffffffffffffffff) symlinkat(0x0, r0, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00') (fail_nth: 1) 4.076586238s ago: executing program 1 (id=3946): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x64, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x10010, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x82, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) fchdir(0xffffffffffffffff) symlinkat(0x0, r1, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00') 4.075683088s ago: executing program 0 (id=3947): socket$nl_netfilter(0x10, 0x3, 0xc) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f00000013c0)={{0x40, 0x5}, {0x40, 0x7}, 0x6, 0x1, 0xb}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000003c0)={{r4}, 0x0, 0x1a, @inherit={0x58, &(0x7f00000000c0)=ANY=[]}, @subvolid=0x5}) 2.503394162s ago: executing program 0 (id=3949): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000140)=0x10001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420004073483c00000000ffffffff00000000c0"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420014073483b00000000ffffffff"], 0x0) 2.355619488s ago: executing program 5 (id=3950): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x58, r0, 0xb97534d5fe9704cf, 0x1, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 2.204925956s ago: executing program 5 (id=3951): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff97422012, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000021000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffff0000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) setreuid(0xffffffffffffffff, 0xee01) mknod$loop(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) 1.942242738s ago: executing program 5 (id=3953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'batadv_slave_0\x00', 0x400}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) sendmsg$nl_route(r2, 0x0, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, 0x0, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x5a}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtclass={0x44, 0x28, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xc}, {0x6, 0xc}, {0xffe0, 0xfff2}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0xf8}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x35, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_CLASSID]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x8840) 1.639663883s ago: executing program 7 (id=3954): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) write$FUSE_LSEEK(r0, 0x0, 0x0) 1.503544759s ago: executing program 1 (id=3955): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000001c0)={r1, 0x3, r2, 0x3, 0x80000}) exit(0x100000000000035) syz_clone3(0x0, 0x0) 1.395140024s ago: executing program 7 (id=3956): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420004073483c00000000ffffffff00000000c0"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420014073483b00000000ffffffff"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123400024073683a00000000ffffffff"], 0x0) 1.187599944s ago: executing program 5 (id=3957): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x1000) r2 = dup(r0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x3, 0x1521, &(0x7f0000004d40)="$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") truncate(&(0x7f0000000100)='./file1\x00', 0x8b) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x1}, 0x8) 1.136231546s ago: executing program 7 (id=3958): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @loopback, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x59a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 878.624009ms ago: executing program 7 (id=3959): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x58, r0, 0xb97534d5fe9704cf, 0x1, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 622.48046ms ago: executing program 7 (id=3960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0xf8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97"], 0xffe) 449.450659ms ago: executing program 1 (id=3961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b160000000000000000020000083c00048018000180080001006f7366000c000280080001400000000420000180080001006475700014000280080002250000001408000140000000160900010073797a30000000000900020073797a320000000014000000110001"], 0x90}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 241.328328ms ago: executing program 1 (id=3962): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x14, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="df1a", 0x2}], 0x1, 0x3fffc, 0xfffff802, 0x1) open(&(0x7f00000000c0)='./file1\x00', 0x90101, 0x1) (async) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x90101, 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000100)={0x1, 0x9c0c}) (async) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000100)={0x1, 0x9c0c}) r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x104) sendfile(r2, r2, 0x0, 0x7dd8) 224.615479ms ago: executing program 0 (id=3963): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3eb, 0x100, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000041}, 0x44040000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 135.529593ms ago: executing program 5 (id=3964): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3eb, 0x100, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000041}, 0x44040000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x14e24, 0x0, @private1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 7 (id=3965): r0 = syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x193, &(0x7f0000000240)="$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") (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0xfffffd10, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000000000000081000000030b47026c26236925000400ff7f0000bd2dca8a9848a3c728f1c4fdffffffdc1338d5e801e0b009000000000100005ae5e8458f58acbb0051a9098383de0dd7d8", 0x55}], 0x1}, 0x20000000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) syz_io_uring_setup(0x452e, &(0x7f0000000640)={0x0, 0xabc, 0x1000, 0x0, 0xbe}, &(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f0000000740)) (async) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x1, 0xca7341e4099b7597, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f00000008c0)=@IORING_OP_MADVISE={0x19, 0x41, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x1, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x2, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x80, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xd7, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x44, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xc8, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x24040000) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000ff020000000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) (async, rerun: 64) r7 = socket(0x10, 0x803, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) listxattr(&(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {0x0, 0x9}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r0, r8, 0x25, 0x8, @void}, 0x10) (async) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) pselect6(0x40, &(0x7f0000000440)={0x0, 0x2, 0xfffffffffffff800, 0x401, 0x5, 0x58a, 0xffffffffffff6880, 0x8001}, &(0x7f00000004c0)={0x1ff, 0xd81f, 0x7fffffff, 0x8000000000000000, 0x9601, 0x2, 0x7, 0x2}, &(0x7f0000000500)={0x4, 0x5, 0x6, 0xd16, 0xfffffffffffffff8, 0x979, 0x8, 0x9}, &(0x7f0000000540)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x7]}, 0x8}) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r9, &(0x7f0000001c00)=[{&(0x7f0000000100)='2', 0x1}, {&(0x7f0000000400)="2d36f0", 0x3}], 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='none\x00', 0x13d) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/Loopback.0\x00') kernel console output (not intermixed with test programs): 20995] path_openat+0x291/0x3270 [ 1183.866420][T20995] ? do_sys_openat2+0xda/0x1d0 [ 1183.871272][T20995] ? __x64_sys_openat+0x139/0x160 [ 1183.876376][T20995] ? verify_lock_unused+0x140/0x140 [ 1183.881582][T20995] ? do_filp_open+0x430/0x430 [ 1183.886253][T20995] do_filp_open+0x1f2/0x430 [ 1183.890744][T20995] ? vfs_tmpfile+0x620/0x620 [ 1183.895342][T20995] ? noop_direct_IO+0x20/0x20 [ 1183.900009][T20995] ? _raw_spin_unlock+0x28/0x40 [ 1183.904851][T20995] ? alloc_fd+0x590/0x640 [ 1183.909362][T20995] do_sys_openat2+0x134/0x1d0 [ 1183.914063][T20995] ? do_sys_open+0xe0/0xe0 [ 1183.918508][T20995] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1183.924521][T20995] ? lock_chain_count+0x20/0x20 [ 1183.929370][T20995] __x64_sys_openat+0x139/0x160 [ 1183.934310][T20995] do_syscall_64+0x55/0xb0 [ 1183.938721][T20995] ? clear_bhb_loop+0x40/0x90 [ 1183.943387][T20995] ? clear_bhb_loop+0x40/0x90 [ 1183.948054][T20995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1183.953938][T20995] RIP: 0033:0x7f6384d5e98e [ 1183.958430][T20995] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1183.978065][T20995] RSP: 002b:00007f6385bfcf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1183.986474][T20995] RAX: ffffffffffffffda RBX: 00007f6385bfd6c0 RCX: 00007f6384d5e98e [ 1183.994431][T20995] RDX: 0000000000000002 RSI: 00007f6384e34942 RDI: ffffffffffffff9c [ 1184.002408][T20995] RBP: 00007f6384e3503b R08: 0000000000000000 R09: 0000000000000000 [ 1184.010374][T20995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.018332][T20995] R13: 00007f6385026038 R14: 00007f6385025fa0 R15: 00007ffd6e856748 [ 1184.026308][T20995] [ 1184.067032][ T28] audit: type=1326 audit(1789386448.273:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20962 comm="syz.1.3526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb919e159 code=0x7ffc0000 [ 1184.157109][ T28] audit: type=1326 audit(1789386448.273:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20962 comm="syz.1.3526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb919e159 code=0x7ffc0000 [ 1184.254310][ T28] audit: type=1326 audit(1789386448.273:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20962 comm="syz.1.3526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb919e159 code=0x7ffc0000 [ 1184.333035][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.357290][ T28] audit: type=1326 audit(1789386448.283:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20962 comm="syz.1.3526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6bb919e159 code=0x7ffc0000 [ 1184.620646][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.819643][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.930426][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.008859][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.065873][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.131256][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.192333][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.337107][ T5816] usb 2-1: string descriptor 0 read error: -71 [ 1185.343320][ T5816] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1185.413083][T21011] FAULT_INJECTION: forcing a failure. [ 1185.413083][T21011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.467630][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1185.498093][T21013] FAULT_INJECTION: forcing a failure. [ 1185.498093][T21013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.525300][T21011] CPU: 0 PID: 21011 Comm: syz.7.3537 Not tainted syzkaller #0 [ 1185.532779][T21011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1185.542843][T21011] Call Trace: [ 1185.546117][T21011] [ 1185.549036][T21011] dump_stack_lvl+0x18c/0x250 [ 1185.553708][T21011] ? show_regs_print_info+0x20/0x20 [ 1185.558895][T21011] ? load_image+0x420/0x420 [ 1185.563400][T21011] ? __might_fault+0xaa/0x120 [ 1185.568283][T21011] ? __lock_acquire+0x7d80/0x7d80 [ 1185.573334][T21011] should_fail_ex+0x394/0x4c0 [ 1185.578026][T21011] _copy_from_user+0x2f/0xe0 [ 1185.582624][T21011] do_sock_getsockopt+0x188/0x450 [ 1185.587647][T21011] ? __ia32_sys_setsockopt+0x200/0x200 [ 1185.593093][T21011] ? lockdep_hardirqs_on+0x50/0x150 [ 1185.598293][T21011] __x64_sys_getsockopt+0x1d6/0x280 [ 1185.603960][T21011] ? lockdep_hardirqs_on+0x50/0x150 [ 1185.609156][T21011] ? lockdep_hardirqs_on+0x50/0x150 [ 1185.614348][T21011] do_syscall_64+0x55/0xb0 [ 1185.618755][T21011] ? clear_bhb_loop+0x40/0x90 [ 1185.623423][T21011] ? clear_bhb_loop+0x40/0x90 [ 1185.628093][T21011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1185.634000][T21011] RIP: 0033:0x7fa12f19e159 [ 1185.638411][T21011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.658014][T21011] RSP: 002b:00007fa12ffdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1185.666420][T21011] RAX: ffffffffffffffda RBX: 00007fa12f425fa0 RCX: 00007fa12f19e159 [ 1185.674380][T21011] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1185.682359][T21011] RBP: 00007fa12ffdb090 R08: 0000200000000080 R09: 0000000000000000 [ 1185.690337][T21011] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 1185.698331][T21011] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1185.706316][T21011] [ 1185.725394][ T5816] usb 2-1: config 0 descriptor?? [ 1185.751163][ T5816] usb 2-1: can't set config #0, error -71 [ 1185.761015][T21013] CPU: 0 PID: 21013 Comm: syz.1.3538 Not tainted syzkaller #0 [ 1185.768511][T21013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1185.778572][T21013] Call Trace: [ 1185.781855][T21013] [ 1185.784793][T21013] dump_stack_lvl+0x18c/0x250 [ 1185.789502][T21013] ? show_regs_print_info+0x20/0x20 [ 1185.794701][T21013] ? load_image+0x420/0x420 [ 1185.799199][T21013] ? __might_fault+0xaa/0x120 [ 1185.803888][T21013] ? __lock_acquire+0x7d80/0x7d80 [ 1185.808907][T21013] should_fail_ex+0x394/0x4c0 [ 1185.813598][T21013] _copy_from_user+0x2f/0xe0 [ 1185.818200][T21013] ucma_write+0x167/0x2f0 [ 1185.822684][T21013] ? ucma_get_global_nl_info+0x70/0x70 [ 1185.828175][T21013] ? fsnotify_perm+0x5d/0x5e0 [ 1185.832852][T21013] ? security_file_permission+0x79/0xa0 [ 1185.838413][T21013] ? ucma_get_global_nl_info+0x70/0x70 [ 1185.843887][T21013] vfs_write+0x299/0x9a0 [ 1185.848130][T21013] ? file_end_write+0x250/0x250 [ 1185.852990][T21013] ? __fget_files+0x28/0x460 [ 1185.857575][T21013] ? __fget_files+0x3fc/0x460 [ 1185.862263][T21013] ? __fdget_pos+0x1d8/0x330 [ 1185.866841][T21013] ? ksys_write+0x74/0x260 [ 1185.871293][T21013] ksys_write+0x151/0x260 [ 1185.875644][T21013] ? __ia32_sys_read+0x90/0x90 [ 1185.880415][T21013] ? lockdep_hardirqs_on+0x98/0x150 [ 1185.885626][T21013] do_syscall_64+0x55/0xb0 [ 1185.890049][T21013] ? clear_bhb_loop+0x40/0x90 [ 1185.894730][T21013] ? clear_bhb_loop+0x40/0x90 [ 1185.899402][T21013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1185.905304][T21013] RIP: 0033:0x7f6bb919e159 [ 1185.909730][T21013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.929333][T21013] RSP: 002b:00007f6bba10a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1185.937736][T21013] RAX: ffffffffffffffda RBX: 00007f6bb9425fa0 RCX: 00007f6bb919e159 [ 1185.945695][T21013] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 1185.953657][T21013] RBP: 00007f6bba10a090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.961619][T21013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.969577][T21013] R13: 00007f6bb9426038 R14: 00007f6bb9425fa0 R15: 00007ffce57bd618 [ 1185.977551][T21013] [ 1186.063920][ T5816] usb 2-1: USB disconnect, device number 83 [ 1186.318587][T21019] netlink: 'syz.5.3541': attribute type 3 has an invalid length. [ 1186.346902][T21019] netlink: 'syz.5.3541': attribute type 7 has an invalid length. [ 1186.375138][T21019] netlink: 198368 bytes leftover after parsing attributes in process `syz.5.3541'. [ 1186.467139][T21019] netlink: 336 bytes leftover after parsing attributes in process `syz.5.3541'. [ 1187.034348][T21029] hsr0: entered promiscuous mode [ 1187.097993][T21029] macsec1: entered promiscuous mode [ 1187.214914][T21032] loop7: detected capacity change from 0 to 2048 [ 1187.298796][T21032] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 1187.543727][T20988] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1187.615589][T21041] loop1: detected capacity change from 0 to 512 [ 1187.842887][T21041] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1187.931873][T21041] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1187.987447][T21041] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1188.070949][T21041] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1188.129088][T21041] System zones: 0-2, 18-18, 34-35 [ 1188.216842][T21041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1188.251960][T21045] FAULT_INJECTION: forcing a failure. [ 1188.251960][T21045] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.354673][T21045] CPU: 0 PID: 21045 Comm: syz.7.3549 Not tainted syzkaller #0 [ 1188.362184][T21045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1188.372256][T21045] Call Trace: [ 1188.375529][T21045] [ 1188.378453][T21045] dump_stack_lvl+0x18c/0x250 [ 1188.383144][T21045] ? show_regs_print_info+0x20/0x20 [ 1188.388353][T21045] ? load_image+0x420/0x420 [ 1188.392850][T21045] ? __might_sleep+0xe0/0xe0 [ 1188.397433][T21045] ? __lock_acquire+0x7d80/0x7d80 [ 1188.402468][T21045] should_fail_ex+0x394/0x4c0 [ 1188.407157][T21045] should_failslab+0x9/0x20 [ 1188.411663][T21045] slab_pre_alloc_hook+0x59/0x300 [ 1188.416696][T21045] kmem_cache_alloc+0x5a/0x2c0 [ 1188.421474][T21045] ? getname_flags+0xbb/0x500 [ 1188.426147][T21045] getname_flags+0xbb/0x500 [ 1188.430660][T21045] user_path_at_empty+0x2c/0x60 [ 1188.435510][T21045] do_sys_truncate+0xba/0x1c0 [ 1188.440191][T21045] ? lock_chain_count+0x20/0x20 [ 1188.445037][T21045] ? break_lease+0xd0/0xd0 [ 1188.449461][T21045] ? lockdep_hardirqs_on+0x98/0x150 [ 1188.454652][T21045] do_syscall_64+0x55/0xb0 [ 1188.459086][T21045] ? clear_bhb_loop+0x40/0x90 [ 1188.463751][T21045] ? clear_bhb_loop+0x40/0x90 [ 1188.468421][T21045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1188.474301][T21045] RIP: 0033:0x7fa12f19e159 [ 1188.478710][T21045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.498306][T21045] RSP: 002b:00007fa12ffdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1188.506708][T21045] RAX: ffffffffffffffda RBX: 00007fa12f425fa0 RCX: 00007fa12f19e159 [ 1188.514688][T21045] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 1188.522670][T21045] RBP: 00007fa12ffdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.530725][T21045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1188.538705][T21045] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1188.546675][T21045] [ 1188.709735][T12463] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.805485][T21049] loop5: detected capacity change from 0 to 32768 [ 1189.900278][T21049] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.3550 (21049) [ 1190.030420][T21049] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1190.057604][T21065] FAULT_INJECTION: forcing a failure. [ 1190.057604][T21065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.143334][T21049] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1190.179916][T21065] CPU: 0 PID: 21065 Comm: syz.7.3557 Not tainted syzkaller #0 [ 1190.187439][T21065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1190.197487][T21065] Call Trace: [ 1190.200755][T21065] [ 1190.203671][T21065] dump_stack_lvl+0x18c/0x250 [ 1190.208360][T21065] ? show_regs_print_info+0x20/0x20 [ 1190.213544][T21065] ? load_image+0x420/0x420 [ 1190.218036][T21065] ? __might_fault+0xaa/0x120 [ 1190.222700][T21065] ? __lock_acquire+0x7d80/0x7d80 [ 1190.227718][T21065] should_fail_ex+0x394/0x4c0 [ 1190.232388][T21065] _copy_from_user+0x2f/0xe0 [ 1190.236965][T21065] ___sys_sendmsg+0x1c7/0x360 [ 1190.241628][T21065] ? get_pid_task+0x20/0x1e0 [ 1190.246210][T21065] ? __sys_sendmsg+0x2b0/0x2b0 [ 1190.250970][T21065] ? __lock_acquire+0x7d80/0x7d80 [ 1190.256010][T21065] __se_sys_sendmsg+0x1d0/0x2c0 [ 1190.260869][T21065] ? __x64_sys_sendmsg+0x80/0x80 [ 1190.265815][T21065] ? lockdep_hardirqs_on+0x98/0x150 [ 1190.271040][T21065] do_syscall_64+0x55/0xb0 [ 1190.275451][T21065] ? clear_bhb_loop+0x40/0x90 [ 1190.280131][T21065] ? clear_bhb_loop+0x40/0x90 [ 1190.284803][T21065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1190.290685][T21065] RIP: 0033:0x7fa12f19e159 [ 1190.295094][T21065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.314713][T21065] RSP: 002b:00007fa12ffdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1190.323135][T21065] RAX: ffffffffffffffda RBX: 00007fa12f425fa0 RCX: 00007fa12f19e159 [ 1190.331102][T21065] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1190.339081][T21065] RBP: 00007fa12ffdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.347071][T21065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.355128][T21065] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1190.363134][T21065] [ 1190.373148][T21049] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1190.399497][T21068] cgroup: noprefix used incorrectly [ 1190.437218][T21049] BTRFS info (device loop5): force clearing of disk cache [ 1190.444408][T21049] BTRFS info (device loop5): setting datasum, datacow enabled [ 1190.528737][T21049] BTRFS info (device loop5): turning on sync discard [ 1190.589458][T21049] BTRFS info (device loop5): use zlib compression, level 3 [ 1190.665522][T21049] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1190.718923][T21049] BTRFS info (device loop5): turning on flush-on-commit [ 1190.767528][T21049] BTRFS info (device loop5): allowing degraded mounts [ 1190.814888][T21049] BTRFS info (device loop5): metadata ratio 8 [ 1190.849418][T21049] BTRFS info (device loop5): using free space tree [ 1190.960815][T13860] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x1335c47d3f94e85552e31a8ecc9dd4db4dece1445f3fbef1d5b0b5e8324c15d5 found 0xb6e8cdc151977f278c6405bc0a198aa519b602c8bdf1c8600d424c7b08561f8a level 0 [ 1191.150830][T21049] BTRFS warning (device loop5): couldn't read tree root [ 1191.249122][T21049] BTRFS error (device loop5): open_ctree failed: -5 [ 1191.335869][T20988] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (20988) [ 1191.593037][T21102] FAULT_INJECTION: forcing a failure. [ 1191.593037][T21102] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.695581][T21102] CPU: 0 PID: 21102 Comm: syz.5.3564 Not tainted syzkaller #0 [ 1191.703082][T21102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1191.713128][T21102] Call Trace: [ 1191.716415][T21102] [ 1191.719342][T21102] dump_stack_lvl+0x18c/0x250 [ 1191.724038][T21102] ? show_regs_print_info+0x20/0x20 [ 1191.729240][T21102] ? load_image+0x420/0x420 [ 1191.733732][T21102] ? __might_sleep+0xe0/0xe0 [ 1191.738314][T21102] ? __lock_acquire+0x7d80/0x7d80 [ 1191.743329][T21102] should_fail_ex+0x394/0x4c0 [ 1191.747995][T21102] should_failslab+0x9/0x20 [ 1191.752484][T21102] slab_pre_alloc_hook+0x59/0x300 [ 1191.757507][T21102] ? kernfs_fop_write_iter+0x158/0x520 [ 1191.762972][T21102] ? kernfs_fop_write_iter+0x158/0x520 [ 1191.768429][T21102] __kmem_cache_alloc_node+0x53/0x250 [ 1191.773811][T21102] ? kernfs_fop_write_iter+0x158/0x520 [ 1191.779286][T21102] __kmalloc+0xa7/0x240 [ 1191.783462][T21102] kernfs_fop_write_iter+0x158/0x520 [ 1191.788748][T21102] vfs_write+0x474/0x9a0 [ 1191.792988][T21102] ? file_end_write+0x250/0x250 [ 1191.797832][T21102] ? __fget_files+0x3fc/0x460 [ 1191.802501][T21102] ? __fdget_pos+0x2a3/0x330 [ 1191.807082][T21102] ? ksys_write+0x74/0x260 [ 1191.811489][T21102] ksys_write+0x151/0x260 [ 1191.815809][T21102] ? __ia32_sys_read+0x90/0x90 [ 1191.820561][T21102] ? lockdep_hardirqs_on+0x98/0x150 [ 1191.825766][T21102] do_syscall_64+0x55/0xb0 [ 1191.830168][T21102] ? clear_bhb_loop+0x40/0x90 [ 1191.834940][T21102] ? clear_bhb_loop+0x40/0x90 [ 1191.839607][T21102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1191.845490][T21102] RIP: 0033:0x7f6384d9e159 [ 1191.849898][T21102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.869493][T21102] RSP: 002b:00007f6385bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1191.877903][T21102] RAX: ffffffffffffffda RBX: 00007f6385025fa0 RCX: 00007f6384d9e159 [ 1191.885860][T21102] RDX: 0000000000000018 RSI: 0000200000002700 RDI: 0000000000000003 [ 1191.893825][T21102] RBP: 00007f6385bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.901785][T21102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.909764][T21102] R13: 00007f6385026038 R14: 00007f6385025fa0 R15: 00007ffd6e856748 [ 1191.917733][T21102] [ 1192.622714][T21112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1192.630846][T21112] IPv6: NLM_F_CREATE should be set when creating new route [ 1192.638149][T21112] IPv6: NLM_F_CREATE should be set when creating new route [ 1192.790618][T21112] loop1: detected capacity change from 0 to 2048 [ 1192.839542][T21112] UDF-fs: bad mount option "uid=ÿÿÿÿ01777777777777777777777ofÿÁŒÇåFÍdÌãrí¼R̺" or missing value [ 1193.225591][T21117] loop1: detected capacity change from 0 to 256 [ 1193.334869][T21121] FAULT_INJECTION: forcing a failure. [ 1193.334869][T21121] name failslab, interval 1, probability 0, space 0, times 0 [ 1193.463608][T21121] CPU: 0 PID: 21121 Comm: syz.5.3573 Not tainted syzkaller #0 [ 1193.471117][T21121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1193.481184][T21121] Call Trace: [ 1193.484473][T21121] [ 1193.487393][T21121] dump_stack_lvl+0x18c/0x250 [ 1193.492068][T21121] ? show_regs_print_info+0x20/0x20 [ 1193.497295][T21121] ? load_image+0x420/0x420 [ 1193.501808][T21121] ? __might_sleep+0xe0/0xe0 [ 1193.506407][T21121] ? __lock_acquire+0x7d80/0x7d80 [ 1193.511445][T21121] should_fail_ex+0x394/0x4c0 [ 1193.516178][T21121] should_failslab+0x9/0x20 [ 1193.520829][T21121] slab_pre_alloc_hook+0x59/0x300 [ 1193.526003][T21121] ? kernfs_fop_write_iter+0x158/0x520 [ 1193.531460][T21121] ? kernfs_fop_write_iter+0x158/0x520 [ 1193.537011][T21121] __kmem_cache_alloc_node+0x53/0x250 [ 1193.542388][T21121] ? kernfs_fop_write_iter+0x158/0x520 [ 1193.547838][T21121] __kmalloc+0xa7/0x240 [ 1193.551987][T21121] kernfs_fop_write_iter+0x158/0x520 [ 1193.557263][T21121] vfs_write+0x474/0x9a0 [ 1193.561524][T21121] ? file_end_write+0x250/0x250 [ 1193.566376][T21121] ? __fget_files+0x3fc/0x460 [ 1193.571048][T21121] ? __fdget_pos+0x2a3/0x330 [ 1193.575643][T21121] ? ksys_write+0x74/0x260 [ 1193.580053][T21121] ksys_write+0x151/0x260 [ 1193.584461][T21121] ? __ia32_sys_read+0x90/0x90 [ 1193.589229][T21121] ? lockdep_hardirqs_on+0x98/0x150 [ 1193.594430][T21121] do_syscall_64+0x55/0xb0 [ 1193.598836][T21121] ? clear_bhb_loop+0x40/0x90 [ 1193.603501][T21121] ? clear_bhb_loop+0x40/0x90 [ 1193.608164][T21121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1193.614053][T21121] RIP: 0033:0x7f6384d9e159 [ 1193.618460][T21121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.638074][T21121] RSP: 002b:00007f6385bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1193.646504][T21121] RAX: ffffffffffffffda RBX: 00007f6385025fa0 RCX: 00007f6384d9e159 [ 1193.654467][T21121] RDX: 0000000000000018 RSI: 0000200000002700 RDI: 0000000000000003 [ 1193.662442][T21121] RBP: 00007f6385bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.670404][T21121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1193.678378][T21121] R13: 00007f6385026038 R14: 00007f6385025fa0 R15: 00007ffd6e856748 [ 1193.686481][T21121] [ 1194.438075][T21131] FAULT_INJECTION: forcing a failure. [ 1194.438075][T21131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1194.492342][T21131] CPU: 0 PID: 21131 Comm: syz.7.3577 Not tainted syzkaller #0 [ 1194.499862][T21131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1194.509927][T21131] Call Trace: [ 1194.513201][T21131] [ 1194.516211][T21131] dump_stack_lvl+0x18c/0x250 [ 1194.520921][T21131] ? show_regs_print_info+0x20/0x20 [ 1194.526215][T21131] ? load_image+0x420/0x420 [ 1194.530838][T21131] ? __might_fault+0xaa/0x120 [ 1194.535535][T21131] ? __lock_acquire+0x7d80/0x7d80 [ 1194.540630][T21131] should_fail_ex+0x394/0x4c0 [ 1194.545329][T21131] _copy_to_user+0x2f/0xa0 [ 1194.549748][T21131] ptrace_request+0x17e3/0x1f70 [ 1194.554619][T21131] ? lock_chain_count+0x20/0x20 [ 1194.559550][T21131] ? ptrace_writedata+0x3d0/0x3d0 [ 1194.564626][T21131] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1194.570528][T21131] ? lockdep_hardirqs_on+0x98/0x150 [ 1194.575733][T21131] ? do_raw_spin_unlock+0x121/0x230 [ 1194.580929][T21131] ? wait_task_inactive+0x3a2/0x6b0 [ 1194.586123][T21131] ? wakeup_preempt+0x270/0x270 [ 1194.590966][T21131] arch_ptrace+0x277/0x400 [ 1194.595373][T21131] __se_sys_ptrace+0x15a/0x410 [ 1194.600144][T21131] ? __x64_sys_ptrace+0xb0/0xb0 [ 1194.604984][T21131] ? lockdep_hardirqs_on+0x98/0x150 [ 1194.610172][T21131] do_syscall_64+0x55/0xb0 [ 1194.614658][T21131] ? clear_bhb_loop+0x40/0x90 [ 1194.619318][T21131] ? clear_bhb_loop+0x40/0x90 [ 1194.623984][T21131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1194.629866][T21131] RIP: 0033:0x7fa12f19e159 [ 1194.634280][T21131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.653892][T21131] RSP: 002b:00007fa12ffdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 1194.662462][T21131] RAX: ffffffffffffffda RBX: 00007fa12f425fa0 RCX: 00007fa12f19e159 [ 1194.670461][T21131] RDX: 0000000000000405 RSI: 000000000000004a RDI: 000000000000420e [ 1194.678445][T21131] RBP: 00007fa12ffdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.686425][T21131] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.694387][T21131] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1194.702725][T21131] [ 1195.412342][T21145] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3581'. [ 1195.631836][T21148] loop5: detected capacity change from 0 to 256 [ 1195.698579][T21148] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1195.844605][ T5814] Process accounting resumed [ 1195.876365][ T5814] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 1195.946311][ T5814] FAT-fs (loop5): Filesystem has been set read-only [ 1196.131809][T21154] FAULT_INJECTION: forcing a failure. [ 1196.131809][T21154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1196.203208][T21154] CPU: 0 PID: 21154 Comm: syz.7.3585 Not tainted syzkaller #0 [ 1196.210704][T21154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1196.220751][T21154] Call Trace: [ 1196.224037][T21154] [ 1196.226960][T21154] dump_stack_lvl+0x18c/0x250 [ 1196.231631][T21154] ? show_regs_print_info+0x20/0x20 [ 1196.236830][T21154] ? load_image+0x420/0x420 [ 1196.241323][T21154] ? __lock_acquire+0x7d80/0x7d80 [ 1196.246335][T21154] ? snprintf+0xe9/0x140 [ 1196.250564][T21154] should_fail_ex+0x394/0x4c0 [ 1196.255235][T21154] _copy_to_user+0x2f/0xa0 [ 1196.259639][T21154] simple_read_from_buffer+0xe7/0x150 [ 1196.265013][T21154] proc_fail_nth_read+0x1e8/0x260 [ 1196.270125][T21154] ? proc_fault_inject_write+0x360/0x360 [ 1196.275751][T21154] ? fsnotify_perm+0x271/0x5e0 [ 1196.280511][T21154] ? proc_fault_inject_write+0x360/0x360 [ 1196.286135][T21154] vfs_read+0x298/0x990 [ 1196.290288][T21154] ? kernel_read+0x1e0/0x1e0 [ 1196.294869][T21154] ? __fget_files+0x28/0x460 [ 1196.299464][T21154] ? __fget_files+0x3fc/0x460 [ 1196.304268][T21154] ? __fdget_pos+0x2a3/0x330 [ 1196.308859][T21154] ? ksys_read+0x74/0x260 [ 1196.313197][T21154] ksys_read+0x151/0x260 [ 1196.317438][T21154] ? vfs_write+0x9a0/0x9a0 [ 1196.321850][T21154] ? lockdep_hardirqs_on+0x98/0x150 [ 1196.327050][T21154] do_syscall_64+0x55/0xb0 [ 1196.331470][T21154] ? clear_bhb_loop+0x40/0x90 [ 1196.336140][T21154] ? clear_bhb_loop+0x40/0x90 [ 1196.340827][T21154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1196.346712][T21154] RIP: 0033:0x7fa12f15e98e [ 1196.351134][T21154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1196.370753][T21154] RSP: 002b:00007fa12ffdafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1196.379154][T21154] RAX: ffffffffffffffda RBX: 00007fa12ffdb6c0 RCX: 00007fa12f15e98e [ 1196.387114][T21154] RDX: 000000000000000f RSI: 00007fa12ffdb0a0 RDI: 0000000000000003 [ 1196.395071][T21154] RBP: 00007fa12ffdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.403031][T21154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.410993][T21154] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1196.418966][T21154] [ 1196.517364][T13923] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1196.539430][T21156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3586'. [ 1196.707273][T13923] usb 2-1: Using ep0 maxpacket: 32 [ 1196.714276][T13923] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1196.769447][T13923] usb 2-1: config 0 has no interface number 0 [ 1196.825488][T13923] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1196.875733][T13923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.948603][T13923] usb 2-1: Product: syz [ 1196.952800][T13923] usb 2-1: Manufacturer: syz [ 1196.961360][T21160] loop5: detected capacity change from 0 to 4096 [ 1197.008126][T13923] usb 2-1: SerialNumber: syz [ 1197.051342][T21165] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1197.063211][T13923] usb 2-1: config 0 descriptor?? [ 1197.114573][T13923] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1197.210206][T21167] erspan0: entered promiscuous mode [ 1197.216540][T13923] usb 2-1: selecting invalid altsetting 1 [ 1197.268223][T13923] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1197.333517][T21140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.355555][T13923] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1198.325195][T13923] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1198.499676][T21140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.797955][T21171] FAULT_INJECTION: forcing a failure. [ 1198.797955][T21171] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.810667][T21171] CPU: 0 PID: 21171 Comm: syz.7.3593 Not tainted syzkaller #0 [ 1198.818140][T21171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1198.828214][T21171] Call Trace: [ 1198.831489][T21171] [ 1198.834417][T21171] dump_stack_lvl+0x18c/0x250 [ 1198.839092][T21171] ? show_regs_print_info+0x20/0x20 [ 1198.844280][T21171] ? load_image+0x420/0x420 [ 1198.848772][T21171] ? __might_sleep+0xe0/0xe0 [ 1198.853353][T21171] ? __lock_acquire+0x7d80/0x7d80 [ 1198.858364][T21171] should_fail_ex+0x394/0x4c0 [ 1198.863046][T21171] should_failslab+0x9/0x20 [ 1198.867539][T21171] slab_pre_alloc_hook+0x59/0x300 [ 1198.872555][T21171] ? vfs_write+0x5de/0x9a0 [ 1198.876959][T21171] kmem_cache_alloc+0x5a/0x2c0 [ 1198.881706][T21171] ? getname_flags+0xbb/0x500 [ 1198.886376][T21171] getname_flags+0xbb/0x500 [ 1198.890872][T21171] do_sys_openat2+0xda/0x1d0 [ 1198.895452][T21171] ? do_sys_open+0xe0/0xe0 [ 1198.899853][T21171] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1198.905823][T21171] ? lock_chain_count+0x20/0x20 [ 1198.910660][T21171] __x64_sys_openat+0x139/0x160 [ 1198.915503][T21171] do_syscall_64+0x55/0xb0 [ 1198.919906][T21171] ? clear_bhb_loop+0x40/0x90 [ 1198.924578][T21171] ? clear_bhb_loop+0x40/0x90 [ 1198.929251][T21171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1198.935148][T21171] RIP: 0033:0x7fa12f19e159 [ 1198.939640][T21171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.959240][T21171] RSP: 002b:00007fa12ffdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1198.967643][T21171] RAX: ffffffffffffffda RBX: 00007fa12f425fa0 RCX: 00007fa12f19e159 [ 1198.975601][T21171] RDX: 000000000000275a RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1198.983563][T21171] RBP: 00007fa12ffdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.991535][T21171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.999495][T21171] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1199.007462][T21171] [ 1199.085804][T13923] usb 2-1: media controller created [ 1199.329198][T13923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1199.451008][T13923] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1199.490531][T13923] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1199.536803][T13923] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1199.547030][ T5814] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1199.700671][T21186] FAULT_INJECTION: forcing a failure. [ 1199.700671][T21186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1199.734090][T13923] usb 2-1: USB disconnect, device number 84 [ 1199.777066][ T5814] usb 6-1: Using ep0 maxpacket: 8 [ 1199.795353][ T5814] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1199.809683][T21186] CPU: 0 PID: 21186 Comm: syz.1.3597 Not tainted syzkaller #0 [ 1199.817176][T21186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1199.827221][T21186] Call Trace: [ 1199.830492][T21186] [ 1199.833412][T21186] dump_stack_lvl+0x18c/0x250 [ 1199.838124][T21186] ? show_regs_print_info+0x20/0x20 [ 1199.843328][T21186] ? load_image+0x420/0x420 [ 1199.847827][T21186] ? __might_fault+0xaa/0x120 [ 1199.852598][T21186] ? __lock_acquire+0x7d80/0x7d80 [ 1199.857613][T21186] should_fail_ex+0x394/0x4c0 [ 1199.862309][T21186] _copy_from_user+0x2f/0xe0 [ 1199.866890][T21186] ___sys_sendmsg+0x1c7/0x360 [ 1199.871557][T21186] ? get_pid_task+0x20/0x1e0 [ 1199.876139][T21186] ? __sys_sendmsg+0x2b0/0x2b0 [ 1199.880915][T21186] ? __lock_acquire+0x7d80/0x7d80 [ 1199.885940][T21186] __se_sys_sendmsg+0x1d0/0x2c0 [ 1199.890780][T21186] ? __x64_sys_sendmsg+0x80/0x80 [ 1199.895754][T21186] ? lockdep_hardirqs_on+0x98/0x150 [ 1199.900993][T21186] do_syscall_64+0x55/0xb0 [ 1199.905399][T21186] ? clear_bhb_loop+0x40/0x90 [ 1199.910063][T21186] ? clear_bhb_loop+0x40/0x90 [ 1199.914725][T21186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1199.920820][T21186] RIP: 0033:0x7f6bb919e159 [ 1199.925256][T21186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.945030][T21186] RSP: 002b:00007f6bba10a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1199.953443][T21186] RAX: ffffffffffffffda RBX: 00007f6bb9425fa0 RCX: 00007f6bb919e159 [ 1199.961424][T21186] RDX: 0000000020004000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1199.969388][T21186] RBP: 00007f6bba10a090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.977363][T21186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.985324][T21186] R13: 00007f6bb9426038 R14: 00007f6bb9425fa0 R15: 00007ffce57bd618 [ 1199.993309][T21186] [ 1200.107576][ T5814] usb 6-1: config 7 has an invalid descriptor of length 106, skipping remainder of the config [ 1200.148404][ T5814] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 1200.307009][ T5814] usb 6-1: string descriptor 0 read error: -22 [ 1200.316794][ T5814] usb 6-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=29.5c [ 1200.352009][ T5814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.419494][ T5814] usb 6-1: can't set config #7, error -71 [ 1200.464252][ T5814] usb 6-1: USB disconnect, device number 16 [ 1200.741826][T21193] 9pnet_fd: Insufficient options for proto=fd [ 1200.751679][T21196] FAULT_INJECTION: forcing a failure. [ 1200.751679][T21196] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.822805][T21196] CPU: 0 PID: 21196 Comm: syz.7.3599 Not tainted syzkaller #0 [ 1200.830317][T21196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1200.840406][T21196] Call Trace: [ 1200.843710][T21196] [ 1200.846664][T21196] dump_stack_lvl+0x18c/0x250 [ 1200.851347][T21196] ? show_regs_print_info+0x20/0x20 [ 1200.856538][T21196] ? load_image+0x420/0x420 [ 1200.861037][T21196] ? __might_sleep+0xe0/0xe0 [ 1200.865628][T21196] ? __lock_acquire+0x7d80/0x7d80 [ 1200.870687][T21196] should_fail_ex+0x394/0x4c0 [ 1200.875394][T21196] should_failslab+0x9/0x20 [ 1200.879901][T21196] slab_pre_alloc_hook+0x59/0x300 [ 1200.884934][T21196] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1200.890650][T21196] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1200.896549][T21196] __kmem_cache_alloc_node+0x53/0x250 [ 1200.901936][T21196] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1200.907648][T21196] __kmalloc+0xa7/0x240 [ 1200.911810][T21196] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1200.917357][T21196] ? tomoyo_domain+0xd6/0x120 [ 1200.922036][T21196] tomoyo_path_number_perm+0x248/0x5e0 [ 1200.927513][T21196] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1200.933155][T21196] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1200.938627][T21196] ? ksys_write+0x1d2/0x260 [ 1200.943138][T21196] ? __fget_files+0x28/0x460 [ 1200.947745][T21196] security_file_ioctl+0x70/0xa0 [ 1200.952681][T21196] __se_sys_ioctl+0x48/0x170 [ 1200.957287][T21196] do_syscall_64+0x55/0xb0 [ 1200.961726][T21196] ? clear_bhb_loop+0x40/0x90 [ 1200.966402][T21196] ? clear_bhb_loop+0x40/0x90 [ 1200.971084][T21196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1200.976969][T21196] RIP: 0033:0x7fa12f19e159 [ 1200.981374][T21196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.000979][T21196] RSP: 002b:00007fa12ffdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.009400][T21196] RAX: ffffffffffffffda RBX: 00007fa12f425fa0 RCX: 00007fa12f19e159 [ 1201.017382][T21196] RDX: 00000000000000ec RSI: 000000000000ae03 RDI: 0000000000000004 [ 1201.025342][T21196] RBP: 00007fa12ffdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.033326][T21196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.041301][T21196] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1201.049281][T21196] [ 1201.224452][T21196] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1201.507980][T21212] FAULT_INJECTION: forcing a failure. [ 1201.507980][T21212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1201.554675][T21211] macvtap1: entered promiscuous mode [ 1201.582627][T21211] vlan0: entered promiscuous mode [ 1201.595077][T21212] CPU: 0 PID: 21212 Comm: syz.5.3604 Not tainted syzkaller #0 [ 1201.602586][T21212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1201.612633][T21212] Call Trace: [ 1201.615903][T21212] [ 1201.618933][T21212] dump_stack_lvl+0x18c/0x250 [ 1201.623630][T21212] ? show_regs_print_info+0x20/0x20 [ 1201.628833][T21212] ? load_image+0x420/0x420 [ 1201.633357][T21212] ? __might_fault+0xaa/0x120 [ 1201.638049][T21212] ? __lock_acquire+0x7d80/0x7d80 [ 1201.643115][T21212] should_fail_ex+0x394/0x4c0 [ 1201.647798][T21212] _copy_from_user+0x2f/0xe0 [ 1201.652383][T21212] ___sys_sendmsg+0x1c7/0x360 [ 1201.657085][T21212] ? __sys_sendmsg+0x2b0/0x2b0 [ 1201.661863][T21212] __sys_sendmmsg+0x2ca/0x510 [ 1201.666531][T21212] ? __ia32_sys_sendmsg+0x90/0x90 [ 1201.671617][T21212] ? mutex_unlock+0x10/0x10 [ 1201.676119][T21212] ? __fget_files+0x3fc/0x460 [ 1201.680798][T21212] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1201.686769][T21212] ? lock_chain_count+0x20/0x20 [ 1201.691628][T21212] __x64_sys_sendmmsg+0xa0/0xb0 [ 1201.696473][T21212] do_syscall_64+0x55/0xb0 [ 1201.700881][T21212] ? clear_bhb_loop+0x40/0x90 [ 1201.705590][T21212] ? clear_bhb_loop+0x40/0x90 [ 1201.710270][T21212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1201.716168][T21212] RIP: 0033:0x7f6384d9e159 [ 1201.720581][T21212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.740192][T21212] RSP: 002b:00007f6385bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1201.748592][T21212] RAX: ffffffffffffffda RBX: 00007f6385025fa0 RCX: 00007f6384d9e159 [ 1201.756649][T21212] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1201.764626][T21212] RBP: 00007f6385bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.772602][T21212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.780562][T21212] R13: 00007f6385026038 R14: 00007f6385025fa0 R15: 00007ffd6e856748 [ 1201.788548][T21212] [ 1201.857440][T21211] macvtap1: entered allmulticast mode [ 1201.935464][T21211] vlan0: entered allmulticast mode [ 1202.017927][T21211] veth0_vlan: entered allmulticast mode [ 1202.127169][T21215] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1202.268200][T21216] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1202.351767][T21221] FAULT_INJECTION: forcing a failure. [ 1202.351767][T21221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.408989][T21221] CPU: 0 PID: 21221 Comm: syz.7.3607 Not tainted syzkaller #0 [ 1202.416493][T21221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1202.426544][T21221] Call Trace: [ 1202.429814][T21221] [ 1202.432732][T21221] dump_stack_lvl+0x18c/0x250 [ 1202.437405][T21221] ? show_regs_print_info+0x20/0x20 [ 1202.442589][T21221] ? load_image+0x420/0x420 [ 1202.447079][T21221] ? __might_fault+0xaa/0x120 [ 1202.451756][T21221] ? __lock_acquire+0x7d80/0x7d80 [ 1202.456790][T21221] should_fail_ex+0x394/0x4c0 [ 1202.461459][T21221] _copy_from_user+0x2f/0xe0 [ 1202.466037][T21221] ___sys_sendmsg+0x1c7/0x360 [ 1202.470709][T21221] ? get_pid_task+0x20/0x1e0 [ 1202.475293][T21221] ? __sys_sendmsg+0x2b0/0x2b0 [ 1202.480057][T21221] ? __lock_acquire+0x7d80/0x7d80 [ 1202.485076][T21221] __se_sys_sendmsg+0x1d0/0x2c0 [ 1202.489927][T21221] ? __x64_sys_sendmsg+0x80/0x80 [ 1202.494859][T21221] ? lockdep_hardirqs_on+0x98/0x150 [ 1202.500046][T21221] do_syscall_64+0x55/0xb0 [ 1202.504447][T21221] ? clear_bhb_loop+0x40/0x90 [ 1202.509136][T21221] ? clear_bhb_loop+0x40/0x90 [ 1202.513811][T21221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1202.519710][T21221] RIP: 0033:0x7fa12f19e159 [ 1202.524113][T21221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.543714][T21221] RSP: 002b:00007fa12ffdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1202.552114][T21221] RAX: ffffffffffffffda RBX: 00007fa12f425fa0 RCX: 00007fa12f19e159 [ 1202.560071][T21221] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1202.568040][T21221] RBP: 00007fa12ffdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.575998][T21221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1202.583955][T21221] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1202.591922][T21221] [ 1203.112722][T21219] loop1: detected capacity change from 0 to 32768 [ 1203.321095][T21219] (syz.1.3606,21219,0):ocfs2_check_set_options:1208 ERROR: User quotas were requested, but this filesystem does not have the feature enabled. [ 1203.427733][T21219] (syz.1.3606,21219,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1203.818127][ T8047] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1204.010944][ T8047] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 1204.042947][ T8047] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.127140][ T8047] usb 2-1: config 0 has no interface number 0 [ 1204.133290][ T8047] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1204.245907][ T8047] usb 2-1: config 0 interface 229 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1204.352516][ T8047] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b3.49 [ 1204.427048][ T8047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.476704][T21242] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1204.490045][ T8047] usb 2-1: config 0 descriptor?? [ 1204.729539][T21229] tipc: Enabled bearer , priority 10 [ 1205.881881][ T8047] peak_usb 2-1:0.229 can0: unable to request usb[type=0 value=1] err=-71 [ 1205.957064][ T8047] peak_usb 2-1:0.229: unable to read PCAN-Chip USB firmware info (err -71) [ 1206.072607][T21255] FAULT_INJECTION: forcing a failure. [ 1206.072607][T21255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.086413][ T8047] peak_usb: probe of 2-1:0.229 failed with error -71 [ 1206.137569][ T8047] usb 2-1: USB disconnect, device number 85 [ 1206.179917][T21255] CPU: 0 PID: 21255 Comm: syz.1.3621 Not tainted syzkaller #0 [ 1206.187416][T21255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1206.197480][T21255] Call Trace: [ 1206.200754][T21255] [ 1206.203678][T21255] dump_stack_lvl+0x18c/0x250 [ 1206.208351][T21255] ? show_regs_print_info+0x20/0x20 [ 1206.213560][T21255] ? load_image+0x420/0x420 [ 1206.218052][T21255] ? __might_fault+0xaa/0x120 [ 1206.222718][T21255] ? __lock_acquire+0x7d80/0x7d80 [ 1206.227738][T21255] should_fail_ex+0x394/0x4c0 [ 1206.232411][T21255] strncpy_from_user+0x36/0x2f0 [ 1206.237252][T21255] getname_flags+0xf6/0x500 [ 1206.241771][T21255] do_sys_openat2+0xda/0x1d0 [ 1206.246385][T21255] ? do_sys_open+0xe0/0xe0 [ 1206.250807][T21255] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1206.256792][T21255] ? lock_chain_count+0x20/0x20 [ 1206.261638][T21255] __x64_sys_openat+0x139/0x160 [ 1206.266483][T21255] do_syscall_64+0x55/0xb0 [ 1206.270889][T21255] ? clear_bhb_loop+0x40/0x90 [ 1206.275555][T21255] ? clear_bhb_loop+0x40/0x90 [ 1206.280223][T21255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1206.286111][T21255] RIP: 0033:0x7f6bb915e98e [ 1206.290552][T21255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1206.310160][T21255] RSP: 002b:00007f6bba109f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1206.318572][T21255] RAX: ffffffffffffffda RBX: 00007f6bba10a6c0 RCX: 00007f6bb915e98e [ 1206.326538][T21255] RDX: 0000000000000002 RSI: 00007f6bb9234942 RDI: ffffffffffffff9c [ 1206.334528][T21255] RBP: 00007f6bb923503b R08: 0000000000000000 R09: 0000000000000000 [ 1206.342493][T21255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.350453][T21255] R13: 00007f6bb9426038 R14: 00007f6bb9425fa0 R15: 00007ffce57bd618 [ 1206.358423][T21255] [ 1206.361552][ C0] vkms_vblank_simulate: vblank timer overrun [ 1207.022211][T21260] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1207.131359][T21263] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1208.507055][ T5816] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1208.678673][T21285] FAULT_INJECTION: forcing a failure. [ 1208.678673][T21285] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.709523][ T5816] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 1208.732443][ T5816] usb 6-1: config 0 has no interface number 0 [ 1208.758714][ T5816] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1208.779200][T21285] CPU: 0 PID: 21285 Comm: syz.7.3631 Not tainted syzkaller #0 [ 1208.786707][T21285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1208.796766][T21285] Call Trace: [ 1208.800056][T21285] [ 1208.802988][T21285] dump_stack_lvl+0x18c/0x250 [ 1208.807675][T21285] ? show_regs_print_info+0x20/0x20 [ 1208.812889][T21285] ? load_image+0x420/0x420 [ 1208.817496][T21285] ? __lock_acquire+0x7d80/0x7d80 [ 1208.822541][T21285] should_fail_ex+0x394/0x4c0 [ 1208.827226][T21285] should_failslab+0x9/0x20 [ 1208.831735][T21285] slab_pre_alloc_hook+0x59/0x300 [ 1208.836755][T21285] ? alloc_pipe_info+0xe8/0x4b0 [ 1208.841602][T21285] __kmem_cache_alloc_node+0x53/0x250 [ 1208.846966][T21285] ? alloc_pipe_info+0xe8/0x4b0 [ 1208.851814][T21285] kmalloc_trace+0x2a/0xe0 [ 1208.856233][T21285] alloc_pipe_info+0xe8/0x4b0 [ 1208.860902][T21285] splice_direct_to_actor+0x749/0x8e0 [ 1208.866264][T21285] ? aa_file_perm+0x11b/0xee0 [ 1208.870955][T21285] ? direct_file_splice_eof+0xb0/0xb0 [ 1208.876314][T21285] ? aa_file_perm+0x3e3/0xee0 [ 1208.880990][T21285] ? end_current_label_crit_section+0x149/0x170 [ 1208.887243][T21285] ? warn_unsupported+0xc0/0xc0 [ 1208.892083][T21285] ? common_file_perm+0x198/0x1f0 [ 1208.897118][T21285] ? fsnotify_perm+0x5d/0x5e0 [ 1208.901799][T21285] ? security_file_permission+0x79/0xa0 [ 1208.907344][T21285] do_splice_direct+0x1d5/0x2f0 [ 1208.912192][T21285] ? fsnotify_clear_child_dentry_flag+0xe0/0xe0 [ 1208.918434][T21285] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1208.923966][T21285] ? do_splice_direct+0x2f0/0x2f0 [ 1208.929028][T21285] ? common_file_perm+0x198/0x1f0 [ 1208.934046][T21285] ? fsnotify_perm+0x5d/0x5e0 [ 1208.938719][T21285] ? security_file_permission+0x79/0xa0 [ 1208.944262][T21285] do_sendfile+0x52b/0xe80 [ 1208.948671][T21285] ? mutex_unlock+0x10/0x10 [ 1208.953176][T21285] ? do_pwritev+0x3a0/0x3a0 [ 1208.957677][T21285] __se_sys_sendfile64+0x145/0x1a0 [ 1208.962782][T21285] ? lock_chain_count+0x20/0x20 [ 1208.967651][T21285] ? __x64_sys_sendfile64+0xb0/0xb0 [ 1208.972869][T21285] ? lockdep_hardirqs_on+0x98/0x150 [ 1208.978112][T21285] do_syscall_64+0x55/0xb0 [ 1208.982519][T21285] ? clear_bhb_loop+0x40/0x90 [ 1208.987187][T21285] ? clear_bhb_loop+0x40/0x90 [ 1208.991857][T21285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1208.997745][T21285] RIP: 0033:0x7fa12f19e159 [ 1209.002149][T21285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.021783][T21285] RSP: 002b:00007fa12ffdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1209.030192][T21285] RAX: ffffffffffffffda RBX: 00007fa12f425fa0 RCX: 00007fa12f19e159 [ 1209.038173][T21285] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 1209.046134][T21285] RBP: 00007fa12ffdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.054100][T21285] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000001 [ 1209.062100][T21285] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1209.070103][T21285] [ 1209.073250][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.252490][T21289] loop1: detected capacity change from 0 to 2048 [ 1209.480575][ T5816] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1209.500153][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.640257][ T5816] usb 6-1: Product: syz [ 1209.644483][ T5816] usb 6-1: Manufacturer: syz [ 1209.701917][ T5816] usb 6-1: SerialNumber: syz [ 1209.718108][T21294] FAULT_INJECTION: forcing a failure. [ 1209.718108][T21294] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.744822][ T5816] usb 6-1: config 0 descriptor?? [ 1209.791521][T21278] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1209.834539][T21294] CPU: 0 PID: 21294 Comm: syz.1.3633 Not tainted syzkaller #0 [ 1209.842035][T21294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1209.852099][T21294] Call Trace: [ 1209.855370][T21294] [ 1209.858299][T21294] dump_stack_lvl+0x18c/0x250 [ 1209.862974][T21294] ? show_regs_print_info+0x20/0x20 [ 1209.868161][T21294] ? load_image+0x420/0x420 [ 1209.872672][T21294] ? __might_sleep+0xe0/0xe0 [ 1209.877267][T21294] ? __lock_acquire+0x7d80/0x7d80 [ 1209.882298][T21294] should_fail_ex+0x394/0x4c0 [ 1209.886977][T21294] should_failslab+0x9/0x20 [ 1209.891493][T21294] slab_pre_alloc_hook+0x59/0x300 [ 1209.896514][T21294] ? kernfs_fop_write_iter+0x158/0x520 [ 1209.901962][T21294] ? kernfs_fop_write_iter+0x158/0x520 [ 1209.907546][T21294] __kmem_cache_alloc_node+0x53/0x250 [ 1209.912938][T21294] ? kernfs_fop_write_iter+0x158/0x520 [ 1209.918396][T21294] __kmalloc+0xa7/0x240 [ 1209.922556][T21294] kernfs_fop_write_iter+0x158/0x520 [ 1209.927870][T21294] vfs_write+0x474/0x9a0 [ 1209.932168][T21294] ? file_end_write+0x250/0x250 [ 1209.937033][T21294] ? __fget_files+0x3fc/0x460 [ 1209.941873][T21294] ? __fdget_pos+0x2a3/0x330 [ 1209.946499][T21294] ? ksys_write+0x74/0x260 [ 1209.950923][T21294] ksys_write+0x151/0x260 [ 1209.955297][T21294] ? __ia32_sys_read+0x90/0x90 [ 1209.960083][T21294] ? lockdep_hardirqs_on+0x98/0x150 [ 1209.965299][T21294] do_syscall_64+0x55/0xb0 [ 1209.969731][T21294] ? clear_bhb_loop+0x40/0x90 [ 1209.974414][T21294] ? clear_bhb_loop+0x40/0x90 [ 1209.979108][T21294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1209.985015][T21294] RIP: 0033:0x7f6bb919e159 [ 1209.989424][T21294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.009138][T21294] RSP: 002b:00007f6bba10a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1210.017567][T21294] RAX: ffffffffffffffda RBX: 00007f6bb9425fa0 RCX: 00007f6bb919e159 [ 1210.025616][T21294] RDX: 0000000000000002 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1210.033690][T21294] RBP: 00007f6bba10a090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.041670][T21294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1210.049661][T21294] R13: 00007f6bb9426038 R14: 00007f6bb9425fa0 R15: 00007ffce57bd618 [ 1210.057646][T21294] [ 1210.060782][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.115503][ T5816] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 22:fd:f6:d9:d4:f9 [ 1211.253162][T21307] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1211.362850][ T5816] usb 6-1: USB disconnect, device number 17 [ 1211.387966][ T5816] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1211.504122][T21313] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1211.645393][T21320] FAULT_INJECTION: forcing a failure. [ 1211.645393][T21320] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.758644][T21320] CPU: 0 PID: 21320 Comm: syz.1.3639 Not tainted syzkaller #0 [ 1211.766149][T21320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1211.776218][T21320] Call Trace: [ 1211.779502][T21320] [ 1211.782425][T21320] dump_stack_lvl+0x18c/0x250 [ 1211.787097][T21320] ? show_regs_print_info+0x20/0x20 [ 1211.792285][T21320] ? load_image+0x420/0x420 [ 1211.796778][T21320] ? __might_sleep+0xe0/0xe0 [ 1211.801361][T21320] ? __lock_acquire+0x7d80/0x7d80 [ 1211.806394][T21320] should_fail_ex+0x394/0x4c0 [ 1211.811067][T21320] should_failslab+0x9/0x20 [ 1211.815564][T21320] slab_pre_alloc_hook+0x59/0x300 [ 1211.820584][T21320] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1211.826296][T21320] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1211.832005][T21320] __kmem_cache_alloc_node+0x53/0x250 [ 1211.837373][T21320] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1211.843176][T21320] __kmalloc+0xa7/0x240 [ 1211.847348][T21320] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1211.852890][T21320] ? tomoyo_domain+0xd6/0x120 [ 1211.857568][T21320] tomoyo_path_number_perm+0x248/0x5e0 [ 1211.863020][T21320] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1211.868658][T21320] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1211.874105][T21320] ? proc_fail_nth_write+0x1c5/0x250 [ 1211.879385][T21320] ? proc_fail_nth_read+0x260/0x260 [ 1211.884595][T21320] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1211.890570][T21320] security_file_ioctl+0x70/0xa0 [ 1211.895505][T21320] __se_sys_ioctl+0x48/0x170 [ 1211.900088][T21320] do_syscall_64+0x55/0xb0 [ 1211.904493][T21320] ? clear_bhb_loop+0x40/0x90 [ 1211.909179][T21320] ? clear_bhb_loop+0x40/0x90 [ 1211.913848][T21320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1211.919737][T21320] RIP: 0033:0x7f6bb919e159 [ 1211.924141][T21320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.943739][T21320] RSP: 002b:00007f6bba10a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1211.952139][T21320] RAX: ffffffffffffffda RBX: 00007f6bb9425fa0 RCX: 00007f6bb919e159 [ 1211.960102][T21320] RDX: 00002000000001c0 RSI: 000000004068aea3 RDI: 0000000000000005 [ 1211.968087][T21320] RBP: 00007f6bba10a090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.976049][T21320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.984009][T21320] R13: 00007f6bb9426038 R14: 00007f6bb9425fa0 R15: 00007ffce57bd618 [ 1211.991981][T21320] [ 1212.850628][T21337] i2c i2c-0: new_device: Missing parameters [ 1212.927255][T21333] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[21339] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[21333] [ 1213.177861][T21320] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1215.158425][T21352] FAULT_INJECTION: forcing a failure. [ 1215.158425][T21352] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.187943][T21363] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1215.377963][T21367] FAULT_INJECTION: forcing a failure. [ 1215.377963][T21367] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1215.407736][T21352] CPU: 0 PID: 21352 Comm: syz.5.3646 Not tainted syzkaller #0 [ 1215.415244][T21352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1215.425291][T21352] Call Trace: [ 1215.428565][T21352] [ 1215.431488][T21352] dump_stack_lvl+0x18c/0x250 [ 1215.436185][T21352] ? show_regs_print_info+0x20/0x20 [ 1215.441393][T21352] ? load_image+0x420/0x420 [ 1215.445886][T21352] ? __might_sleep+0xe0/0xe0 [ 1215.450465][T21352] ? __lock_acquire+0x7d80/0x7d80 [ 1215.455479][T21352] should_fail_ex+0x394/0x4c0 [ 1215.460148][T21352] should_failslab+0x9/0x20 [ 1215.464642][T21352] slab_pre_alloc_hook+0x59/0x300 [ 1215.469661][T21352] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1215.475387][T21352] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1215.481094][T21352] __kmem_cache_alloc_node+0x53/0x250 [ 1215.486459][T21352] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1215.492169][T21352] __kmalloc+0xa7/0x240 [ 1215.496327][T21352] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1215.501866][T21352] ? tomoyo_domain+0xd6/0x120 [ 1215.506559][T21352] tomoyo_path_number_perm+0x248/0x5e0 [ 1215.512009][T21352] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1215.517650][T21352] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1215.523097][T21352] ? ksys_write+0x1d2/0x260 [ 1215.527624][T21352] ? __fget_files+0x28/0x460 [ 1215.532209][T21352] security_file_ioctl+0x70/0xa0 [ 1215.537139][T21352] __se_sys_ioctl+0x48/0x170 [ 1215.541722][T21352] do_syscall_64+0x55/0xb0 [ 1215.546149][T21352] ? clear_bhb_loop+0x40/0x90 [ 1215.550835][T21352] ? clear_bhb_loop+0x40/0x90 [ 1215.555497][T21352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1215.561381][T21352] RIP: 0033:0x7f6384d9e159 [ 1215.565782][T21352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.585377][T21352] RSP: 002b:00007f6385bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1215.593778][T21352] RAX: ffffffffffffffda RBX: 00007f6385025fa0 RCX: 00007f6384d9e159 [ 1215.601739][T21352] RDX: 0000200000000080 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 1215.609711][T21352] RBP: 00007f6385bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.617673][T21352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.625631][T21352] R13: 00007f6385026038 R14: 00007f6385025fa0 R15: 00007ffd6e856748 [ 1215.633598][T21352] [ 1215.784531][T21365] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1215.877299][T21367] CPU: 0 PID: 21367 Comm: syz.7.3651 Not tainted syzkaller #0 [ 1215.884802][T21367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1215.894847][T21367] Call Trace: [ 1215.898120][T21367] [ 1215.901044][T21367] dump_stack_lvl+0x18c/0x250 [ 1215.905722][T21367] ? show_regs_print_info+0x20/0x20 [ 1215.910922][T21367] ? load_image+0x420/0x420 [ 1215.915417][T21367] ? __lock_acquire+0x7d80/0x7d80 [ 1215.920433][T21367] should_fail_ex+0x394/0x4c0 [ 1215.925103][T21367] prepare_alloc_pages+0x1e1/0x5b0 [ 1215.930224][T21367] __alloc_pages+0x134/0x460 [ 1215.934802][T21367] ? zone_statistics+0x170/0x170 [ 1215.939742][T21367] ? __lock_acquire+0x7d80/0x7d80 [ 1215.944783][T21367] __folio_alloc+0x10/0x20 [ 1215.949184][T21367] vma_alloc_folio+0x474/0x8f0 [ 1215.953955][T21367] handle_mm_fault+0x1ab6/0x4a50 [ 1215.958880][T21367] ? handle_mm_fault+0xe6/0x4a50 [ 1215.963809][T21367] ? numa_migrate_prep+0x350/0x350 [ 1215.968923][T21367] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1215.974220][T21367] do_user_addr_fault+0x736/0x12d0 [ 1215.979324][T21367] exc_page_fault+0x64/0x100 [ 1215.983900][T21367] ? clear_bhb_loop+0x40/0x90 [ 1215.988564][T21367] asm_exc_page_fault+0x26/0x30 [ 1215.993402][T21367] RIP: 0033:0x7fa12f160082 [ 1215.997803][T21367] Code: 8d 15 63 19 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 1216.017440][T21367] RSP: 002b:00007fa12ffd9d20 EFLAGS: 00010286 [ 1216.023506][T21367] RAX: ffffffffffffffff RBX: 00007fa128000000 RCX: 00007fa12f19df57 [ 1216.031494][T21367] RDX: 00007fa12f2519c1 RSI: 0000000000021000 RDI: 00007fa128000000 [ 1216.039598][T21367] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1216.047565][T21367] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 1216.055541][T21367] R13: 0000000000001000 R14: 00007fa12c000000 R15: 0000000002c09000 [ 1216.063525][T21367] [ 1216.329619][T21371] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1216.381976][T21371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1216.431497][T21371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1216.480365][T21374] comedi comedi1: Minor 4194306 is invalid! [ 1216.518163][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1216.737465][T21379] FAULT_INJECTION: forcing a failure. [ 1216.737465][T21379] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.804277][T21379] CPU: 0 PID: 21379 Comm: syz.1.3655 Not tainted syzkaller #0 [ 1216.811776][T21379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1216.821827][T21379] Call Trace: [ 1216.825105][T21379] [ 1216.828036][T21379] dump_stack_lvl+0x18c/0x250 [ 1216.832707][T21379] ? show_regs_print_info+0x20/0x20 [ 1216.837895][T21379] ? load_image+0x420/0x420 [ 1216.842387][T21379] ? __might_sleep+0xe0/0xe0 [ 1216.846965][T21379] ? __lock_acquire+0x7d80/0x7d80 [ 1216.851989][T21379] should_fail_ex+0x394/0x4c0 [ 1216.856679][T21379] should_failslab+0x9/0x20 [ 1216.861176][T21379] slab_pre_alloc_hook+0x59/0x300 [ 1216.866207][T21379] ? __lock_acquire+0x7d80/0x7d80 [ 1216.871222][T21379] ? allocate_file_region_entries+0x218/0x600 [ 1216.877280][T21379] __kmem_cache_alloc_node+0x53/0x250 [ 1216.882642][T21379] ? mark_lock+0x94/0x320 [ 1216.886980][T21379] ? allocate_file_region_entries+0x218/0x600 [ 1216.893044][T21379] kmalloc_trace+0x2a/0xe0 [ 1216.897472][T21379] allocate_file_region_entries+0x218/0x600 [ 1216.903363][T21379] ? folio_lock+0x190/0x190 [ 1216.907860][T21379] region_chg+0x30a/0x3d0 [ 1216.912200][T21379] __vma_reservation_common+0x331/0x6e0 [ 1216.917744][T21379] alloc_hugetlb_folio+0x17d/0x1660 [ 1216.922944][T21379] ? filemap_get_entry+0x375/0x3f0 [ 1216.928059][T21379] ? page_cache_prev_miss+0x390/0x390 [ 1216.933432][T21379] ? folio_isolate_hugetlb+0x2f0/0x2f0 [ 1216.938879][T21379] ? read_lock_is_recursive+0x20/0x20 [ 1216.944238][T21379] ? mutex_lock_nested+0x20/0x20 [ 1216.949176][T21379] hugetlb_fault+0xaf9/0x2b60 [ 1216.953851][T21379] ? hugetlb_fault_mutex_hash+0xc0/0xc0 [ 1216.959388][T21379] ? mt_find+0x169/0x640 [ 1216.963619][T21379] ? __lock_acquire+0x7d80/0x7d80 [ 1216.968638][T21379] handle_mm_fault+0x31c1/0x4a50 [ 1216.973560][T21379] ? handle_mm_fault+0xe6/0x4a50 [ 1216.978510][T21379] ? numa_migrate_prep+0x350/0x350 [ 1216.983610][T21379] ? find_vma+0x134/0x1b0 [ 1216.987933][T21379] ? generic_get_unmapped_area_topdown+0x690/0x690 [ 1216.994430][T21379] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1216.999702][T21379] do_user_addr_fault+0x736/0x12d0 [ 1217.004811][T21379] exc_page_fault+0x64/0x100 [ 1217.009398][T21379] ? clear_bhb_loop+0x40/0x90 [ 1217.014067][T21379] asm_exc_page_fault+0x26/0x30 [ 1217.018911][T21379] RIP: 0033:0x7f6bb90571b6 [ 1217.023329][T21379] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d dc da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 1217.042939][T21379] RSP: 002b:00007f6bba109f60 EFLAGS: 00010206 [ 1217.049007][T21379] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 00002000007e9000 [ 1217.056965][T21379] RDX: 00000000000025f5 RSI: 00002000007e9000 RDI: 00002000007ea000 [ 1217.064946][T21379] RBP: 00007f6bb92546a0 R08: 0000000000000000 R09: ffffffffffffffff [ 1217.072920][T21379] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 1217.080878][T21379] R13: 00002000007e9000 R14: 00007f6bb9425fa0 R15: 0000000000000000 [ 1217.088849][T21379] [ 1217.247525][T21367] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1217.927366][T21377] netlink: 'syz.0.3654': attribute type 5 has an invalid length. [ 1218.081630][T21352] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1218.921541][T21396] bridge3: entered promiscuous mode [ 1218.980740][T21397] bridge4: entered promiscuous mode [ 1219.191518][T21404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3664'. [ 1219.837538][ T8047] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 1219.946745][T21424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3673'. [ 1220.017087][ T8047] usb 2-1: device descriptor read/64, error -71 [ 1220.297227][ T8047] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 1220.477433][ T8047] usb 2-1: device descriptor read/64, error -71 [ 1220.597246][ T8047] usb usb2-port1: attempt power cycle [ 1221.017577][ T8047] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 1221.054977][T21438] FAULT_INJECTION: forcing a failure. [ 1221.054977][T21438] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.098432][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3676'. [ 1221.139084][ T8047] usb 2-1: device descriptor read/8, error -71 [ 1221.176706][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3676'. [ 1221.192047][T21438] CPU: 0 PID: 21438 Comm: syz.5.3677 Not tainted syzkaller #0 [ 1221.199575][T21438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1221.209620][T21438] Call Trace: [ 1221.212892][T21438] [ 1221.215812][T21438] dump_stack_lvl+0x18c/0x250 [ 1221.220519][T21438] ? show_regs_print_info+0x20/0x20 [ 1221.225737][T21438] ? load_image+0x420/0x420 [ 1221.230227][T21438] ? __might_sleep+0xe0/0xe0 [ 1221.234805][T21438] ? __lock_acquire+0x7d80/0x7d80 [ 1221.239836][T21438] should_fail_ex+0x394/0x4c0 [ 1221.244504][T21438] should_failslab+0x9/0x20 [ 1221.249018][T21438] slab_pre_alloc_hook+0x59/0x300 [ 1221.254064][T21438] ? kvmalloc_node+0x70/0x180 [ 1221.258733][T21438] ? kvmalloc_node+0x70/0x180 [ 1221.263400][T21438] __kmem_cache_alloc_node+0x53/0x250 [ 1221.268763][T21438] ? kvmalloc_node+0x70/0x180 [ 1221.273427][T21438] __kmalloc_node+0xa6/0x240 [ 1221.278009][T21438] kvmalloc_node+0x70/0x180 [ 1221.282506][T21438] seq_read_iter+0x1e2/0xc50 [ 1221.287096][T21438] seq_read+0x175/0x220 [ 1221.291243][T21438] ? seq_open+0x140/0x140 [ 1221.295588][T21438] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1221.301758][T21438] ? common_file_perm+0x198/0x1f0 [ 1221.306791][T21438] ? fsnotify_perm+0x271/0x5e0 [ 1221.311550][T21438] ? seq_open+0x140/0x140 [ 1221.315868][T21438] vfs_read+0x298/0x990 [ 1221.320037][T21438] ? kernel_read+0x1e0/0x1e0 [ 1221.324653][T21438] ? __fget_files+0x28/0x460 [ 1221.329268][T21438] ? __fget_files+0x3fc/0x460 [ 1221.333949][T21438] ? __fdget_pos+0x2a3/0x330 [ 1221.338556][T21438] ? ksys_read+0x74/0x260 [ 1221.342896][T21438] ksys_read+0x151/0x260 [ 1221.347140][T21438] ? vfs_write+0x9a0/0x9a0 [ 1221.351586][T21438] ? lockdep_hardirqs_on+0x98/0x150 [ 1221.356779][T21438] do_syscall_64+0x55/0xb0 [ 1221.361184][T21438] ? clear_bhb_loop+0x40/0x90 [ 1221.365850][T21438] ? clear_bhb_loop+0x40/0x90 [ 1221.370513][T21438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1221.376407][T21438] RIP: 0033:0x7f6384d9e159 [ 1221.380814][T21438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.400416][T21438] RSP: 002b:00007f6385bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1221.408833][T21438] RAX: ffffffffffffffda RBX: 00007f6385025fa0 RCX: 00007f6384d9e159 [ 1221.416794][T21438] RDX: 0000000000002020 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1221.424754][T21438] RBP: 00007f6385bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.432711][T21438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.440683][T21438] R13: 00007f6385026038 R14: 00007f6385025fa0 R15: 00007ffd6e856748 [ 1221.448671][T21438] [ 1221.978742][ T8047] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 1222.084235][ T8047] usb 2-1: device descriptor read/8, error -71 [ 1222.227453][ T8047] usb usb2-port1: unable to enumerate USB device [ 1222.285535][T21439] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3676'. [ 1222.346053][T21439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1224.595343][T21476] FAULT_INJECTION: forcing a failure. [ 1224.595343][T21476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.633197][T21475] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1224.715105][T21476] CPU: 0 PID: 21476 Comm: syz.1.3685 Not tainted syzkaller #0 [ 1224.722609][T21476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1224.732669][T21476] Call Trace: [ 1224.735952][T21476] [ 1224.738884][T21476] dump_stack_lvl+0x18c/0x250 [ 1224.743564][T21476] ? show_regs_print_info+0x20/0x20 [ 1224.748759][T21476] ? load_image+0x420/0x420 [ 1224.753273][T21476] ? __lock_acquire+0x7d80/0x7d80 [ 1224.758311][T21476] ? snprintf+0xe9/0x140 [ 1224.762553][T21476] should_fail_ex+0x394/0x4c0 [ 1224.767234][T21476] _copy_to_user+0x2f/0xa0 [ 1224.771661][T21476] simple_read_from_buffer+0xe7/0x150 [ 1224.777022][T21476] proc_fail_nth_read+0x1e8/0x260 [ 1224.782045][T21476] ? proc_fault_inject_write+0x360/0x360 [ 1224.787669][T21476] ? fsnotify_perm+0x271/0x5e0 [ 1224.792426][T21476] ? proc_fault_inject_write+0x360/0x360 [ 1224.798071][T21476] vfs_read+0x298/0x990 [ 1224.802254][T21476] ? kernel_read+0x1e0/0x1e0 [ 1224.806860][T21476] ? __fget_files+0x28/0x460 [ 1224.811450][T21476] ? __fget_files+0x3fc/0x460 [ 1224.816126][T21476] ? __fdget_pos+0x2a3/0x330 [ 1224.820702][T21476] ? ksys_read+0x74/0x260 [ 1224.825041][T21476] ksys_read+0x151/0x260 [ 1224.829293][T21476] ? vfs_write+0x9a0/0x9a0 [ 1224.833719][T21476] ? lockdep_hardirqs_on+0x98/0x150 [ 1224.838907][T21476] do_syscall_64+0x55/0xb0 [ 1224.843313][T21476] ? clear_bhb_loop+0x40/0x90 [ 1224.847975][T21476] ? clear_bhb_loop+0x40/0x90 [ 1224.852638][T21476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1224.858517][T21476] RIP: 0033:0x7f6bb915e98e [ 1224.862920][T21476] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1224.882514][T21476] RSP: 002b:00007f6bba0e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1224.890924][T21476] RAX: ffffffffffffffda RBX: 00007f6bba0e96c0 RCX: 00007f6bb915e98e [ 1224.898900][T21476] RDX: 000000000000000f RSI: 00007f6bba0e90a0 RDI: 0000000000000004 [ 1224.906856][T21476] RBP: 00007f6bba0e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.914832][T21476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.922787][T21476] R13: 00007f6bb9426128 R14: 00007f6bb9426090 R15: 00007ffce57bd618 [ 1224.930839][T21476] [ 1225.286576][T21482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3691'. [ 1225.346488][T21482] ip6gretap1: entered promiscuous mode [ 1226.835472][T21506] 9pnet_fd: Insufficient options for proto=fd [ 1227.076191][T21510] FAULT_INJECTION: forcing a failure. [ 1227.076191][T21510] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.148103][T21510] CPU: 0 PID: 21510 Comm: syz.5.3701 Not tainted syzkaller #0 [ 1227.155607][T21510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1227.165669][T21510] Call Trace: [ 1227.168942][T21510] [ 1227.171863][T21510] dump_stack_lvl+0x18c/0x250 [ 1227.176559][T21510] ? show_regs_print_info+0x20/0x20 [ 1227.181759][T21510] ? load_image+0x420/0x420 [ 1227.186250][T21510] ? __might_sleep+0xe0/0xe0 [ 1227.190830][T21510] ? __lock_acquire+0x7d80/0x7d80 [ 1227.195841][T21510] should_fail_ex+0x394/0x4c0 [ 1227.200516][T21510] should_failslab+0x9/0x20 [ 1227.205060][T21510] slab_pre_alloc_hook+0x59/0x300 [ 1227.210103][T21510] kmem_cache_alloc+0x5a/0x2c0 [ 1227.214902][T21510] ? getname_flags+0xbb/0x500 [ 1227.219585][T21510] getname_flags+0xbb/0x500 [ 1227.224082][T21510] user_path_at_empty+0x2c/0x60 [ 1227.228930][T21510] do_faccessat+0x5c2/0xd20 [ 1227.233433][T21510] ? stream_open+0x60/0x60 [ 1227.237942][T21510] ? lockdep_hardirqs_on+0x98/0x150 [ 1227.243233][T21510] do_syscall_64+0x55/0xb0 [ 1227.247665][T21510] ? clear_bhb_loop+0x40/0x90 [ 1227.252336][T21510] ? clear_bhb_loop+0x40/0x90 [ 1227.257006][T21510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1227.262913][T21510] RIP: 0033:0x7f6384d9e159 [ 1227.267315][T21510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.286929][T21510] RSP: 002b:00007f6385bdc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 1227.295359][T21510] RAX: ffffffffffffffda RBX: 00007f6385026090 RCX: 00007f6384d9e159 [ 1227.303329][T21510] RDX: 0000000000000001 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1227.311289][T21510] RBP: 00007f6385bdc090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.319246][T21510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.327218][T21510] R13: 00007f6385026128 R14: 00007f6385026090 R15: 00007ffd6e856748 [ 1227.335192][T21510] [ 1229.024464][T21552] FAULT_INJECTION: forcing a failure. [ 1229.024464][T21552] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.798557][T21552] CPU: 0 PID: 21552 Comm: syz.5.3717 Not tainted syzkaller #0 [ 1229.806063][T21552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1229.816132][T21552] Call Trace: [ 1229.819411][T21552] [ 1229.822331][T21552] dump_stack_lvl+0x18c/0x250 [ 1229.827019][T21552] ? show_regs_print_info+0x20/0x20 [ 1229.832225][T21552] ? load_image+0x420/0x420 [ 1229.836740][T21552] ? __might_sleep+0xe0/0xe0 [ 1229.841331][T21552] ? __lock_acquire+0x7d80/0x7d80 [ 1229.846349][T21552] should_fail_ex+0x394/0x4c0 [ 1229.851021][T21552] should_failslab+0x9/0x20 [ 1229.855514][T21552] slab_pre_alloc_hook+0x59/0x300 [ 1229.860530][T21552] kmem_cache_alloc+0x5a/0x2c0 [ 1229.865281][T21552] ? getname_flags+0xbb/0x500 [ 1229.869950][T21552] getname_flags+0xbb/0x500 [ 1229.874448][T21552] do_mq_open+0x1a2/0x760 [ 1229.878914][T21552] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1229.884586][T21552] ? mq_clear_sbinfo+0x90/0x90 [ 1229.889355][T21552] __x64_sys_mq_open+0x186/0x1e0 [ 1229.894285][T21552] ? proc_ipc_sem_dointvec+0x180/0x180 [ 1229.899745][T21552] ? lockdep_hardirqs_on+0x98/0x150 [ 1229.904945][T21552] do_syscall_64+0x55/0xb0 [ 1229.909348][T21552] ? clear_bhb_loop+0x40/0x90 [ 1229.914024][T21552] ? clear_bhb_loop+0x40/0x90 [ 1229.918707][T21552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1229.924591][T21552] RIP: 0033:0x7f6384d9e159 [ 1229.928994][T21552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.948599][T21552] RSP: 002b:00007f6385bfd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1229.957019][T21552] RAX: ffffffffffffffda RBX: 00007f6385025fa0 RCX: 00007f6384d9e159 [ 1229.964979][T21552] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140 [ 1229.972937][T21552] RBP: 00007f6385bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.980908][T21552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.988865][T21552] R13: 00007f6385026038 R14: 00007f6385025fa0 R15: 00007ffd6e856748 [ 1229.996836][T21552] [ 1230.447560][T21563] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3722'. [ 1230.819480][T21570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3724'. [ 1230.837054][T20243] Bluetooth: hci3: command 0x0406 tx timeout [ 1231.173911][T21576] loop1: detected capacity change from 0 to 256 [ 1231.415717][T21578] MPI: mpi too large (112776 bits) [ 1235.204128][T21616] loop7: detected capacity change from 0 to 256 [ 1237.510739][T21631] loop7: detected capacity change from 0 to 2048 [ 1237.630153][T21631] loop7: p4 < > [ 1237.881340][T21092] udevd[21092]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1237.973317][T21638] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1238.983286][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.994710][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.017128][ T1293] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1242.851233][T21687] FAULT_INJECTION: forcing a failure. [ 1242.851233][T21687] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.923795][T21687] CPU: 0 PID: 21687 Comm: syz.1.3765 Not tainted syzkaller #0 [ 1242.931290][T21687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1242.941335][T21687] Call Trace: [ 1242.944606][T21687] [ 1242.947527][T21687] dump_stack_lvl+0x18c/0x250 [ 1242.952216][T21687] ? show_regs_print_info+0x20/0x20 [ 1242.957403][T21687] ? load_image+0x420/0x420 [ 1242.961892][T21687] ? __might_sleep+0xe0/0xe0 [ 1242.966469][T21687] ? __lock_acquire+0x7d80/0x7d80 [ 1242.971485][T21687] should_fail_ex+0x394/0x4c0 [ 1242.976160][T21687] should_failslab+0x9/0x20 [ 1242.980659][T21687] slab_pre_alloc_hook+0x59/0x300 [ 1242.985683][T21687] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1242.991421][T21687] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1242.997150][T21687] __kmem_cache_alloc_node+0x53/0x250 [ 1243.002518][T21687] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1243.008237][T21687] __kmalloc+0xa7/0x240 [ 1243.012390][T21687] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1243.017933][T21687] ? tomoyo_domain+0xd6/0x120 [ 1243.022607][T21687] tomoyo_path_number_perm+0x248/0x5e0 [ 1243.028061][T21687] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1243.033690][T21687] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1243.039143][T21687] ? ksys_write+0x1d2/0x260 [ 1243.043666][T21687] ? __fget_files+0x28/0x460 [ 1243.048250][T21687] security_file_ioctl+0x70/0xa0 [ 1243.053199][T21687] __se_sys_ioctl+0x48/0x170 [ 1243.057803][T21687] do_syscall_64+0x55/0xb0 [ 1243.062206][T21687] ? clear_bhb_loop+0x40/0x90 [ 1243.066871][T21687] ? clear_bhb_loop+0x40/0x90 [ 1243.071539][T21687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1243.077439][T21687] RIP: 0033:0x7f6bb919e159 [ 1243.081852][T21687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.101447][T21687] RSP: 002b:00007f6bba0e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1243.109848][T21687] RAX: ffffffffffffffda RBX: 00007f6bb9426090 RCX: 00007f6bb919e159 [ 1243.117818][T21687] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1243.125792][T21687] RBP: 00007f6bba0e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.133791][T21687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.141777][T21687] R13: 00007f6bb9426128 R14: 00007f6bb9426090 R15: 00007ffce57bd618 [ 1243.149764][T21687] [ 1243.437107][T21693] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1244.013076][T21703] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3773'. [ 1244.316034][T21687] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1244.781035][T21724] FAULT_INJECTION: forcing a failure. [ 1244.781035][T21724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1244.875509][T21724] CPU: 0 PID: 21724 Comm: syz.1.3776 Not tainted syzkaller #0 [ 1244.883031][T21724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1244.893082][T21724] Call Trace: [ 1244.896355][T21724] [ 1244.899282][T21724] dump_stack_lvl+0x18c/0x250 [ 1244.903957][T21724] ? show_regs_print_info+0x20/0x20 [ 1244.909147][T21724] ? load_image+0x420/0x420 [ 1244.913658][T21724] ? __might_fault+0xaa/0x120 [ 1244.918326][T21724] ? __lock_acquire+0x7d80/0x7d80 [ 1244.923353][T21724] should_fail_ex+0x394/0x4c0 [ 1244.928033][T21724] _copy_from_user+0x2f/0xe0 [ 1244.932621][T21724] ___sys_sendmsg+0x1c7/0x360 [ 1244.937292][T21724] ? get_pid_task+0x20/0x1e0 [ 1244.941888][T21724] ? __sys_sendmsg+0x2b0/0x2b0 [ 1244.946649][T21724] ? __lock_acquire+0x7d80/0x7d80 [ 1244.951674][T21724] __se_sys_sendmsg+0x1d0/0x2c0 [ 1244.956520][T21724] ? __x64_sys_sendmsg+0x80/0x80 [ 1244.961449][T21724] ? lockdep_hardirqs_on+0x98/0x150 [ 1244.966640][T21724] do_syscall_64+0x55/0xb0 [ 1244.971041][T21724] ? clear_bhb_loop+0x40/0x90 [ 1244.975719][T21724] ? clear_bhb_loop+0x40/0x90 [ 1244.980385][T21724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1244.986267][T21724] RIP: 0033:0x7f6bb919e159 [ 1244.990673][T21724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.010270][T21724] RSP: 002b:00007f6bba10a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1245.018674][T21724] RAX: ffffffffffffffda RBX: 00007f6bb9425fa0 RCX: 00007f6bb919e159 [ 1245.026633][T21724] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1245.034615][T21724] RBP: 00007f6bba10a090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.042574][T21724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.050553][T21724] R13: 00007f6bb9426038 R14: 00007f6bb9425fa0 R15: 00007ffce57bd618 [ 1245.058526][T21724] [ 1245.565545][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 1245.565557][ T28] audit: type=1326 audit(1789386512.173:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.0.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3279e159 code=0x7ffc0000 [ 1245.605288][T21729] loop5: detected capacity change from 0 to 1024 [ 1245.715723][T21729] hfsplus: unable to parse mount options [ 1245.819737][ T28] audit: type=1326 audit(1789386512.173:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.0.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3279e159 code=0x7ffc0000 [ 1246.020147][ T28] audit: type=1326 audit(1789386512.233:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.0.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3279e159 code=0x7ffc0000 [ 1246.063322][T21739] sg_write: data in/out 14/70 bytes for SCSI command 0x0-- guessing data in; [ 1246.063322][T21739] program syz.5.3781 not setting count and/or reply_len properly [ 1246.217179][ T28] audit: type=1326 audit(1789386512.233:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.0.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3279e159 code=0x7ffc0000 [ 1246.420336][ T28] audit: type=1326 audit(1789386512.243:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.0.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbf3279e159 code=0x7ffc0000 [ 1246.596703][ T28] audit: type=1326 audit(1789386512.243:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.0.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3279e159 code=0x7ffc0000 [ 1246.774083][ T28] audit: type=1326 audit(1789386512.253:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.0.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3279e159 code=0x7ffc0000 [ 1247.043532][ T28] audit: type=1326 audit(1789386512.253:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.0.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3279e159 code=0x7ffc0000 [ 1247.181976][T21772] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1247.217081][ T8047] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1247.257329][T21772] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1247.282207][ T28] audit: type=1326 audit(1789386512.273:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.0.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbf3279e159 code=0x7ffc0000 [ 1247.395182][T21773] FAULT_INJECTION: forcing a failure. [ 1247.395182][T21773] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.442380][T21775] overlayfs: failed to clone upperpath [ 1247.457112][ T28] audit: type=1326 audit(1789386512.273:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.0.3778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3279e159 code=0x7ffc0000 [ 1247.511636][T21775] overlayfs: failed to clone upperpath [ 1247.541101][T21773] CPU: 0 PID: 21773 Comm: syz.5.3788 Not tainted syzkaller #0 [ 1247.548631][T21773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1247.558704][T21773] Call Trace: [ 1247.562008][T21773] [ 1247.564932][T21773] dump_stack_lvl+0x18c/0x250 [ 1247.569606][T21773] ? show_regs_print_info+0x20/0x20 [ 1247.574815][T21773] ? load_image+0x420/0x420 [ 1247.579307][T21773] ? __might_sleep+0xe0/0xe0 [ 1247.583900][T21773] ? __lock_acquire+0x7d80/0x7d80 [ 1247.588912][T21773] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1247.594555][T21773] should_fail_ex+0x394/0x4c0 [ 1247.599230][T21773] should_failslab+0x9/0x20 [ 1247.603725][T21773] slab_pre_alloc_hook+0x59/0x300 [ 1247.608752][T21773] kmem_cache_alloc+0x5a/0x2c0 [ 1247.613517][T21773] ? getname_flags+0xbb/0x500 [ 1247.618190][T21773] getname_flags+0xbb/0x500 [ 1247.622692][T21773] __x64_sys_mknodat+0x98/0xc0 [ 1247.627463][T21773] do_syscall_64+0x55/0xb0 [ 1247.631876][T21773] ? clear_bhb_loop+0x40/0x90 [ 1247.636542][T21773] ? clear_bhb_loop+0x40/0x90 [ 1247.641261][T21773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1247.647163][T21773] RIP: 0033:0x7f6384d9e159 [ 1247.651628][T21773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.671239][T21773] RSP: 002b:00007f6385bdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 1247.679663][T21773] RAX: ffffffffffffffda RBX: 00007f6385026090 RCX: 00007f6384d9e159 [ 1247.687625][T21773] RDX: 0000000000001000 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 1247.695585][T21773] RBP: 00007f6385bdc090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.703576][T21773] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 1247.711625][T21773] R13: 00007f6385026128 R14: 00007f6385026090 R15: 00007ffd6e856748 [ 1247.719600][T21773] [ 1249.336311][T21789] overlayfs: failed to resolve './file1': -2 [ 1249.385277][T21789] overlayfs: failed to resolve './file1': -2 [ 1249.621562][T21789] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3794'. [ 1250.093036][T21801] FAULT_INJECTION: forcing a failure. [ 1250.093036][T21801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1250.181991][T21801] CPU: 0 PID: 21801 Comm: syz.5.3797 Not tainted syzkaller #0 [ 1250.189544][T21801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1250.199679][T21801] Call Trace: [ 1250.202969][T21801] [ 1250.205913][T21801] dump_stack_lvl+0x18c/0x250 [ 1250.210592][T21801] ? show_regs_print_info+0x20/0x20 [ 1250.215784][T21801] ? load_image+0x420/0x420 [ 1250.220291][T21801] ? __lock_acquire+0x7d80/0x7d80 [ 1250.225314][T21801] should_fail_ex+0x394/0x4c0 [ 1250.230008][T21801] prepare_alloc_pages+0x1e1/0x5b0 [ 1250.235115][T21801] __alloc_pages+0x134/0x460 [ 1250.239696][T21801] ? zone_statistics+0x170/0x170 [ 1250.244627][T21801] ? mt_find+0x169/0x640 [ 1250.248880][T21801] ? alloc_pages+0x4e1/0x740 [ 1250.253487][T21801] __pud_alloc+0x3a/0x200 [ 1250.257830][T21801] handle_mm_fault+0x346d/0x4a50 [ 1250.262756][T21801] ? handle_mm_fault+0xe6/0x4a50 [ 1250.267838][T21801] ? numa_migrate_prep+0x350/0x350 [ 1250.272961][T21801] ? lock_chain_count+0x20/0x20 [ 1250.277814][T21801] ? __lock_acquire+0x7d80/0x7d80 [ 1250.282831][T21801] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1250.288113][T21801] do_user_addr_fault+0x736/0x12d0 [ 1250.293328][T21801] exc_page_fault+0x64/0x100 [ 1250.297944][T21801] asm_exc_page_fault+0x26/0x30 [ 1250.302819][T21801] RIP: 0010:__put_user_4+0x11/0x20 [ 1250.307999][T21801] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 1250.327629][T21801] RSP: 0018:ffffc90003cb7ec0 EFLAGS: 00050206 [ 1250.333695][T21801] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000000 [ 1250.341748][T21801] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d35e0 [ 1250.349712][T21801] RBP: 0000000000000000 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 1250.357679][T21801] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: 0000000000000000 [ 1250.365666][T21801] R13: 1ffff110056d8eb2 R14: 0000000000000000 R15: dffffc0000000000 [ 1250.373645][T21801] __se_sys_getresuid+0x138/0x240 [ 1250.378688][T21801] do_syscall_64+0x55/0xb0 [ 1250.383096][T21801] ? clear_bhb_loop+0x40/0x90 [ 1250.387784][T21801] ? clear_bhb_loop+0x40/0x90 [ 1250.392483][T21801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1250.398387][T21801] RIP: 0033:0x7f6384d9e159 [ 1250.402794][T21801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.422433][T21801] RSP: 002b:00007f6385bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000076 [ 1250.430885][T21801] RAX: ffffffffffffffda RBX: 00007f6385025fa0 RCX: 00007f6384d9e159 [ 1250.438944][T21801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1250.446931][T21801] RBP: 00007f6385bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.454899][T21801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.462903][T21801] R13: 00007f6385026038 R14: 00007f6385025fa0 R15: 00007ffd6e856748 [ 1250.470913][T21801] [ 1252.759048][T21818] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1253.063633][T21822] loop5: detected capacity change from 0 to 512 [ 1254.437764][T21843] overlayfs: failed to resolve './file1': -2 [ 1254.486161][T21843] overlayfs: failed to resolve './file1': -2 [ 1254.721302][T21845] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3814'. [ 1254.763131][T21848] fuse: Bad value for 'fd' [ 1255.509815][T21863] loop7: detected capacity change from 0 to 512 [ 1255.579606][T21863] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 1255.704668][T21866] loop5: detected capacity change from 0 to 256 [ 1255.741119][T21863] loop7: detected capacity change from 0 to 512 [ 1255.751887][T21092] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1255.795512][T21866] exfat: Bad value for 'uid' [ 1255.851374][T21866] tmpfs: Unknown parameter 'gU„0x00000000ffffffff' [ 1255.993004][T21863] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:478: comm syz.7.3821: Invalid block bitmap block 0 in block_group 0 [ 1256.178486][T21863] EXT4-fs (loop7): Remounting filesystem read-only [ 1256.257518][T21863] EXT4-fs (loop7): 1 truncate cleaned up [ 1256.307828][T21863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1256.358452][T21878] FAULT_INJECTION: forcing a failure. [ 1256.358452][T21878] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.420209][T21878] CPU: 0 PID: 21878 Comm: syz.5.3825 Not tainted syzkaller #0 [ 1256.427719][T21878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1256.437781][T21878] Call Trace: [ 1256.441063][T21878] [ 1256.444004][T21878] dump_stack_lvl+0x18c/0x250 [ 1256.448701][T21878] ? show_regs_print_info+0x20/0x20 [ 1256.453907][T21878] ? load_image+0x420/0x420 [ 1256.458433][T21878] ? __might_sleep+0xe0/0xe0 [ 1256.463040][T21878] ? __lock_acquire+0x7d80/0x7d80 [ 1256.468098][T21878] should_fail_ex+0x394/0x4c0 [ 1256.472783][T21878] should_failslab+0x9/0x20 [ 1256.477283][T21878] slab_pre_alloc_hook+0x59/0x300 [ 1256.482330][T21878] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1256.488086][T21878] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1256.493801][T21878] __kmem_cache_alloc_node+0x53/0x250 [ 1256.499190][T21878] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1256.504906][T21878] __kmalloc+0xa7/0x240 [ 1256.509058][T21878] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1256.514712][T21878] ? tomoyo_domain+0xd6/0x120 [ 1256.519442][T21878] tomoyo_path_number_perm+0x248/0x5e0 [ 1256.525102][T21878] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1256.530765][T21878] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1256.536236][T21878] ? proc_fail_nth_write+0x1c5/0x250 [ 1256.541522][T21878] ? proc_fail_nth_read+0x260/0x260 [ 1256.546732][T21878] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1256.552730][T21878] security_file_ioctl+0x70/0xa0 [ 1256.557673][T21878] __se_sys_ioctl+0x48/0x170 [ 1256.562258][T21878] do_syscall_64+0x55/0xb0 [ 1256.566683][T21878] ? clear_bhb_loop+0x40/0x90 [ 1256.571349][T21878] ? clear_bhb_loop+0x40/0x90 [ 1256.576014][T21878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1256.581899][T21878] RIP: 0033:0x7f6384d9e159 [ 1256.586306][T21878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.605903][T21878] RSP: 002b:00007f6385bdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.614331][T21878] RAX: ffffffffffffffda RBX: 00007f6385026090 RCX: 00007f6384d9e159 [ 1256.622296][T21878] RDX: 00002000000001c0 RSI: 0000000040182103 RDI: 0000000000000003 [ 1256.630273][T21878] RBP: 00007f6385bdc090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.638243][T21878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.646209][T21878] R13: 00007f6385026128 R14: 00007f6385026090 R15: 00007ffd6e856748 [ 1256.654205][T21878] [ 1256.873458][T21882] fuse: Bad value for 'fd' [ 1257.027668][T21884] overlayfs: failed to resolve './file1': -2 [ 1257.073547][T21884] overlayfs: failed to resolve './file1': -2 [ 1257.177508][T20641] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.223679][T21885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3827'. [ 1257.470376][T21878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1257.993278][T21897] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1258.277987][T21905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3835'. [ 1258.346358][T21905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1259.023515][T21916] loop5: detected capacity change from 0 to 16 [ 1259.064196][T21913] nvmet: adding nsid 1 to subsystem testsubsys [ 1259.097620][T21916] erofs: (device loop5): mounted with root inode @ nid 36. [ 1259.229172][T21916] syz.5.3838: attempt to access beyond end of device [ 1259.229172][T21916] loop5: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 1259.366005][T21916] syz.5.3838: attempt to access beyond end of device [ 1259.366005][T21916] loop5: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1259.401722][T21913] nvmet: failed to open file ./0©ïßÔ˜ *Ñx¡³8: (-2) [ 1259.412795][T21919] loop7: detected capacity change from 0 to 16 [ 1259.455597][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1259.455607][ T28] audit: type=1800 audit(1789386526.063:3119): pid=21916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3838" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1259.507223][T21919] erofs: (device loop7): mounted with root inode @ nid 36. [ 1259.583052][T21919] FAULT_INJECTION: forcing a failure. [ 1259.583052][T21919] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.709282][T21919] CPU: 0 PID: 21919 Comm: syz.7.3839 Not tainted syzkaller #0 [ 1259.716783][T21919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1259.726835][T21919] Call Trace: [ 1259.730129][T21919] [ 1259.733051][T21919] dump_stack_lvl+0x18c/0x250 [ 1259.737748][T21919] ? show_regs_print_info+0x20/0x20 [ 1259.742967][T21919] ? load_image+0x420/0x420 [ 1259.747481][T21919] ? __might_sleep+0xe0/0xe0 [ 1259.752108][T21919] ? __lock_acquire+0x7d80/0x7d80 [ 1259.757155][T21919] should_fail_ex+0x394/0x4c0 [ 1259.761833][T21919] should_failslab+0x9/0x20 [ 1259.766332][T21919] slab_pre_alloc_hook+0x59/0x300 [ 1259.771366][T21919] ? vfs_write+0x5de/0x9a0 [ 1259.775781][T21919] kmem_cache_alloc+0x5a/0x2c0 [ 1259.780531][T21919] ? getname_flags+0xbb/0x500 [ 1259.785198][T21919] getname_flags+0xbb/0x500 [ 1259.789695][T21919] do_sys_openat2+0xda/0x1d0 [ 1259.794275][T21919] ? do_sys_open+0xe0/0xe0 [ 1259.798696][T21919] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1259.804692][T21919] ? lock_chain_count+0x20/0x20 [ 1259.809567][T21919] __x64_sys_openat+0x139/0x160 [ 1259.814416][T21919] do_syscall_64+0x55/0xb0 [ 1259.818835][T21919] ? clear_bhb_loop+0x40/0x90 [ 1259.823510][T21919] ? clear_bhb_loop+0x40/0x90 [ 1259.828177][T21919] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1259.834061][T21919] RIP: 0033:0x7fa12f19e159 [ 1259.838485][T21919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.858081][T21919] RSP: 002b:00007fa12ffdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1259.866482][T21919] RAX: ffffffffffffffda RBX: 00007fa12f425fa0 RCX: 00007fa12f19e159 [ 1259.874439][T21919] RDX: 0000000000080000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1259.882415][T21919] RBP: 00007fa12ffdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.890651][T21919] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 1259.898700][T21919] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1259.906668][T21919] [ 1260.300465][T21905] overlayfs: failed to clone upperpath [ 1260.328329][T21928] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1260.354696][T21905] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1260.860959][T21945] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3845'. [ 1261.008270][T21951] FAULT_INJECTION: forcing a failure. [ 1261.008270][T21951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1261.104650][T21951] CPU: 0 PID: 21951 Comm: syz.7.3847 Not tainted syzkaller #0 [ 1261.112165][T21951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1261.122229][T21951] Call Trace: [ 1261.125498][T21951] [ 1261.128420][T21951] dump_stack_lvl+0x18c/0x250 [ 1261.133112][T21951] ? show_regs_print_info+0x20/0x20 [ 1261.138310][T21951] ? load_image+0x420/0x420 [ 1261.142809][T21951] ? __lock_acquire+0x7d80/0x7d80 [ 1261.147825][T21951] ? snprintf+0xe9/0x140 [ 1261.152058][T21951] should_fail_ex+0x394/0x4c0 [ 1261.156730][T21951] _copy_to_user+0x2f/0xa0 [ 1261.161158][T21951] simple_read_from_buffer+0xe7/0x150 [ 1261.166712][T21951] proc_fail_nth_read+0x1e8/0x260 [ 1261.171755][T21951] ? proc_fault_inject_write+0x360/0x360 [ 1261.177403][T21951] ? fsnotify_perm+0x271/0x5e0 [ 1261.182177][T21951] ? proc_fault_inject_write+0x360/0x360 [ 1261.187813][T21951] vfs_read+0x298/0x990 [ 1261.191970][T21951] ? kernel_read+0x1e0/0x1e0 [ 1261.196550][T21951] ? __fget_files+0x28/0x460 [ 1261.201127][T21951] ? __fget_files+0x3fc/0x460 [ 1261.205803][T21951] ? __fdget_pos+0x2a3/0x330 [ 1261.210394][T21951] ? ksys_read+0x74/0x260 [ 1261.214732][T21951] ksys_read+0x151/0x260 [ 1261.218967][T21951] ? vfs_write+0x9a0/0x9a0 [ 1261.223376][T21951] ? lockdep_hardirqs_on+0x98/0x150 [ 1261.228569][T21951] do_syscall_64+0x55/0xb0 [ 1261.232977][T21951] ? clear_bhb_loop+0x40/0x90 [ 1261.237640][T21951] ? clear_bhb_loop+0x40/0x90 [ 1261.242309][T21951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1261.248208][T21951] RIP: 0033:0x7fa12f15e98e [ 1261.252613][T21951] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1261.272209][T21951] RSP: 002b:00007fa12ffdafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1261.280633][T21951] RAX: ffffffffffffffda RBX: 00007fa12ffdb6c0 RCX: 00007fa12f15e98e [ 1261.288609][T21951] RDX: 000000000000000f RSI: 00007fa12ffdb0a0 RDI: 0000000000000006 [ 1261.296571][T21951] RBP: 00007fa12ffdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.304549][T21951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.312630][T21951] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1261.320643][T21951] [ 1261.640668][T21964] overlayfs: workdir and upperdir must be separate subtrees [ 1261.891680][T21969] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3853'. [ 1261.963045][T21972] overlayfs: failed to clone upperpath [ 1261.972305][T21974] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1262.477382][T13923] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1262.688372][T13923] usb 2-1: Using ep0 maxpacket: 32 [ 1262.721942][T13923] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1262.764154][T13923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 1262.830894][T13923] usb 2-1: SerialNumber: syz [ 1262.867593][T21996] cgroup: noprefix used incorrectly [ 1262.873652][T13923] usb 2-1: config 0 descriptor?? [ 1262.940215][T13923] as10x_usb: device has been detected [ 1262.946107][T13923] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1263.087366][T13923] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1263.178637][T13923] as10x_usb: error during firmware upload part1 [ 1263.229912][T13923] Registered device nBox DVB-T Dongle [ 1263.263401][T13923] usb 2-1: USB disconnect, device number 91 [ 1263.402905][T13923] Unregistered device nBox DVB-T Dongle [ 1263.428161][T13923] as10x_usb: device has been disconnected [ 1263.667948][T22004] FAULT_INJECTION: forcing a failure. [ 1263.667948][T22004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.765345][T22004] CPU: 0 PID: 22004 Comm: syz.7.3867 Not tainted syzkaller #0 [ 1263.772858][T22004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1263.782931][T22004] Call Trace: [ 1263.786230][T22004] [ 1263.789180][T22004] dump_stack_lvl+0x18c/0x250 [ 1263.793859][T22004] ? show_regs_print_info+0x20/0x20 [ 1263.799051][T22004] ? load_image+0x420/0x420 [ 1263.804244][T22004] ? __might_fault+0xaa/0x120 [ 1263.808912][T22004] ? __lock_acquire+0x7d80/0x7d80 [ 1263.813930][T22004] should_fail_ex+0x394/0x4c0 [ 1263.818602][T22004] _copy_from_user+0x2f/0xe0 [ 1263.823202][T22004] __sys_bpf+0x23e/0x890 [ 1263.827453][T22004] ? bpf_link_show_fdinfo+0x390/0x390 [ 1263.832844][T22004] ? lock_chain_count+0x20/0x20 [ 1263.837714][T22004] __x64_sys_bpf+0x7c/0x90 [ 1263.842133][T22004] do_syscall_64+0x55/0xb0 [ 1263.846634][T22004] ? clear_bhb_loop+0x40/0x90 [ 1263.851300][T22004] ? clear_bhb_loop+0x40/0x90 [ 1263.855984][T22004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1263.861868][T22004] RIP: 0033:0x7fa12f19e159 [ 1263.866275][T22004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.885885][T22004] RSP: 002b:00007fa12ffdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1263.894304][T22004] RAX: ffffffffffffffda RBX: 00007fa12f425fa0 RCX: 00007fa12f19e159 [ 1263.902266][T22004] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1263.910236][T22004] RBP: 00007fa12ffdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.918230][T22004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.926188][T22004] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1263.934157][T22004] [ 1264.027128][T13923] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1264.327046][T13923] usb 2-1: Using ep0 maxpacket: 32 [ 1264.541377][T22008] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1264.561790][T13923] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1264.605419][T13923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 1264.660332][T13923] usb 2-1: SerialNumber: syz [ 1264.674686][T22000] loop5: detected capacity change from 0 to 32768 [ 1264.700063][T13923] usb 2-1: config 0 descriptor?? [ 1264.769003][T13923] as10x_usb: device has been detected [ 1264.778347][T22000] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1264.815614][T13923] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1264.914136][T22000] XFS (loop5): Ending clean mount [ 1264.942917][T13923] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1265.059899][T22000] XFS (loop5): User initiated shutdown received. [ 1265.099271][T22000] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 1265.121598][T13923] as10x_usb: error during firmware upload part1 [ 1265.185966][T13923] Registered device nBox DVB-T Dongle [ 1265.234468][T22000] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 1265.349571][T22028] FAULT_INJECTION: forcing a failure. [ 1265.349571][T22028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.441941][T22028] CPU: 0 PID: 22028 Comm: syz.7.3871 Not tainted syzkaller #0 [ 1265.449610][T22028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1265.459676][T22028] Call Trace: [ 1265.462970][T22028] [ 1265.465911][T22028] dump_stack_lvl+0x18c/0x250 [ 1265.470625][T22028] ? show_regs_print_info+0x20/0x20 [ 1265.475830][T22028] ? load_image+0x420/0x420 [ 1265.480331][T22028] ? __lock_acquire+0x7d80/0x7d80 [ 1265.485357][T22028] ? __virt_addr_valid+0x10c/0x380 [ 1265.490507][T22028] should_fail_ex+0x394/0x4c0 [ 1265.495206][T22028] _copy_from_user+0x2f/0xe0 [ 1265.499794][T22028] bpf_vlog_reverse_ubuf+0xbb/0x3a0 [ 1265.505022][T22028] bpf_vlog_finalize+0x174/0x3e0 [ 1265.510014][T22028] btf_new_fd+0x4ca/0x9e0 [ 1265.514364][T22028] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1265.519512][T22028] ? capable+0x88/0xe0 [ 1265.523594][T22028] __sys_bpf+0x670/0x890 [ 1265.527835][T22028] ? bpf_link_show_fdinfo+0x390/0x390 [ 1265.533203][T22028] ? lock_chain_count+0x20/0x20 [ 1265.538061][T22028] __x64_sys_bpf+0x7c/0x90 [ 1265.542474][T22028] do_syscall_64+0x55/0xb0 [ 1265.546883][T22028] ? clear_bhb_loop+0x40/0x90 [ 1265.551558][T22028] ? clear_bhb_loop+0x40/0x90 [ 1265.556228][T22028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1265.562128][T22028] RIP: 0033:0x7fa12f19e159 [ 1265.566535][T22028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.586138][T22028] RSP: 002b:00007fa12ffdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1265.594559][T22028] RAX: ffffffffffffffda RBX: 00007fa12f425fa0 RCX: 00007fa12f19e159 [ 1265.602552][T22028] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1265.610513][T22028] RBP: 00007fa12f23503b R08: 0000000000000000 R09: 0000000000000000 [ 1265.618477][T22028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.626438][T22028] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1265.634447][T22028] [ 1265.827244][ T8047] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1266.022609][ T8047] usb 6-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1266.095657][ T8047] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1266.169271][ T8047] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1266.242112][ T8047] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1266.289624][ T8047] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1266.360771][ T8047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.455424][ T8047] usb 6-1: can't set config #1, error -71 [ 1266.469082][T18897] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1267.237411][ T5816] usb 2-1: USB disconnect, device number 92 [ 1267.288852][ T8047] usb 6-1: USB disconnect, device number 18 [ 1267.376428][ T5816] Unregistered device nBox DVB-T Dongle [ 1267.407411][ T5816] as10x_usb: device has been disconnected [ 1267.922569][T22054] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1268.043028][T22058] loop5: detected capacity change from 0 to 128 [ 1268.894017][T22065] FAULT_INJECTION: forcing a failure. [ 1268.894017][T22065] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.000398][T22065] CPU: 0 PID: 22065 Comm: syz.7.3883 Not tainted syzkaller #0 [ 1269.007903][T22065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1269.017973][T22065] Call Trace: [ 1269.021245][T22065] [ 1269.024168][T22065] dump_stack_lvl+0x18c/0x250 [ 1269.028862][T22065] ? show_regs_print_info+0x20/0x20 [ 1269.034055][T22065] ? load_image+0x420/0x420 [ 1269.038567][T22065] ? __might_sleep+0xe0/0xe0 [ 1269.043173][T22065] ? __lock_acquire+0x7d80/0x7d80 [ 1269.048191][T22065] should_fail_ex+0x394/0x4c0 [ 1269.052881][T22065] should_failslab+0x9/0x20 [ 1269.057402][T22065] slab_pre_alloc_hook+0x59/0x300 [ 1269.062421][T22065] ? kvmalloc_node+0x70/0x180 [ 1269.067128][T22065] ? kvmalloc_node+0x70/0x180 [ 1269.071793][T22065] __kmem_cache_alloc_node+0x53/0x250 [ 1269.077159][T22065] ? kvmalloc_node+0x70/0x180 [ 1269.081828][T22065] __kmalloc_node+0xa6/0x240 [ 1269.086440][T22065] kvmalloc_node+0x70/0x180 [ 1269.090947][T22065] seq_read_iter+0x1e2/0xc50 [ 1269.095540][T22065] seq_read+0x175/0x220 [ 1269.099688][T22065] ? seq_open+0x140/0x140 [ 1269.104003][T22065] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1269.110149][T22065] ? common_file_perm+0x198/0x1f0 [ 1269.115171][T22065] ? fsnotify_perm+0x271/0x5e0 [ 1269.119935][T22065] do_iter_read+0x4fb/0xcb0 [ 1269.124497][T22065] ? seq_open+0x140/0x140 [ 1269.128844][T22065] ? vfs_iter_read+0xa0/0xa0 [ 1269.133461][T22065] ? __import_iovec+0x5f2/0x850 [ 1269.138320][T22065] ? import_iovec+0x73/0xa0 [ 1269.142839][T22065] do_readv+0x264/0x460 [ 1269.147034][T22065] ? generic_file_rw_checks+0x280/0x280 [ 1269.152606][T22065] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1269.158608][T22065] ? lock_chain_count+0x20/0x20 [ 1269.163492][T22065] ? lockdep_hardirqs_on+0x98/0x150 [ 1269.168707][T22065] do_syscall_64+0x55/0xb0 [ 1269.173116][T22065] ? clear_bhb_loop+0x40/0x90 [ 1269.177796][T22065] ? clear_bhb_loop+0x40/0x90 [ 1269.182725][T22065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1269.188637][T22065] RIP: 0033:0x7fa12f19e159 [ 1269.193059][T22065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.212659][T22065] RSP: 002b:00007fa12ffdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1269.221064][T22065] RAX: ffffffffffffffda RBX: 00007fa12f425fa0 RCX: 00007fa12f19e159 [ 1269.229040][T22065] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000004 [ 1269.237005][T22065] RBP: 00007fa12ffdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.244975][T22065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.252935][T22065] R13: 00007fa12f426038 R14: 00007fa12f425fa0 R15: 00007ffd8bcc04b8 [ 1269.260908][T22065] [ 1269.824906][T22077] FAULT_INJECTION: forcing a failure. [ 1269.824906][T22077] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.003997][T22077] CPU: 0 PID: 22077 Comm: syz.1.3886 Not tainted syzkaller #0 [ 1270.011507][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1270.021566][T22077] Call Trace: [ 1270.024838][T22077] [ 1270.027764][T22077] dump_stack_lvl+0x18c/0x250 [ 1270.032452][T22077] ? show_regs_print_info+0x20/0x20 [ 1270.037642][T22077] ? load_image+0x420/0x420 [ 1270.042138][T22077] ? __might_sleep+0xe0/0xe0 [ 1270.046724][T22077] ? __lock_acquire+0x7d80/0x7d80 [ 1270.051742][T22077] should_fail_ex+0x394/0x4c0 [ 1270.056413][T22077] should_failslab+0x9/0x20 [ 1270.061450][T22077] slab_pre_alloc_hook+0x59/0x300 [ 1270.066472][T22077] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1270.072189][T22077] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1270.077903][T22077] __kmem_cache_alloc_node+0x53/0x250 [ 1270.083275][T22077] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1270.088986][T22077] __kmalloc+0xa7/0x240 [ 1270.093235][T22077] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1270.098781][T22077] ? tomoyo_domain+0xd6/0x120 [ 1270.103455][T22077] tomoyo_path_number_perm+0x248/0x5e0 [ 1270.108927][T22077] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1270.114631][T22077] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1270.120119][T22077] ? ksys_write+0x1d2/0x260 [ 1270.124668][T22077] ? __fget_files+0x28/0x460 [ 1270.129580][T22077] security_file_ioctl+0x70/0xa0 [ 1270.134561][T22077] __se_sys_ioctl+0x48/0x170 [ 1270.139168][T22077] do_syscall_64+0x55/0xb0 [ 1270.143576][T22077] ? clear_bhb_loop+0x40/0x90 [ 1270.148271][T22077] ? clear_bhb_loop+0x40/0x90 [ 1270.152946][T22077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1270.158834][T22077] RIP: 0033:0x7f6bb919e159 [ 1270.163239][T22077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.182858][T22077] RSP: 002b:00007f6bba0c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1270.191265][T22077] RAX: ffffffffffffffda RBX: 00007f6bb9426180 RCX: 00007f6bb919e159 [ 1270.199239][T22077] RDX: 0000200000000200 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 1270.207238][T22077] RBP: 00007f6bba0c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.215278][T22077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1270.223247][T22077] R13: 00007f6bb9426218 R14: 00007f6bb9426180 R15: 00007ffce57bd618 [ 1270.231225][T22077] [ 1270.429116][T22069] loop5: detected capacity change from 0 to 40427 [ 1270.470289][T22069] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1270.493430][T22069] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1270.775136][T22069] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1271.037747][T22069] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1271.083036][T22069] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1271.336611][T22077] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1271.937058][ T8047] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1272.061026][T22110] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1272.169798][ T8047] usb 2-1: Using ep0 maxpacket: 8 [ 1272.201666][ T8047] usb 2-1: config 5 has an invalid interface number: 2 but max is 0 [ 1272.245142][ T8047] usb 2-1: config 5 has no interface number 0 [ 1272.295949][ T8047] usb 2-1: config 5 interface 2 has no altsetting 0 [ 1272.349355][ T8047] usb 2-1: New USB device found, idVendor=19d2, idProduct=1424, bcdDevice=66.e5 [ 1272.421008][ T8047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.482321][ T8047] usb 2-1: Product: syz [ 1272.529693][ T8047] usb 2-1: Manufacturer: syz [ 1272.565487][ T8047] usb 2-1: SerialNumber: syz [ 1272.581343][T22124] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3899'. [ 1272.641566][T22118] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3899'. [ 1272.750107][ T5816] libceph: connect (1)127.0.0.1:20000 error -101 [ 1272.787849][ T5816] libceph: mon0 (1)127.0.0.1:20000 connect error [ 1272.819654][ T5814] libceph: connect (1)127.0.0.1:20000 error -101 [ 1272.826231][ T5814] libceph: mon0 (1)127.0.0.1:20000 connect error [ 1272.847444][ T5816] libceph: connect (1)127.0.0.1:20000 error -101 [ 1272.902008][ T5816] libceph: mon0 (1)127.0.0.1:20000 connect error [ 1272.952530][ T8047] usb 2-1: USB disconnect, device number 93 [ 1273.197287][ T5816] libceph: connect (1)127.0.0.1:20000 error -101 [ 1273.203755][ T5816] libceph: mon0 (1)127.0.0.1:20000 connect error [ 1273.277318][ T5816] libceph: connect (1)127.0.0.1:20000 error -101 [ 1273.300527][ T5816] libceph: mon0 (1)127.0.0.1:20000 connect error [ 1273.326176][T22132] loop4: detected capacity change from 0 to 8 [ 1273.359165][T22132] Dev loop4: unable to read RDB block 8 [ 1273.382333][T22132] loop4: unable to read partition table [ 1273.410688][T22132] loop4: partition table beyond EOD, truncated [ 1273.433647][T22132] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 1273.710328][T22135] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1273.737894][ T8047] libceph: connect (1)127.0.0.1:20000 error -101 [ 1273.779048][ T8047] libceph: mon0 (1)127.0.0.1:20000 connect error [ 1273.852711][ T8047] libceph: connect (1)127.0.0.1:20000 error -101 [ 1273.890151][ T8047] libceph: mon0 (1)127.0.0.1:20000 connect error [ 1274.302416][T22148] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1275.106201][T22144] loop1: detected capacity change from 0 to 40427 [ 1275.117343][ T8047] libceph: connect (1)127.0.0.1:20000 error -101 [ 1275.140538][ T8047] libceph: mon0 (1)127.0.0.1:20000 connect error [ 1275.147469][ T5814] libceph: connect (1)127.0.0.1:20000 error -101 [ 1275.153938][ T5814] libceph: mon0 (1)127.0.0.1:20000 connect error [ 1275.182360][T22144] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1275.235354][T22117] ceph: No mds server is up or the cluster is laggy [ 1275.243930][T22144] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1275.285055][T22115] ceph: No mds server is up or the cluster is laggy [ 1275.318702][T22144] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1275.643737][T22144] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1275.725294][T22144] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1277.554552][T22177] loop5: detected capacity change from 0 to 40427 [ 1277.675200][T22177] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 1277.742797][T22177] F2FS-fs (loop5): invalid crc value [ 1277.826198][T22177] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1278.101209][T22177] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1278.231633][T22177] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3919'. [ 1279.010649][T22209] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3933'. [ 1281.355758][T22234] FAULT_INJECTION: forcing a failure. [ 1281.355758][T22234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.448363][T22234] CPU: 0 PID: 22234 Comm: syz.7.3939 Not tainted syzkaller #0 [ 1281.455883][T22234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1281.465935][T22234] Call Trace: [ 1281.469204][T22234] [ 1281.472124][T22234] dump_stack_lvl+0x18c/0x250 [ 1281.476797][T22234] ? show_regs_print_info+0x20/0x20 [ 1281.482005][T22234] ? load_image+0x420/0x420 [ 1281.486496][T22234] ? __lock_acquire+0x7d80/0x7d80 [ 1281.491524][T22234] ? snprintf+0xe9/0x140 [ 1281.495756][T22234] should_fail_ex+0x394/0x4c0 [ 1281.500444][T22234] _copy_to_user+0x2f/0xa0 [ 1281.504882][T22234] simple_read_from_buffer+0xe7/0x150 [ 1281.510331][T22234] proc_fail_nth_read+0x1e8/0x260 [ 1281.515370][T22234] ? proc_fault_inject_write+0x360/0x360 [ 1281.521022][T22234] ? fsnotify_perm+0x271/0x5e0 [ 1281.525795][T22234] ? proc_fault_inject_write+0x360/0x360 [ 1281.531427][T22234] vfs_read+0x298/0x990 [ 1281.535580][T22234] ? kernel_read+0x1e0/0x1e0 [ 1281.540164][T22234] ? __fget_files+0x28/0x460 [ 1281.544748][T22234] ? __fget_files+0x3fc/0x460 [ 1281.549438][T22234] ? __fdget_pos+0x2a3/0x330 [ 1281.554110][T22234] ? ksys_read+0x74/0x260 [ 1281.558461][T22234] ksys_read+0x151/0x260 [ 1281.562708][T22234] ? vfs_write+0x9a0/0x9a0 [ 1281.567119][T22234] ? lockdep_hardirqs_on+0x98/0x150 [ 1281.572313][T22234] do_syscall_64+0x55/0xb0 [ 1281.576727][T22234] ? clear_bhb_loop+0x40/0x90 [ 1281.581397][T22234] ? clear_bhb_loop+0x40/0x90 [ 1281.586087][T22234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.591989][T22234] RIP: 0033:0x7fa12f15e98e [ 1281.596400][T22234] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1281.616015][T22234] RSP: 002b:00007fa12ffb9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1281.624435][T22234] RAX: ffffffffffffffda RBX: 00007fa12ffba6c0 RCX: 00007fa12f15e98e [ 1281.632405][T22234] RDX: 000000000000000f RSI: 00007fa12ffba0a0 RDI: 0000000000000005 [ 1281.640370][T22234] RBP: 00007fa12ffba090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.648334][T22234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.656340][T22234] R13: 00007fa12f426128 R14: 00007fa12f426090 R15: 00007ffd8bcc04b8 [ 1281.664339][T22234] [ 1281.818326][T22236] fuse: Bad value for 'group_id' [ 1282.397963][T22250] FAULT_INJECTION: forcing a failure. [ 1282.397963][T22250] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1283.235393][T22250] CPU: 0 PID: 22250 Comm: syz.1.3946 Not tainted syzkaller #0 [ 1283.242896][T22250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1283.252961][T22250] Call Trace: [ 1283.256248][T22250] [ 1283.259170][T22250] dump_stack_lvl+0x18c/0x250 [ 1283.263870][T22250] ? show_regs_print_info+0x20/0x20 [ 1283.269060][T22250] ? load_image+0x420/0x420 [ 1283.273575][T22250] ? stack_trace_save+0xaa/0x100 [ 1283.278505][T22250] ? stack_trace_snprint+0xf0/0xf0 [ 1283.283627][T22250] should_fail_ex+0x394/0x4c0 [ 1283.288299][T22250] get_futex_key+0x136/0x1030 [ 1283.292975][T22250] ? kasan_set_track+0x4e/0x70 [ 1283.297730][T22250] ? kasan_save_free_info+0x28/0x40 [ 1283.302916][T22250] ? ____kasan_slab_free+0x126/0x1f0 [ 1283.308209][T22250] ? kmem_cache_free+0xf8/0x290 [ 1283.313055][T22250] ? do_syscall_64+0x55/0xb0 [ 1283.317638][T22250] ? futex_setup_timer+0xc0/0xc0 [ 1283.322588][T22250] futex_wake+0x127/0x4f0 [ 1283.326912][T22250] ? futex_wake_mark+0x150/0x150 [ 1283.331839][T22250] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1283.337812][T22250] ? lock_chain_count+0x20/0x20 [ 1283.342656][T22250] do_futex+0x35d/0x3e0 [ 1283.346805][T22250] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1283.352717][T22250] ? slab_free_freelist_hook+0x130/0x1a0 [ 1283.358347][T22250] __se_sys_futex+0x3a9/0x440 [ 1283.363039][T22250] ? __x64_sys_futex+0xf0/0xf0 [ 1283.367842][T22250] ? __x64_sys_futex+0x21/0xf0 [ 1283.372628][T22250] do_syscall_64+0x55/0xb0 [ 1283.377055][T22250] ? clear_bhb_loop+0x40/0x90 [ 1283.381736][T22250] ? clear_bhb_loop+0x40/0x90 [ 1283.386411][T22250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1283.392319][T22250] RIP: 0033:0x7f6bb919e159 [ 1283.396728][T22250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.416334][T22250] RSP: 002b:00007f6bba10a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1283.424748][T22250] RAX: ffffffffffffffda RBX: 00007f6bb9425fa8 RCX: 00007f6bb919e159 [ 1283.432726][T22250] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6bb9425fac [ 1283.440698][T22250] RBP: 00007f6bb9425fa0 R08: 0000000000745a5b R09: 0000000000000000 [ 1283.448685][T22250] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1283.456713][T22250] R13: 00007f6bb9426038 R14: 00007ffce57bd530 R15: 00007ffce57bd618 [ 1283.464696][T22250] [ 1284.189513][T22263] fuse: Bad value for 'group_id' [ 1285.256360][T22290] loop5: detected capacity change from 0 to 256 [ 1285.331400][T22290] exFAT-fs (loop5): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1285.429008][T22290] exFAT-fs (loop5): failed to load alloc-bitmap [ 1285.484650][T22290] exFAT-fs (loop5): failed to recognize exfat type [ 1285.796709][T22294] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1286.216871][T22303] loop1: detected capacity change from 0 to 512 [ 1286.310210][T22303] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1286.384835][T22303] EXT4-fs (loop1): invalid journal inode [ 1286.408606][T22307] loop7: detected capacity change from 0 to 8 [ 1286.440709][T22303] EXT4-fs (loop1): can't get journal size [ 1286.481849][T22308] netlink: 'syz.7.3965': attribute type 4 has an invalid length. [ 1286.527695][T22303] EXT4-fs (loop1): 1 truncate cleaned up [ 1286.578015][T22303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1286.725893][T22308] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3965'. [ 1286.878267][T22310] [ 1286.880632][T22310] ====================================================== [ 1286.887633][T22310] WARNING: possible circular locking dependency detected [ 1286.894725][T22310] syzkaller #0 Not tainted [ 1286.899137][T22310] ------------------------------------------------------ [ 1286.906163][T22310] syz.7.3965/22310 is trying to acquire lock: [ 1286.912210][T22310] ffffffff8ddf70b0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980 [ 1286.921936][T22310] [ 1286.921936][T22310] but task is already holding lock: [ 1286.929283][T22310] ffff88805ae3dfc0 (&sb->s_type->i_mutex_key#29){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 1286.938922][T22310] [ 1286.938922][T22310] which lock already depends on the new lock. [ 1286.938922][T22310] [ 1286.949305][T22310] [ 1286.949305][T22310] the existing dependency chain (in reverse order) is: [ 1286.958304][T22310] [ 1286.958304][T22310] -> #2 (&sb->s_type->i_mutex_key#29){++++}-{3:3}: [ 1286.966974][T22310] down_write+0x97/0x200 [ 1286.971742][T22310] configfs_depend_item_unlocked+0x157/0x430 [ 1286.978230][T22310] usbg_make_tpg+0x1f7/0x580 [ 1286.983475][T22310] target_fabric_make_tpg+0xa4/0x6d0 [ 1286.989315][T22310] configfs_mkdir+0x515/0x9e0 [ 1286.994502][T22310] vfs_mkdir+0x2a5/0x470 [ 1286.999251][T22310] do_mkdirat+0x1dc/0x450 [ 1287.004083][T22310] __x64_sys_mkdir+0x6e/0x80 [ 1287.009175][T22310] do_syscall_64+0x55/0xb0 [ 1287.014117][T22310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1287.020519][T22310] [ 1287.020519][T22310] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 1287.028140][T22310] __mutex_lock+0x135/0xc80 [ 1287.033152][T22310] tcm_set_name+0x2a/0x90 [ 1287.037989][T22310] function_make+0x199/0x350 [ 1287.043107][T22310] configfs_mkdir+0x515/0x9e0 [ 1287.048290][T22310] vfs_mkdir+0x2a5/0x470 [ 1287.053037][T22310] do_mkdirat+0x1dc/0x450 [ 1287.057869][T22310] __x64_sys_mkdir+0x6e/0x80 [ 1287.062963][T22310] do_syscall_64+0x55/0xb0 [ 1287.067885][T22310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1287.074305][T22310] [ 1287.074305][T22310] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1287.082537][T22310] __lock_acquire+0x37ef/0x7d80 [ 1287.087895][T22310] lock_acquire+0x19e/0x420 [ 1287.092913][T22310] __mutex_lock+0x135/0xc80 [ 1287.097924][T22310] configfs_rmdir+0x63c/0x980 [ 1287.103106][T22310] vfs_rmdir+0x352/0x4b0 [ 1287.107887][T22310] do_rmdir+0x29f/0x590 [ 1287.112578][T22310] __x64_sys_rmdir+0x49/0x50 [ 1287.117798][T22310] do_syscall_64+0x55/0xb0 [ 1287.122723][T22310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1287.129125][T22310] [ 1287.129125][T22310] other info that might help us debug this: [ 1287.129125][T22310] [ 1287.139337][T22310] Chain exists of: [ 1287.139337][T22310] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#29 [ 1287.139337][T22310] [ 1287.154108][T22310] Possible unsafe locking scenario: [ 1287.154108][T22310] [ 1287.161541][T22310] CPU0 CPU1 [ 1287.166886][T22310] ---- ---- [ 1287.172231][T22310] lock(&sb->s_type->i_mutex_key#29); [ 1287.177678][T22310] lock(&opts->dep_lock); [ 1287.184611][T22310] lock(&sb->s_type->i_mutex_key#29); [ 1287.192577][T22310] lock(gadget_subsys.su_mutex); [ 1287.197601][T22310] [ 1287.197601][T22310] *** DEADLOCK *** [ 1287.197601][T22310] [ 1287.205728][T22310] 3 locks held by syz.7.3965/22310: [ 1287.210905][T22310] #0: ffff8881422d0418 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1287.220121][T22310] #1: ffff88805d070160 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 1287.230905][T22310] #2: ffff88805ae3dfc0 (&sb->s_type->i_mutex_key#29){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 1287.240988][T22310] [ 1287.240988][T22310] stack backtrace: [ 1287.246855][T22310] CPU: 0 PID: 22310 Comm: syz.7.3965 Not tainted syzkaller #0 [ 1287.254300][T22310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1287.264345][T22310] Call Trace: [ 1287.267611][T22310] [ 1287.270528][T22310] dump_stack_lvl+0x18c/0x250 [ 1287.275197][T22310] ? load_image+0x420/0x420 [ 1287.279683][T22310] ? show_regs_print_info+0x20/0x20 [ 1287.284868][T22310] ? print_circular_bug+0x12b/0x1a0 [ 1287.290053][T22310] check_noncircular+0x2fc/0x400 [ 1287.295086][T22310] ? print_deadlock_bug+0x5d0/0x5d0 [ 1287.300274][T22310] ? lockdep_lock+0xf5/0x230 [ 1287.304868][T22310] ? _find_first_zero_bit+0xd6/0x100 [ 1287.310164][T22310] __lock_acquire+0x37ef/0x7d80 [ 1287.315029][T22310] ? verify_lock_unused+0x140/0x140 [ 1287.320218][T22310] ? verify_lock_unused+0x140/0x140 [ 1287.325412][T22310] lock_acquire+0x19e/0x420 [ 1287.329928][T22310] ? configfs_rmdir+0x63c/0x980 [ 1287.334769][T22310] ? __might_sleep+0xe0/0xe0 [ 1287.339349][T22310] ? read_lock_is_recursive+0x20/0x20 [ 1287.344711][T22310] __mutex_lock+0x135/0xc80 [ 1287.349205][T22310] ? configfs_rmdir+0x63c/0x980 [ 1287.354047][T22310] ? configfs_rmdir+0x63c/0x980 [ 1287.358901][T22310] ? mutex_lock_nested+0x20/0x20 [ 1287.363843][T22310] ? __lock_acquire+0x7d80/0x7d80 [ 1287.368867][T22310] ? lockref_put_or_lock+0x72/0xb0 [ 1287.373967][T22310] ? dput+0x3b/0x1e0 [ 1287.377937][T22310] ? dput+0x3b/0x1e0 [ 1287.381872][T22310] configfs_rmdir+0x63c/0x980 [ 1287.386545][T22310] vfs_rmdir+0x352/0x4b0 [ 1287.390798][T22310] do_rmdir+0x29f/0x590 [ 1287.395071][T22310] ? __check_object_size+0x4fc/0xa40 [ 1287.400343][T22310] ? d_delete_notify+0x150/0x150 [ 1287.405269][T22310] ? getname_flags+0x20a/0x500 [ 1287.410023][T22310] __x64_sys_rmdir+0x49/0x50 [ 1287.414598][T22310] do_syscall_64+0x55/0xb0 [ 1287.419001][T22310] ? clear_bhb_loop+0x40/0x90 [ 1287.423663][T22310] ? clear_bhb_loop+0x40/0x90 [ 1287.428350][T22310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1287.434229][T22310] RIP: 0033:0x7fa12f19e159 [ 1287.438682][T22310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.458306][T22310] RSP: 002b:00007fa12d3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1287.466722][T22310] RAX: ffffffffffffffda RBX: 00007fa12f426270 RCX: 00007fa12f19e159 [ 1287.474709][T22310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 1287.482689][T22310] RBP: 00007fa12f23503b R08: 0000000000000000 R09: 0000000000000000 [ 1287.490649][T22310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1287.498611][T22310] R13: 00007fa12f426308 R14: 00007fa12f426270 R15: 00007ffd8bcc04b8 [ 1287.506579][T22310] [ 1287.620492][T12463] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.