last executing test programs: 32m8.606144699s ago: executing program 32 (id=5): mount_setattr(0xffffffffffffffff, 0x0, 0x1200, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000980)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a80), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000b00)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdir(&(0x7f0000000bc0)='./file2\x00', 0x1ff) mount(&(0x7f0000000c00)=@filename='127.0.0.1:/\x00', &(0x7f0000000c40)='./file2\x00', &(0x7f0000000c80)='nfs\x00', 0x0, &(0x7f0000000cc0)='addr=127.0.0.1,vers=3,proto=udp\x00') keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000d00)='user\x00', &(0x7f0000000d40)={'syz', 0x1}, &(0x7f0000000d80)='R\x10rust\xe3c*sgrVix@De', 0x0) mount(0x0, &(0x7f0000000ec0)='./sys\x00', &(0x7f0000000f00)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180"], 0xe4}}, 0x0) semop(r3, &(0x7f0000001080)=[{0x3, 0x7f, 0x1800}, {0x3, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) 29m52.851856873s ago: executing program 33 (id=114): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) fcntl$setlease(r3, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20044034) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000), 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000006600)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x20040000}], 0x1, 0x10) 29m4.178482038s ago: executing program 1 (id=162): ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x6, 'bond0\x00', {0x6}, 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x8, 0x1, '{\xc0&\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x240080c0) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000340)={0x6, 0x1, 0x4, 0x0, 0x5d}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000380)=@multiplanar_fd={0x4, 0x1, 0x4, 0x0, 0x0, {}, {0x1, 0x2, 0x8, 0x5, 0x3, 0x4, "de159a49"}, 0xfd6, 0x4, {0x0}, 0x5}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003900)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004010}, 0x4008084) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 28m59.745850633s ago: executing program 1 (id=172): r0 = open(&(0x7f0000000100)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000140)=""/224, 0xe0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xbd) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000001140)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f000001a140)=0x7) unshare(0x8000000) semop(0x0, &(0x7f000001a180)=[{0x4, 0xffd, 0x1800}], 0x1) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x8020000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r7, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) 28m58.144387616s ago: executing program 1 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x2, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019380)=0x7) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000001c0)={0xb, {0x1, 0xa, 0x6, 0x5, 0x5, 0x7}}) dup3(r4, r4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000019400)={0x6, 0xa, &(0x7f00000194c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}]}, &(0x7f0000019540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019580)={r6, 0x0, 0xe, 0x0, &(0x7f0000019600)="030d099b688bbf0f5a5400000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 28m56.678689415s ago: executing program 3 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000206010844a75758fc562300000000000000000100fffe050072000600000005000500020000000900020073797a320000000e13000300686173683a6e65742c696661636500009bff04ac007ff42e01f3e13756f6e57a521cf9482fbf52500f7b5c4477077ab23c4299d0c487e28d8022450a7b98747cfacd2ead2c00d3014be82266d684f9f8d7af0f121a7f7f3b3ca79e10759bbc24708911d6a1181cedde3b90e7f17a9facb49a010ffc24ee6dd24e796d0986ffdf"], 0x44}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r3 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000480)={{0x200002, 0x0, 0x4, 0xfffffffe, 'syz0\x00', 0xf5}, 0x4, 0x400, 0x1, 0x0, 0x0, 0x77c3, 'syz1\x00', 0x0}) syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000180)={0xffffffffffffffff, 0x3}, &(0x7f00000001c0)) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r7, 0x24, &(0x7f0000000400)={0x0, 0x1}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 28m55.517529644s ago: executing program 3 (id=168): fanotify_init(0x0, 0x400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$video4linux(&(0x7f0000000200), 0x5, 0x155081) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000a95000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000c65000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x400000000a882, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) 28m51.873534671s ago: executing program 3 (id=170): socket$inet(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000d80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000dc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000e00), 0x0, 0x0) read$msr(r5, &(0x7f0000000e40)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000019e80)='./file0\x00', 0x1ff) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x802, 0x4) bind$inet(r0, &(0x7f0000000b00)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000b40)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000b80), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000bc0)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) 28m49.925482568s ago: executing program 3 (id=171): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_io_uring_setup(0x7764, &(0x7f0000000000)={0x0, 0xa71, 0x11000, 0x1, 0x10a}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) syz_open_dev$usbfs(&(0x7f00000006c0), 0x200, 0x8802) syz_open_dev$video4linux(&(0x7f0000000700), 0xfb6, 0x200) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000980)=@file={0x0, './file7/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) symlinkat(&(0x7f0000000a80)='.\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000b80)='./bus\x00', &(0x7f0000000bc0), 0xa14000, &(0x7f0000000c00)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000c40)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./file7/file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file7/file0\x00', 0x0, 0x2) getdents64(r4, 0xfffffffffffffffe, 0x29) 28m35.951983371s ago: executing program 1 (id=182): prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe3a) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x100000001, {0x0, 0x2, 0x1, 0x4, 0x6, 0xf0, {0x405, 0x10001, 0x1ffffffffffd, 0xd, 0x0, 0x4, 0x10000, 0x2, 0x6, 0x4000, 0xb7a, r6, r7, 0x7, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r8, r8) setreuid(r8, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) geteuid() sendmmsg$unix(r1, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 28m35.948218611s ago: executing program 3 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5c8000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000002800)=""/102392, 0x18ff8) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f000001b800)={0x1, 0xfff, "b5f56b", 0x8, 0x6}) sched_setaffinity(r2, 0x8, &(0x7f000001b840)=0x80000000000003) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000001b880)={0x1, &(0x7f000001b8c0)=[{0x6, 0x1, 0xfe, 0x7fff7ffc}]}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000001ba00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10001, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f000001ba40)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000001bac0)={0x11, 0x10, &(0x7f000001bb80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x803}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f000001bc00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x1004000, &(0x7f0000000200)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@lastblock}, {@longad}, {@utf8}, {@uid_forget}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@uid}, {@session={'session', 0x3d, 0x600000000000000}}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") 28m32.862983327s ago: executing program 1 (id=174): mkdir(&(0x7f0000000300)='./my_configfs\x00', 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000940)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x7, @any, 0x0, 0x2}, 0xe) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x4c8d1) sched_setaffinity(r3, 0x0, 0x0) connect$inet6(r0, &(0x7f0000019980)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) mknodat$loop(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file0\x00', 0x1000, 0x0) acct(0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x8400, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount(0x0, &(0x7f0000000340)='./my_configfs\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) rmdir(&(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0\x00') 28m32.862666323s ago: executing program 3 (id=175): socket$nl_route(0x10, 0x3, 0x0) keyctl$clear(0x7, 0xfffffffffffffffc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xffffffffbffffc04, 0x0, 0x1, r2, 0x11}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000700)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000019700)=0x7) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019740), 0x2982, 0x0) nanosleep(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x27800000000, 0x0, 0x1, r2, 0x1}) 28m31.114114886s ago: executing program 1 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r0, 0xc, &(0x7f0000000180)={0x5}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x1000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000300), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r3, 0x1) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) nanosleep(&(0x7f00000002c0)={0x77359400}, 0x0) 28m16.33896977s ago: executing program 34 (id=175): socket$nl_route(0x10, 0x3, 0x0) keyctl$clear(0x7, 0xfffffffffffffffc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xffffffffbffffc04, 0x0, 0x1, r2, 0x11}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000700)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000019700)=0x7) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019740), 0x2982, 0x0) nanosleep(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x27800000000, 0x0, 0x1, r2, 0x1}) 28m14.375289127s ago: executing program 35 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r0, 0xc, &(0x7f0000000180)={0x5}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x1000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000300), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r3, 0x1) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) nanosleep(&(0x7f00000002c0)={0x77359400}, 0x0) 25m24.656406483s ago: executing program 6 (id=328): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5c8000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000002800)=""/102392, 0x18ff8) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f000001b800)={0x1, 0xfff, "b5f56b", 0x8, 0x6}) sched_setaffinity(r3, 0x8, &(0x7f000001b840)=0x80000000000003) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000001b880)={0x1, &(0x7f000001b8c0)=[{0x6, 0x1, 0xfe, 0x7fff7ffc}]}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000001ba00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10001, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f000001ba40)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000001bac0)={0x11, 0x10, &(0x7f000001bb80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x803}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f000001bc00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x1004000, &(0x7f0000000200)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@lastblock}, {@longad}, {@utf8}, {@uid_forget}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@uid}, {@session={'session', 0x3d, 0x600000000000000}}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") 25m21.161818158s ago: executing program 6 (id=331): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) times(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x181842) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$P9_RVERSION(r5, 0x0, 0x13) ioctl$int_in(r4, 0x5452, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000400)) write$evdev(r4, &(0x7f0000000440), 0x0) mincore(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/163) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x1042, 0x0, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) dup3(r0, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 25m19.804782445s ago: executing program 6 (id=332): socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socket$inet6(0x2d, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x800, 0xfffffffe) 25m18.304871628s ago: executing program 6 (id=333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r2], 0x1, 0x3a2, &(0x7f00000004c0)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000880)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) mount$9p_fd(0x0, &(0x7f0000000c40)='.\x00', &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="7472616e713d66642c7266646e6f3d7f76ab21732acb4929f2ddcef0cc0b4c69af4603dbadae35ed953b2b88f2f7045be5e63b41"]) connect$inet(r3, &(0x7f00000008c0)={0x2, 0x4e20, @empty}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x4207, r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) bind$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioprio_get$pid(0x3, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc000) sendmsg$nl_route(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000406000008001b"], 0x30}}, 0x0) ftruncate(r6, 0x2000009) sendfile(r3, r6, 0x0, 0x7ffff004) 25m15.065080598s ago: executing program 6 (id=335): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x0, 0x0}, 0x10) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = creat(&(0x7f0000000a40)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000ac0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000b00)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000b40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000b80), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102400, 0x19000) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f000001e580)=0x40003) sched_getparam(0x0, &(0x7f0000000bc0)) r6 = fsopen(&(0x7f0000000c00)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000c40)='source', &(0x7f0000000c80)='//\xf2/\x06\b\xa30\\\xea\\\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) 25m10.474774542s ago: executing program 36 (id=337): socket$pppoe(0x18, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) 12m40.053691509s ago: executing program 5 (id=1046): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x3631, &(0x7f0000000040)={0x0, 0x30b8, 0x1, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) sendto$inet6(r5, &(0x7f0000000140)='J', 0x1, 0x4800, 0x0, 0x0) shutdown(r5, 0x1) syz_io_uring_setup(0x34b8, &(0x7f0000000300)={0x0, 0x6399, 0x0, 0x3, 0x11}, &(0x7f00000003c0)=0x0, 0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r7, 0x0, r8, &(0x7f0000000500)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r9, &(0x7f0000000680)="7465e954e02673106482474693edb5fe7c68616e646c0c33ba8c48e97837d2c72030", 0x22) syz_io_uring_submit(r7, r2, r3, &(0x7f0000000580)=@IORING_OP_RECV_ZC={0x3a, 0x43, 0x4, r5, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}}) 12m37.691379694s ago: executing program 5 (id=1036): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() socket$inet6(0x2d, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000193c0)=0x7) socket(0x2, 0x805, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000019400)={0x0, 0x0, &(0x7f0000019440)={&(0x7f0000019480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000019540)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x101042, 0x15) sendfile(r5, r5, 0x0, 0x2) socket$inet6(0xa, 0x800, 0xfffffffe) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000100)={'8255\x00', [0x4f23, 0x5, 0x2, 0x0, 0x1, 0x4cc7, 0xfff, 0x46, 0x5, 0x3ff, 0x80, 0x600, 0x1, 0x2, 0x9, 0xe1c9, 0x7, 0x4, 0x3, 0x395, 0x80000089, 0x83, 0xa, 0xffbffff3, 0x3, 0x4, 0xfffffffc, 0xffffffec, 0x4, 0x3, 0xdffffffa]}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0xc600, 0x0) 12m34.829023621s ago: executing program 5 (id=1040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x19a, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) statx(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x800, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [{0x2, 0x5, r3}, {0x2, 0x6}], {0x4, 0x3}, [{}, {0x8, 0x1, 0xee01}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x1, r5}, {0x8, 0x1}, {0x8, 0x4, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x6}}, 0x64, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x80082, 0x0) r6 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r6, @ANYRESHEX, @ANYRES16], 0x1, 0xc5f, &(0x7f0000000780)="$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") syz_mount_image$vfat(&(0x7f0000001400), &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001540)) mkdir(&(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000001700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000001840)='./file0\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x103a42, 0x70) mlockall(0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000004c0)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f0000000500)={0x100, 0x9, 0x0, 0x1}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) 12m33.026192247s ago: executing program 5 (id=1047): sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x900, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000400)={0x4f, 0x29, 0x2, {0x0, [{{0x80, 0xfffffffc, 0x7}, 0x7ff, 0x80, 0x21, './debug/ieee80211/phy0/aql_enable'}]}}, 0x44) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x141081, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000a000900ffffffffffff000008000300", @ANYRES32=r5, @ANYBLOB="fac9c494536dbbd554da49672ab2508c39eaa7f3455df2ebc6b507fa1bb7f15d3923a7df5ccec3752b3e038c981fe42400fe073547ce7cff3977674d1a5a83d6eeaa7b9ca714a5fd4932f27cb5217467857f786e0c4589ee6b41e6cefddd246812c11284dd774b4ac80363d77b1f2834666b4c8762c9a32001ba0d5644"], 0x28}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe0, '\x00', r5, @fallback=0x38}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000300)={0x0, 0x0, {0xfffffffe, 0x63, 0x300e, 0x0, 0x0, 0x0, 0x0, 0x5}}) r6 = memfd_create(0x0, 0xd) ftruncate(r6, 0x2000000) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={r1, 0x1f, 0x1000, 0x1000000}) 12m30.127599581s ago: executing program 5 (id=1052): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f00000008c0)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x3, 0x4}, 0x90) sched_setaffinity(r3, 0x47, &(0x7f00000198c0)=0x7) io_setup(0x5, &(0x7f0000019900)) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000019940)='.\x00', 0xa50003d1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000019980)={0x0, 0x0, &(0x7f00000199c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000019a00)={0x0, 0x0, &(0x7f0000019a40)={&(0x7f0000019a80)={0x28, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) mkdir(&(0x7f0000019ac0)='./bus\x00', 0x2c) gettid() listen(r0, 0x5) mount(&(0x7f0000000780), &(0x7f00000007c0)='./mnt\x00', &(0x7f0000000800)='ecryptfs\x00', 0x0, &(0x7f0000000840)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 12m28.36996776s ago: executing program 5 (id=1054): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000300), 0x1, 0x470, &(0x7f0000000dc0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x8}, {0x8, 0x4, 0xb, 0xbdc}]}) r0 = getpid() creat(&(0x7f0000000140)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x7ffffffd}}, {@nombcache}, {@nogrpid}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40c4) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000200)=0x182c, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @remote, 0x6}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000340), 0x2, 0xc0000) ioctl$EVIOCSREP(r7, 0x40084503, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xb8, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 12m15.523581624s ago: executing program 8 (id=1068): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="8a726b91788c48fbb1809af1759dd5d05b61c659395471a505f23b84c3b45f405133b9b7beb1a87ee2a200370e7ebd5f4250b5143ff619debb4ee2f122168af539066a7c0a8f5932d3db1311cf4205949dc954e78f9fc3f61cb7ac97758dd4fc36c1f3bce0dfa0d59fb5b70e0ff5e72a0209b49bed24d9bdccc2e3f5b1c258b7d9f611db31015f3e73abd84301c9c83a0b7836dd5732018874c200a2eb1ee88070f3b8774799d0fa80fe3ebe813aa5b521ff129c1a5aef31750219aab604005fa8b7c841669e91ec401c9b1b2b1925a1dcd15d30cd0af32d5ec0b12a5fb4a4a300"/237, 0xed, 0x0, &(0x7f00000006c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='@\x00\x00\x00'], 0x20, 0xb4b2fe578d40c34a}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000900)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000940), 0x0, 0x0) read$msr(r4, &(0x7f0000000ec0)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000019ec0)=0x632a, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000019f00)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f0000019f40), 0x0, 0x20004004) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000019f80)='.\x00', &(0x7f0000019fc0)={{0x0, 0x3fffffff}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f000001a000)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f000001a040)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r6, &(0x7f000001a0c0)={&(0x7f000001a100)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f000001a180)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000001a1c0)={0x4, 0xe, &(0x7f000001a280)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f000001a780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000001a7c0)={0x2}, 0x8, 0x10, &(0x7f000001a800), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001a840)={r8, 0x702, 0xff9f, 0x0, &(0x7f000001a8c0)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m11.147980976s ago: executing program 37 (id=1054): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000300), 0x1, 0x470, &(0x7f0000000dc0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x8}, {0x8, 0x4, 0xb, 0xbdc}]}) r0 = getpid() creat(&(0x7f0000000140)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x7ffffffd}}, {@nombcache}, {@nogrpid}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40c4) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000200)=0x182c, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @remote, 0x6}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000340), 0x2, 0xc0000) ioctl$EVIOCSREP(r7, 0x40084503, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xb8, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 12m10.927550368s ago: executing program 8 (id=1074): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'xfrm0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x5, r5, &(0x7f0000000200), 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800080000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x10]}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x1c, &(0x7f0000002d40), &(0x7f0000000180)=0xc) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r8, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r8, 0x0, 0x8, &(0x7f0000000000)=0x44010, 0x4) recvmmsg(r8, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, 0x0) 12m5.2078242s ago: executing program 8 (id=1082): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'vlan1\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "fa93657eaad90d1186150f1aaf90e9e777e60c68a8f91ed02ed673752a396232", "6b5d298f14bfba01bc3a86d4fb17dc27eedd214e86e4551bf42c8e953e961063", "09d4438cbea6a9de424fb072a1718d55a55a7f4ff9774f6a9df140de5696a43c", "7d30e2e75fcecc625b7a689ac16d4d93e430719ced9a4932e39a3b186c7950bf", "96682027904db40e701f1bd359c9c79fcc184bf5e12ac16a01a9e1db2e90d323", "9f30b367ede13aec5e5a0017", 0x0, 0x7f, 0x9, 0x8, 0x9}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x191, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x403, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000b, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0xc, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x1, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="6400000010000106000000000000000000", 0x11}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="000001020200", 0x6, 0xfffffffffffffffb) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000380)={0x1, 0x0, [{0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r5 = syz_open_dev$usbfs(&(0x7f0000000540), 0x77, 0x1013c1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r5, 0x80045503, &(0x7f0000000580)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000007) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 12m2.278547064s ago: executing program 8 (id=1087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x138, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x61}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xed21}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb212}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x82}, 0x400c000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000008c0)={0x1, &(0x7f0000000900)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_cancel(0x0, 0x0, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000500)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000004c0)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000880)={0x5003, 0x0, 0x9, 0x3}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RRENAME(r8, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) bind$inet6(r2, &(0x7f0000000e40)={0xa, 0x4e22, 0x0, @rand_addr, 0x1}, 0x1c) listen(r2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0502fcfffffffedbdf251200000008000700010000001800018014000200626f6e645f736c6176655f31000000000800080005000000080006000600000008000900ff0f0000"], 0x4c}, 0x1, 0x0, 0x0, 0x13fea3995e811172}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r10, 0x0, 0xe40, 0xe40, &(0x7f0000000b00)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000b40)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5646, 0x151, 0x10000101}, 0x20) readv(r3, &(0x7f0000003100)=[{&(0x7f0000000b80)=""/32, 0x20}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/164, 0xa4}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/122, 0x7a}], 0x5) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x178, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x217}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaaf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "d8aaa5f3650ea39163e9e4f95907ec7ca97ed1f09c165b773c93e562a7d07a4f5963152c567f17a503e72776cadc182d8b4e0ffe4ca4be4bad536dfae4399ba4074b371baecdff8f88386dcca268cba1b4585727a709d4abdd005839e992ae3bb8050214c395ef4054bf8d57f3db"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x178}, 0x1, 0x0, 0x0, 0xf6c000ff0047f1e6}, 0x80045) sendmsg$nl_generic(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) syz_emit_ethernet(0x4a, &(0x7f0000000e80)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a841c0058060120010000000000000000000000000002fe80000000000095fbbf656e6ecc1a792e8f11a88dcddc0000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000090780800080a00000002000098ca030b60302068f8920700000303d7030302080a00000004000000ad13128098cf093cc9cd7b8ec814f9bcfdfea9050a00000001fffffffb000000"], 0x0) 11m58.449204075s ago: executing program 8 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, 0x0, 0x917}, 0x14}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000200)={0x0, 0x30000, 0x2, 0x0, 0x20, 0x2, 0x10, 0x12710, 0x20, 0x2, 0x20, 0x1, 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept$alg(r7, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000003580)=[{0x0}, {&(0x7f0000000440)=""/211, 0xd3}], 0x2}, 0x1}], 0x1, 0x8eb6847df58861c6, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r8, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 11m56.790701556s ago: executing program 8 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x19a, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x6}], {0x4, 0x3}, [{}, {0x8, 0x1, 0xee01}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x1, r4}, {0x8, 0x1}, {0x8, 0x4, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x6}}, 0x64, 0x2) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='decodes i'], 0xf) r6 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r6, @ANYRESHEX, @ANYRES16], 0x1, 0xc5f, &(0x7f0000000780)="$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") syz_mount_image$vfat(&(0x7f0000001400), &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001540)) mkdir(&(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000001700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000001840)='./file0\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x103a42, 0x70) mlockall(0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000004c0)=@nbd={'/dev/nbd', 0x0}, r3, &(0x7f0000000500)={0x100, 0x9, 0x0, 0x1}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) 11m41.562072951s ago: executing program 38 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x19a, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x6}], {0x4, 0x3}, [{}, {0x8, 0x1, 0xee01}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x1, r4}, {0x8, 0x1}, {0x8, 0x4, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x6}}, 0x64, 0x2) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='decodes i'], 0xf) r6 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r6, @ANYRESHEX, @ANYRES16], 0x1, 0xc5f, &(0x7f0000000780)="$eJzs3UFsHNd9B+D/G+2KSxmtmDhRndQuNm2RyorlypJiKlbhrGqabQBZFkIxtwBciZS6NUUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDowmCHpnWBZKLD0WAAj0RLWwERQ9sESAng8XMvqVWNGnToihR0vfZ0m939r2Z9+atZ2hBb14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG/+/K5E8+l+90KAOBeujD21RMn3f8B4JFyyf//AwAAAAAAAAAAAADAfpeiiMcjxdyFtTRRve9qnO/Ub9wcHxndutpgqmoeqMqXvxrPnTx1+ovPD5/p5fnOzIfUv9s+G6+OXTrXfGn2+tz81MLC1GRzfKZzZXZyasd72G39zY5VJ6B5/bUbk1evLjRPPnvqto9vDr038NiRobPDTx9/qld2fGR0dOxWkUZ/+dodN6RruxkeB6OI45Hime/9LLUjoojdn4vGvR37zQarThyrOjE+Mlp1ZLrTnlksP7zYOxFFRLOvUqt3jrYei6jV72kftteKWCqbXzb4WNm9sbn2fPvy9FTzYnt+sbPYmZ25mLqtLfvTjCLOpIjliFgd+ODu6lFELVJ85/BauhwRB3rn4QvVxODt21HsYR93oGxnsx6xXDwAY7aPDUQRr0SKn799NK7k60x1rfl8xCtl/jDizTJfjEjlF+N0xLtbfI94MNWiiL8ox//sWpqsrge968r5rzW/MnN1tq9s77ryMe8PH7hS3Kf7w+CmvDf2+bWpEUW0qyv+WrrzH3YAAAAAAAAAAAAAAAAAuNsGo4jPRIqX/+2PqnnFUc1LP3x2+PeGfql/zvgTH7GfsuyzEbFU7GxO7sE8MfBiupjSfZ5L/ChrRBF/nOf/fet+NwYAAAAAAAAAAAAAAAAAAOCRVsRPI8UL7xxNy9G/pnhn5lrzUvvydHdV2N7av70109fX19ebqZutnBM5l3Iu51zJudrNat5/Vb/I9XNO5FzKuZxzJedqzjiQ6+ds5ZzIuZRzOedKztWcUcv1c7ZyTuRcyrmccyXnas7YJ2v3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TIoo4v1I8e1vrKVIEdGKmIhurgzc79YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWBVMT3I0Xz91sb22oRkap/u46Wv52O1sEyPxmt4TJfjNa5nO0qa61v3Yf2szv1VMRPIsVA462NAc/jX+++2/gaxJvfvPXus7VuHuh9OPTewGNHDp8dHv21J7Z7nbZqwLHznZkbN5vjI6OjY32ba/non+zbNpSPW9ydrhMRC6+/8Vp7enpq/s5flF+BbT5aX1//0/Iouz3EPnmRatv29JF8UQ7tPmjGHnawtqPC9X3Q1D0ZXB525f3/3Ujx2+/8R++GX93/axslNu7w8Ys/uXX/f2HzjnZ4/69trpfv/+U9fav7/+N9217IP43UaxGNxetz9SMRjYXX3zjeud6+NnVtaub0iRNfGh7+0qkT9YMRjaud6am+V7s/VwAAAAAAAAAAAAAAAAD3VCriy5Gi/ZO11IyIm9V8raGzw08ff+pAHKjmW902b/vVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu30cI1qutf4yOiedOYjDe5x+wcbL83OvT7fufYHi1t+fqhx7vLC4nz7ytYfx2AUEa3+LceqBo+PjFaNnu60Z6qqF7ecTP/x1VMR/xkprpxups/lbXn+/+YZ/rfN/1/avKM9mv//ib5t5TFTKuIXkeK3/vKJ+FzVzkPxgXOWy/1tpDh25slcLg6W5Xpt6D5XoDszsCz7v5HiH99/cqm/bG8+5OO3yj634xP7gCjH/3Ck+P6ffzd+PW+7/fkPW4//oc072qPx/1TftkO3Pa9g110nj//xSPHi42/Fb+RtH/b8j96zN47mwhvP59ij8f9037ahfNzfvDtdBwAAAAAAAAAAeKDVUxF/Fyl+NFpLz+dtO/n7f5Obd7RHf//rV/q2Td6d9Yo+8sWuTyoAAAAA7BP1VMRPI8W1xbc25lDfPv+7b/7n79ya/zmSNn1a/TnfL1fPDbibf/7Xbygfd2L33QYAAAAAAAAAAAAAAAAAAIB9JaUins/rqU9U8/knt11PfSVSvPzfz+Ry6UhZrrcO/FD1e+PC7Mzxc9PTs1fai+3L01PNsbn2lamy7qcixdrfPJnrFtX66r315rtrvDdqEVGtxT4fKUb/vle2uxZ7b23y7nrg3bXYy7KfiBT/9Q+3l+2tY/3pW2VPlmX/OlJ8/Z+2LnvkVtlTZdnvRooff73ZK3uoLNt7Pmr3maSNP4yIZ6/MFnswKgAAAAAAAAAAAAAAAAAAADxq6qmIP4sU/3N9eWMuf17/v973tvLmN/vW+9/kZrXO/1C1/v92r+9k/f/quQJL2x0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTimKeCNSzF1YSysD5fuuxvnOzI2b4yOjW1cbTFXNA1X58lfjuZOnTn/x+eEzvfzw+nfbZ+LVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu14D9vXb9xRi45VJ6B5/bUbk1evLjRPPnvqto9vDr038NiRobPDTx9/qld2fGR0dKyvTK1+R0feUtpm+8Eo4q8ixTPf+1n60UBEER96LnbkI747e22w6sSxqhPjI6NVR6Y77ZnF8sOLvRNRRDT7KrV65+gejMWutCIGyuaXDT5Wdm9srj3fvjw91bzYnl/sLHZmZy6mbmvL/jSjiDMpYjkiVgc+uLt6FPFapPjO4bX0zwMRB3rn4QsXxr564uT27Sj2sI87ULazWY9YLh6AMdvHBqKIH0SKn799NP5lIKIW3V/x+YhXyvxhxJvRHe9UfjFOR7y7xfeIB1Mtivi/cvzPrqW3B8rrQe+6cv5rza/MXJ3tK9u7ruyr+8MP/v3j1hi8G4fd5Mvb/pCwz69NjSjix9UVfy39q/+uAQAAAAAAAAAAAAAAAPaRIn41UrzwztFUzQ/emFPcmbnWvNS+PN2d1teb+9ebM72+vr7eTN1s5ZzIuZRzOedKztWcUeT6OVtlNtbXJ/L7pZzLOVdyruaMA7l+zlbOiZxLOZdzruRczRm1XD9nK+dEzqWcyzlXcq7mjH0ydw8AAAAAAAAAAAAAAAAAAHi4FNU/Kb79jbW0PtBdX3oiurliPdCH3v8HAAD//z/B9Iw=") syz_mount_image$vfat(&(0x7f0000001400), &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001540)) mkdir(&(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000001700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000001840)='./file0\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x103a42, 0x70) mlockall(0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000004c0)=@nbd={'/dev/nbd', 0x0}, r3, &(0x7f0000000500)={0x100, 0x9, 0x0, 0x1}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) 10.345746779s ago: executing program 4 (id=3610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x31, 0x0, 0x0) mremap(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.755319183s ago: executing program 2 (id=3624): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='270', 0x3) syz_open_dev$usbfs(&(0x7f0000000240), 0x74, 0x160341) unshare(0x40000000) 5.840032229s ago: executing program 2 (id=3631): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x2005, 0x3, 'none\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000003c0)={{0x84, @private=0xa010101, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x0, 0x27}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x9}}, 0x44) 5.153113957s ago: executing program 7 (id=3638): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x4000000, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 4.238468332s ago: executing program 7 (id=3642): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='270', 0x3) syz_open_dev$usbfs(&(0x7f0000000240), 0x74, 0x160341) unshare(0x40000000) 4.043232224s ago: executing program 2 (id=3643): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000003, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 3.82986181s ago: executing program 0 (id=3647): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40082) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bridge0/bridge/multicast_startup_query_count\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) 3.52486824s ago: executing program 0 (id=3650): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r0, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r1, 0x0) 3.513937808s ago: executing program 2 (id=3651): r0 = gettid() process_vm_readv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018005dde000000000c0000000c00000004000000020000000000000f0400000000005f00"], 0x0, 0x28}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000540)={0x0, @bt={0x2, 0x7, 0x0, 0x1, 0x1, 0x10000, 0x4, 0x3, 0x4, 0x8000, 0xcd, 0x1, 0xa111, 0x3d, 0x1, 0x4, {0x1, 0xa}, 0x1, 0xd6}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000001c0)={{0x3, @addr=0xe576}, 0x8, 0xb, 0x3}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cdf3dec83502"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) 3.436290562s ago: executing program 7 (id=3652): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x4ab, &(0x7f0000001400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x8, '\x00', @a}) 3.361466823s ago: executing program 4 (id=3654): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/165, 0xa5}, {&(0x7f00000003c0)=""/144, 0x90}, {&(0x7f0000000480)=""/97, 0x61}, {&(0x7f0000000500)=""/7, 0x7}], 0x5, &(0x7f00000005c0)=""/239, 0xef}, 0x10}, {{&(0x7f00000006c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/45, 0x2d}, 0x100}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e80)=""/150, 0x96}], 0x1, &(0x7f0000001f80)=""/174, 0xae}, 0x1}, {{0x0, 0x0, &(0x7f0000003200)=[{0x0}], 0x1, &(0x7f0000003240)=""/110, 0x6e}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000005180)=@hci, 0x80, &(0x7f0000005780)=[{&(0x7f0000005200)=""/205, 0xcd}, {&(0x7f0000005300)=""/110, 0x6e}, {&(0x7f0000005380)=""/123, 0x7b}, {&(0x7f0000005400)=""/221, 0xdd}, {&(0x7f0000005500)=""/135, 0x87}, {&(0x7f00000055c0)=""/66, 0x42}, {&(0x7f0000005640)=""/85, 0x55}, {&(0x7f00000056c0)=""/140, 0x8c}], 0x8, &(0x7f0000005800)=""/135, 0x87}, 0x8001}], 0x6, 0x12001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x34, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 3.229737406s ago: executing program 4 (id=3656): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xbd}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x32cbe4cd, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0x101, 0x6, 0xe1d9, 0x3}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) read(r0, &(0x7f0000000000)=""/147, 0x93) 3.177058196s ago: executing program 0 (id=3657): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x2005, 0x3, 'none\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000003c0)={{0x84, @private=0xa010101, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x0, 0x27}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x9}}, 0x44) 2.480480342s ago: executing program 2 (id=3659): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x325, 0x0, 0x0, 0x0, 0xffe8, 0x0, 0x6, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.348968607s ago: executing program 2 (id=3660): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000180)={0x20, 0xd, 0x2, "f702"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.333718044s ago: executing program 4 (id=3661): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000002c0)='./file0\x00') mount(0x0, &(0x7f00000001c0)='./cifs\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000000080)=""/177, 0xb1) 2.332384419s ago: executing program 9 (id=3662): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x13c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) chmod(&(0x7f0000000040)='./file0\x00', 0x4) 2.148452435s ago: executing program 4 (id=3663): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000003, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 2.029475768s ago: executing program 7 (id=3664): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x3, 0x2003, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 1.704460112s ago: executing program 4 (id=3665): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f0000000600)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@datasum}, {@discard_sync}, {@treelog}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@commit={'commit', 0x3d, 0xa913}}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001000)={{0xffffffff}, '/dev/nullb0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1.43326061s ago: executing program 7 (id=3666): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000140)=@un=@abs, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/1}, {&(0x7f0000000240)=""/102}, {&(0x7f0000000d00)=""/4096}, {&(0x7f0000001d00)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r0, &(0x7f0000001d80), 0xffc1) rt_sigqueueinfo(0x0, 0x36, &(0x7f0000000b80)={0x1f, 0xc4, 0xff7ffffe}) 1.357066795s ago: executing program 0 (id=3667): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000000300)="278c961fdf1b2c07dd557415bc3d176919464a10dcee717ff488", 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 1.350474401s ago: executing program 9 (id=3668): r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000240)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x6, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x60ed) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000580)=0x2) 1.137266458s ago: executing program 0 (id=3669): r0 = gettid() process_vm_readv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018005dde000000000c0000000c00000004000000020000000000000f0400000000005f00"], 0x0, 0x28}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000540)={0x0, @bt={0x2, 0x7, 0x0, 0x1, 0x1, 0x10000, 0x4, 0x3, 0x4, 0x8000, 0xcd, 0x1, 0xa111, 0x3d, 0x1, 0x4, {0x1, 0xa}, 0x1, 0xd6}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000001c0)={{0x3, @addr=0xe576}, 0x8, 0xb, 0x3}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cdf3dec83502"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) 1.132193643s ago: executing program 9 (id=3670): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x160, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, {0x10, @stats_create={'@stats_create ', '-', 0x20, '/1', ' 0 syz aux'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) 1.043492831s ago: executing program 9 (id=3671): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a10c10, &(0x7f0000001e80)=ANY=[], 0xfc, 0x2c1, &(0x7f0000000740)="$eJzs3U9rK1UUAPAz+ddUFwniRhEc0IWr8urWTaM8QexKiaBuDL4+kKQ86IOAT7Cvq34Cl+LXcOvOtd9AcCu4axeVkcnMNIlNmmjbPCi/36a3995z53TOkK5y5qs3DoePniRxcvZ7tNtJ1PZiL86T6EYtKs+jEQDA/XGeZfFXFhHN4vdk7chG7e6yAgDuUvH/v/CicwEANuPTz7/4uLe///CTNG3Ha53TcT+JiMPTcb9Y7z2Ob2IUB/EgOnERkV0qxh9+tP8wGmmuG28fHo/747nze3/G9iR+NzrRXRy/mxbK+H5E/rMZL0UavcfN6qhOvLo4/t0F8dFvxTtvzeS/E5347et4EqN4FHnsNP773TT9IPvh7Lsv88vk8Ukt+luTfaXtiKy+saIAAAAAAAAAAAAAAAAAAAAAAHDv7aRpUrTvmfTvyafK/jv1i8n6TlrpzvfnKeIv+wUX/YGyKFv0HGfxY9Vf50Gaplm5cRrfiNcbXiwAAAAAAAAAAAAAAAAAAAAAuaffPhsORqODoxsP6sPBqOoGUH2t//8euDcz82Y8Gw7qyw/cWv9as90G8lyv3RyNRqw6MLqxcs/KQfyyneezZM9PZb7//eStaXE/K8OrwtxCuaeDV96/zDAtl6qbPBwkq67Vrgr38+xSK9ZOI0nmZia1HR0cZZNH4iKbr1d7yc1s3cLdyJ/R1ssLl/7Osmy9c977o6hROZNMWmysl0azHCx9WtpXa/Hr8gOXfmTUb/qZAwAAAAAAAAAAAAAAAAAALDb/xel/Obk2tHZnSQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhk3f/18N2hExP3NlcFwGX7enHLTi6OnVqz7f9J8JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfdPAAAA///Vw0V2") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) 821.504989ms ago: executing program 9 (id=3672): sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000019e40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000019ec0)='./config\x00', &(0x7f0000019f00)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000019fc0)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 799.867962ms ago: executing program 7 (id=3673): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)="99", 0x1}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)="9c", 0x1}], 0x1}}], 0x2, 0x48000) pread64(r0, &(0x7f0000000540)=""/203, 0xcb, 0x9) 155.955682ms ago: executing program 9 (id=3674): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f00000005c0)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000680)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 0s ago: executing program 0 (id=3675): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0) kernel console output (not intermixed with test programs): 875165][T19129] ? ksys_write+0x242/0x270 [ 1825.875185][T19129] ? __pfx___se_sys_futex+0x10/0x10 [ 1825.875201][T19129] ? __pfx_ksys_write+0x10/0x10 [ 1825.875226][T19129] __x64_sys_syslog+0x7c/0x90 [ 1825.875278][T19129] do_syscall_64+0x166/0x520 [ 1825.875306][T19129] ? trace_irq_disable+0x3b/0x140 [ 1825.875334][T19129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.875357][T19129] ? clear_bhb_loop+0x70/0xc0 [ 1825.875387][T19129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.875403][T19129] RIP: 0033:0x7f00edb9f559 [ 1825.875418][T19129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1825.875431][T19129] RSP: 002b:00007f00eead1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1825.875448][T19129] RAX: ffffffffffffffda RBX: 00007f00ede25fa0 RCX: 00007f00edb9f559 [ 1825.875459][T19129] RDX: 0000000000000013 RSI: 0000200000000180 RDI: 0000000000000002 [ 1825.875470][T19129] RBP: 00007f00edc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1825.875479][T19129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1825.875488][T19129] R13: 00007f00ede26038 R14: 00007f00ede25fa0 R15: 00007ffe326bd9a8 [ 1825.875512][T19129] [ 1826.210358][T19135] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2600'. [ 1827.496592][T19151] IPVS: Scheduler module ip_vs_sip not found [ 1827.540015][T19159] netlink: 'syz.7.2619': attribute type 12 has an invalid length. [ 1827.540043][T19159] netlink: 'syz.7.2619': attribute type 29 has an invalid length. [ 1827.540060][T19159] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2619'. [ 1828.188056][T19170] loop4: detected capacity change from 0 to 2048 [ 1828.354533][T19170] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1829.949594][T19180] macvtap1: entered allmulticast mode [ 1829.949623][T19180] bond0: entered allmulticast mode [ 1829.949638][T19180] bond_slave_0: entered allmulticast mode [ 1829.949672][T19180] bond_slave_1: entered allmulticast mode [ 1829.954383][T19180] bond_slave_0: entered promiscuous mode [ 1829.954504][T19180] bond_slave_1: entered promiscuous mode [ 1829.976682][T19180] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1829.987865][T19180] bridge0: port 3(macvtap1) entered blocking state [ 1829.996871][T19180] bridge0: port 3(macvtap1) entered disabled state [ 1830.032588][T19180] bond0: left allmulticast mode [ 1830.032616][T19180] bond_slave_0: left allmulticast mode [ 1830.032634][T19180] bond_slave_1: left allmulticast mode [ 1830.196824][T13562] bond_slave_0: left promiscuous mode [ 1830.196857][T13562] bond_slave_1: left promiscuous mode [ 1830.296255][T19178] loop2: detected capacity change from 0 to 32768 [ 1830.361349][T19178] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2625 (19178) [ 1830.476441][T19178] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1830.476478][T19178] BTRFS info (device loop2): using blake2b checksum algorithm [ 1830.858302][T19178] BTRFS info (device loop2): enabling ssd optimizations [ 1830.858333][T19178] BTRFS info (device loop2): turning on async discard [ 1830.858352][T19178] BTRFS info (device loop2): enabling free space tree [ 1830.858372][T19178] BTRFS info (device loop2): use zstd compression, level 3 [ 1831.549789][T14811] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1833.882552][T19234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1834.936334][T19248] FAULT_INJECTION: forcing a failure. [ 1834.936334][T19248] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.936373][T19248] CPU: 0 UID: 0 PID: 19248 Comm: syz.2.2645 Tainted: G L syzkaller #0 PREEMPT(full) [ 1834.936405][T19248] Tainted: [L]=SOFTLOCKUP [ 1834.936414][T19248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1834.936427][T19248] Call Trace: [ 1834.936436][T19248] [ 1834.936446][T19248] dump_stack_lvl+0xe8/0x150 [ 1834.936487][T19248] should_fail_ex+0x3eb/0x540 [ 1834.936528][T19248] should_failslab+0xa8/0x100 [ 1834.936563][T19248] __kmalloc_cache_noprof+0x9e/0x600 [ 1834.936592][T19248] ? proc_self_get_link+0xe5/0x180 [ 1834.936740][T19248] ? proc_self_get_link+0xe5/0x180 [ 1834.936774][T19248] ? __task_pid_nr_ns+0x399/0x470 [ 1834.936804][T19248] proc_self_get_link+0xe5/0x180 [ 1834.936837][T19248] ? __pfx_proc_self_get_link+0x10/0x10 [ 1834.936872][T19248] pick_link+0x77d/0xfd0 [ 1834.936911][T19248] step_into_slowpath+0x58a/0x820 [ 1834.936942][T19248] ? __pfx_step_into_slowpath+0x10/0x10 [ 1834.936972][T19248] ? inode_permission+0x2b8/0x600 [ 1834.937002][T19248] link_path_walk+0xd50/0x1910 [ 1834.937056][T19248] path_openat+0x1b7/0x20f0 [ 1834.937141][T19248] do_file_open+0x23e/0x4a0 [ 1834.937181][T19248] ? __pfx_do_file_open+0x10/0x10 [ 1834.937238][T19248] ? _raw_spin_unlock+0x28/0x50 [ 1834.937263][T19248] ? alloc_fd+0x6af/0x760 [ 1834.937307][T19248] do_sys_openat2+0x115/0x200 [ 1834.937332][T19248] ? __se_sys_futex+0x3a8/0x450 [ 1834.937356][T19248] ? __pfx_do_sys_openat2+0x10/0x10 [ 1834.937388][T19248] ? rcu_is_watching+0x16/0xb0 [ 1834.937428][T19248] __x64_sys_openat+0x138/0x170 [ 1834.937460][T19248] do_syscall_64+0x166/0x520 [ 1834.937488][T19248] ? trace_irq_disable+0x3b/0x140 [ 1834.937519][T19248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.937543][T19248] ? clear_bhb_loop+0x70/0xc0 [ 1834.937572][T19248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.937596][T19248] RIP: 0033:0x7f00edb5fd8e [ 1834.937617][T19248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1834.937637][T19248] RSP: 002b:00007f00eead0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1834.937662][T19248] RAX: ffffffffffffffda RBX: 00007f00eead16c0 RCX: 00007f00edb5fd8e [ 1834.937680][T19248] RDX: 0000000000000002 RSI: 00007f00eead0f90 RDI: ffffffffffffff9c [ 1834.937697][T19248] RBP: 00007f00edc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1834.937712][T19248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1834.937727][T19248] R13: 00007f00ede26038 R14: 00007f00ede25fa0 R15: 00007ffe326bd9a8 [ 1834.937764][T19248] [ 1836.116290][T19258] loop4: detected capacity change from 0 to 512 [ 1836.182044][T19261] ip_tables: iptables: counters copy to user failed while replacing table [ 1836.184895][T19258] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.2647: corrupted in-inode xattr: e_value size too large [ 1836.185062][T19258] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1836.185447][T19258] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2647: couldn't read orphan inode 15 (err -117) [ 1836.185482][T19258] loop4: lost filesystem error report for type 5 error -117 [ 1836.195185][T19258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1836.433950][T15084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1836.542363][T19270] loop2: detected capacity change from 0 to 2048 [ 1836.644226][T19270] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1839.396200][T19309] loop7: detected capacity change from 0 to 2048 [ 1839.444264][T19309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1839.444386][T19309] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1839.523359][T13411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.164054][T19330] loop2: detected capacity change from 0 to 256 [ 1840.390154][T19336] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1840.976740][T19342] loop2: detected capacity change from 0 to 40427 [ 1841.020236][T19342] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1841.020267][T19342] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1841.331671][T19342] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1841.442034][T19342] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1841.442069][T19342] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1842.126604][T19367] tipc: Enabled bearer , priority 0 [ 1842.642827][T19371] loop7: detected capacity change from 0 to 16 [ 1842.662769][T19371] erofs (device loop7): mounted with root inode @ nid 36. [ 1843.224360][T19379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2695'. [ 1843.224472][T19379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1843.275663][T19379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1843.334752][ T5746] tipc: Node number set to 4278190081 [ 1843.691263][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2700'. [ 1843.694081][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2700'. [ 1843.805862][ T5746] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1843.950552][ T5746] usb 5-1: Using ep0 maxpacket: 8 [ 1843.951329][ T5746] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1843.952965][ T5746] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1843.953016][ T5746] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1843.953038][ T5746] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1843.953062][ T5746] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1843.953086][ T5746] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1843.953128][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.258438][T15187] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1844.408354][T15187] usb 3-1: Using ep0 maxpacket: 16 [ 1844.409447][T15187] usb 3-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 1844.413829][T15187] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1844.413857][T15187] usb 3-1: config 0 has no interface number 0 [ 1844.413900][T15187] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1844.413937][T15187] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1844.413961][T15187] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1844.413990][T15187] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1844.414026][T15187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.421617][T15187] usb 3-1: config 0 descriptor?? [ 1844.463726][T15187] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 1844.607236][T19421] FAULT_INJECTION: forcing a failure. [ 1844.607236][T19421] name failslab, interval 1, probability 0, space 0, times 0 [ 1844.607275][T19421] CPU: 1 UID: 0 PID: 19421 Comm: syz.7.2712 Tainted: G L syzkaller #0 PREEMPT(full) [ 1844.607308][T19421] Tainted: [L]=SOFTLOCKUP [ 1844.607318][T19421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1844.607332][T19421] Call Trace: [ 1844.607343][T19421] [ 1844.607356][T19421] dump_stack_lvl+0xe8/0x150 [ 1844.607401][T19421] should_fail_ex+0x3eb/0x540 [ 1844.607444][T19421] should_failslab+0xa8/0x100 [ 1844.607482][T19421] __kmalloc_cache_noprof+0x9e/0x600 [ 1844.607510][T19421] ? alloc_vfsmnt+0x23/0x510 [ 1844.607635][T19421] ? alloc_vfsmnt+0x6d/0x510 [ 1844.607668][T19421] ? alloc_vfsmnt+0x6d/0x510 [ 1844.607711][T19421] alloc_vfsmnt+0x6d/0x510 [ 1844.607749][T19421] clone_mnt+0x4c/0xad0 [ 1844.607777][T19421] copy_tree+0xde/0x9a0 [ 1844.607801][T19421] ? get_user_ns+0xff/0x1f0 [ 1844.607834][T19421] ? __do_loopback+0x218/0x4b0 [ 1844.607874][T19421] open_detached_copy+0x235/0x550 [ 1844.607916][T19421] ? do_getname+0x151/0x250 [ 1844.607945][T19421] vfs_open_tree+0x40d/0x480 [ 1844.607985][T19421] ? __pfx_vfs_open_tree+0x10/0x10 [ 1844.608033][T19421] __x64_sys_open_tree+0x93/0x110 [ 1844.608059][T19421] do_syscall_64+0x166/0x520 [ 1844.608086][T19421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.608111][T19421] ? clear_bhb_loop+0x70/0xc0 [ 1844.608140][T19421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.608163][T19421] RIP: 0033:0x7f815f19f559 [ 1844.608187][T19421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1844.608208][T19421] RSP: 002b:00007f8160142028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 1844.608234][T19421] RAX: ffffffffffffffda RBX: 00007f815f425fa0 RCX: 00007f815f19f559 [ 1844.608252][T19421] RDX: 0000000000089901 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1844.608269][T19421] RBP: 00007f815f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1844.608284][T19421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1844.608298][T19421] R13: 00007f815f426038 R14: 00007f815f425fa0 R15: 00007ffca17ec0d8 [ 1844.608336][T19421] [ 1844.901697][T19422] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 1844.935727][ T2009] usb 5-1: USB disconnect, device number 18 [ 1845.058725][T19427] loop7: detected capacity change from 0 to 2048 [ 1845.115290][T19430] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1845.145741][T15187] elan 0003:04F3:074D.000C: failed to start in urb: -90 [ 1845.312543][T19434] FAULT_INJECTION: forcing a failure. [ 1845.312543][T19434] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.312583][T19434] CPU: 0 UID: 0 PID: 19434 Comm: syz.7.2716 Tainted: G L syzkaller #0 PREEMPT(full) [ 1845.312615][T19434] Tainted: [L]=SOFTLOCKUP [ 1845.312624][T19434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1845.312639][T19434] Call Trace: [ 1845.312649][T19434] [ 1845.312659][T19434] dump_stack_lvl+0xe8/0x150 [ 1845.312701][T19434] should_fail_ex+0x3eb/0x540 [ 1845.312742][T19434] should_failslab+0xa8/0x100 [ 1845.312780][T19434] __kmalloc_cache_noprof+0x9e/0x600 [ 1845.312810][T19434] ? __se_sys_timerfd_create+0x106/0x300 [ 1845.312954][T19434] ? __se_sys_timerfd_create+0x106/0x300 [ 1845.312990][T19434] __se_sys_timerfd_create+0x106/0x300 [ 1845.313022][T19434] do_syscall_64+0x166/0x520 [ 1845.313052][T19434] ? trace_irq_disable+0x3b/0x140 [ 1845.313084][T19434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.313109][T19434] ? clear_bhb_loop+0x70/0xc0 [ 1845.313139][T19434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.313161][T19434] RIP: 0033:0x7f815f19f559 [ 1845.313183][T19434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1845.313203][T19434] RSP: 002b:00007f8160142028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 1845.313228][T19434] RAX: ffffffffffffffda RBX: 00007f815f425fa0 RCX: 00007f815f19f559 [ 1845.313246][T19434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1845.313261][T19434] RBP: 00007f815f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1845.313276][T19434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1845.313291][T19434] R13: 00007f815f426038 R14: 00007f815f425fa0 R15: 00007ffca17ec0d8 [ 1845.313329][T19434] [ 1845.632748][T19435] process '/newroot/603/file0' started with executable stack [ 1845.705527][T15187] elan 0003:04F3:074D.000C: Set report error for parm 7: -71 [ 1845.717553][T15187] elan 0003:04F3:074D.000C: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 1845.717591][T15187] elan 0003:04F3:074D.000C: Input device is not registered [ 1845.741180][T15187] elan 0003:04F3:074D.000C: probe with driver elan failed with error -119 [ 1845.785158][T15187] usb 3-1: USB disconnect, device number 21 [ 1845.828199][ T5746] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1845.859201][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2720'. [ 1845.894861][T19444] fido_id[19444]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1845.990258][ T5746] usb 8-1: not running at top speed; connect to a high speed hub [ 1845.990306][ T5746] usb 8-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 1846.015071][ T5746] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.015101][ T5746] usb 8-1: Product: syz [ 1846.015118][ T5746] usb 8-1: Manufacturer: syz [ 1846.015134][ T5746] usb 8-1: SerialNumber: syz [ 1846.054104][ T5746] keyspan 8-1:1.0: Keyspan 4 port adapter converter detected [ 1846.076056][ T5746] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1846.094655][ T5746] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1846.111761][ T5746] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1846.131557][ T5746] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1846.296489][ C0] usb 8-1: malformed indat packet [ 1846.296772][ C0] usb 8-1: malformed indat packet [ 1846.297020][ C0] usb 8-1: malformed indat packet [ 1846.297272][ C0] usb 8-1: malformed indat packet [ 1846.297521][ C0] usb 8-1: malformed indat packet [ 1846.297767][ C0] usb 8-1: malformed indat packet [ 1846.298016][ C0] usb 8-1: malformed indat packet [ 1846.303749][ C0] usb 8-1: malformed indat packet [ 1846.433844][T19458] loop4: detected capacity change from 0 to 128 [ 1846.523111][T19458] FAT-fs (loop4): Directory bread(block 1048) failed [ 1846.523152][T19458] FAT-fs (loop4): Directory bread(block 1049) failed [ 1846.523179][T19458] FAT-fs (loop4): Directory bread(block 1050) failed [ 1846.523206][T19458] FAT-fs (loop4): Directory bread(block 1051) failed [ 1846.523232][T19458] FAT-fs (loop4): Directory bread(block 1052) failed [ 1846.523258][T19458] FAT-fs (loop4): Directory bread(block 1053) failed [ 1846.523290][T19458] FAT-fs (loop4): Directory bread(block 1054) failed [ 1846.523315][T19458] FAT-fs (loop4): Directory bread(block 1055) failed [ 1846.554098][T15187] usb 8-1: USB disconnect, device number 17 [ 1846.596410][T19458] FAT-fs (loop4): Directory bread(block 1048) failed [ 1846.596451][T19458] FAT-fs (loop4): Directory bread(block 1049) failed [ 1846.690785][T15187] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1846.735810][T15187] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1846.774554][T15187] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1846.819406][T15187] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1846.837848][T15187] keyspan 8-1:1.0: device disconnected [ 1846.997982][T19463] loop2: detected capacity change from 0 to 2048 [ 1847.043521][T19463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1848.000490][T19475] loop2: detected capacity change from 0 to 1024 [ 1848.017950][T19475] EXT4-fs: Ignoring removed bh option [ 1848.082198][T19475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1848.446038][T14811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1848.842546][T19493] netlink: 'syz.0.2739': attribute type 1 has an invalid length. [ 1848.950042][T19497] loop7: detected capacity change from 0 to 2048 [ 1849.041813][T19500] loop4: detected capacity change from 0 to 2048 [ 1849.086175][T19500] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1849.675396][T19497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1850.376400][T19511] loop4: detected capacity change from 0 to 16 [ 1850.394283][T19511] erofs (device loop4): mounted with root inode @ nid 36. [ 1850.463821][ T32] audit: type=1800 audit(2000001150.112:6084): pid=19511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2747" name="file1" dev="loop4" ino=86 res=0 errno=-22 [ 1850.732215][T19517] kvm: apic: phys broadcast and lowest prio [ 1851.137688][T19525] tun0: tun_chr_ioctl cmd 1074025675 [ 1851.137716][T19525] tun0: persist enabled [ 1851.152089][T19525] tun0: tun_chr_ioctl cmd 1074812117 [ 1852.338468][T15187] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1852.508629][T15187] usb 8-1: Using ep0 maxpacket: 8 [ 1852.509371][T15187] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1852.510545][T15187] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1852.510598][T15187] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1852.510624][T15187] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1852.510652][T15187] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1852.510678][T15187] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1852.510722][T15187] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.736609][T19540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2756'. [ 1852.888644][T15187] usb 8-1: usb_control_msg returned -32 [ 1852.888701][T15187] usbtmc 8-1:16.0: can't read capabilities [ 1853.193884][T19551] loop2: detected capacity change from 0 to 2048 [ 1853.508696][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.508787][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.712115][T19551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1853.952089][T15218] usb 8-1: USB disconnect, device number 18 [ 1854.058201][ T32] audit: type=1800 audit(2000001153.692:6085): pid=19551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2759" name="file1" dev="loop2" ino=15 res=0 errno=-22 [ 1854.450572][T14811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1854.952053][T19579] loop4: detected capacity change from 0 to 512 [ 1854.998568][T19579] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.2772: bg 0: block 5: invalid block bitmap [ 1855.044188][T19579] loop4: lost filesystem error report for type 5 error -117 [ 1855.057292][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1855.057319][ C0] EXT4-fs (loop4): initial error at time 2000001154: ext4_validate_block_bitmap:436 [ 1855.057349][ C0] EXT4-fs (loop4): last error at time 2000001154: ext4_validate_block_bitmap:436 [ 1855.058584][T19579] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 1855.058608][T19579] loop4: lost filesystem error report for type 5 error -117 [ 1855.073388][T19579] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #11: comm syz.4.2772: invalid indirect mapped block 3 (level 2) [ 1855.073432][T19579] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1855.103805][T19579] EXT4-fs (loop4): 1 orphan inode deleted [ 1855.103837][T19579] EXT4-fs (loop4): 1 truncate cleaned up [ 1855.184721][T19579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1855.435685][T19579] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 1855.708638][T15218] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1855.839378][T15084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1855.917060][T15218] usb 8-1: New USB device found: idVendor=0b48, idProduct=1006, bcdDevice=1.00 [ 1855.928365][T15218] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1855.928422][T15218] usb 8-1: config 1 interface 0 has no altsetting 1 [ 1855.936750][T15218] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.936780][T15218] usb 8-1: Product: syz [ 1855.936797][T15218] usb 8-1: Manufacturer: syz [ 1855.936813][T15218] usb 8-1: SerialNumber: syz [ 1856.229698][T15218] dvbdev: DVB: registering new adapter (DEC3000-s) [ 1856.261904][T15218] usb 8-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 1857.205999][T15218] ttusb_dec_send_command: result bulk message failed: error -71 [ 1857.231485][T15218] usb 8-1: USB disconnect, device number 19 [ 1858.522808][T19621] lo: Caught tx_queue_len zero misconfig [ 1859.720528][T13562] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1859.875963][T13562] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1859.877550][T13562] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1859.877603][T13562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.929366][T19645] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2795'. [ 1860.094025][T13562] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 1860.094295][T13562] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 1860.094369][T13562] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 1860.104565][T13562] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 1860.104822][T13562] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 1860.163200][T13562] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1860.176292][T13562] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 1860.176387][T13562] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 1860.187937][T13562] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1860.650873][T13562] usb 5-1: USB disconnect, device number 19 [ 1860.677918][T13562] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1860.700501][T13562] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1860.716022][T13562] keyspan 5-1:1.0: device disconnected [ 1860.983975][T19656] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1862.135194][T19667] loop7: detected capacity change from 0 to 2048 [ 1862.215469][T19667] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1863.128383][T13562] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1863.280394][T13562] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1863.281742][T13562] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1863.281772][T13562] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.281795][T13562] usb 5-1: config 0 has no interface number 0 [ 1863.281825][T13562] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1863.289215][T13562] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1863.289295][T13562] usb 5-1: Product: syz [ 1863.289337][T13562] usb 5-1: Manufacturer: syz [ 1863.289379][T13562] usb 5-1: SerialNumber: syz [ 1863.313859][T13562] usb 5-1: config 0 descriptor?? [ 1863.612028][T13562] usb 5-1: USB disconnect, device number 20 [ 1865.974970][T19716] batadv_slave_1: entered promiscuous mode [ 1865.976163][T19715] batadv_slave_1: left promiscuous mode [ 1868.422123][T19755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1869.839960][T19756] loop7: detected capacity change from 0 to 32768 [ 1869.932171][T19756] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2834 (19756) [ 1869.993672][T19756] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1869.993762][T19756] BTRFS info (device loop7): using blake2b checksum algorithm [ 1870.155522][T19756] BTRFS info (device loop7): enabling ssd optimizations [ 1870.155554][T19756] BTRFS info (device loop7): turning on async discard [ 1870.155572][T19756] BTRFS info (device loop7): enabling free space tree [ 1870.155591][T19756] BTRFS info (device loop7): use zlib compression, level 3 [ 1870.219362][ T32] audit: type=1800 audit(2000001169.862:6086): pid=19756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2834" name="file1" dev="loop7" ino=260 res=0 errno=-22 [ 1870.354033][ T5743] kernel read not supported for file /kmsg (pid: 5743 comm: kworker/0:4) [ 1870.491451][T19795] loop2: detected capacity change from 0 to 1024 [ 1870.568905][T19795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1870.691042][T19795] EXT4-fs (loop2): shut down requested (1) [ 1871.124983][T14811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1871.172190][T13411] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1872.953173][T19810] loop2: detected capacity change from 0 to 32768 [ 1873.030950][T19830] overlayfs: failed to clone lowerpath [ 1873.154092][T19810] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1873.210975][T19810] JBD2: Ignoring recovery information on journal [ 1873.433039][T19810] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1873.923452][T14811] ocfs2: Unmounting device (7,2) on (node local) [ 1874.727079][T19849] loop7: detected capacity change from 0 to 164 [ 1875.369239][ T5743] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1875.524193][ T5743] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1875.541309][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.556731][ T5743] usb 5-1: config 0 descriptor?? [ 1875.934691][ T5743] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1876.286623][ T5743] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 1876.286651][ T5743] [drm] Initialized udl on minor 1 [ 1876.392677][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'. [ 1876.393573][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'. [ 1876.393898][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'. [ 1876.522226][T19874] FAULT_INJECTION: forcing a failure. [ 1876.522226][T19874] name failslab, interval 1, probability 0, space 0, times 0 [ 1876.522263][T19874] CPU: 1 UID: 0 PID: 19874 Comm: syz.7.2869 Tainted: G L syzkaller #0 PREEMPT(full) [ 1876.522295][T19874] Tainted: [L]=SOFTLOCKUP [ 1876.522304][T19874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1876.522318][T19874] Call Trace: [ 1876.522328][T19874] [ 1876.522338][T19874] dump_stack_lvl+0xe8/0x150 [ 1876.522381][T19874] should_fail_ex+0x3eb/0x540 [ 1876.522423][T19874] should_failslab+0xa8/0x100 [ 1876.522457][T19874] ? do_getname+0x2e/0x250 [ 1876.522482][T19874] kmem_cache_alloc_noprof+0x9c/0x600 [ 1876.522510][T19874] ? do_getname+0x2e/0x250 [ 1876.522542][T19874] do_getname+0x2e/0x250 [ 1876.522563][T19874] ? __se_sys_rmdir+0x12/0x140 [ 1876.522588][T19874] __se_sys_rmdir+0x1e/0x140 [ 1876.522614][T19874] do_syscall_64+0x166/0x520 [ 1876.522644][T19874] ? trace_irq_disable+0x3b/0x140 [ 1876.522677][T19874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.522701][T19874] ? clear_bhb_loop+0x70/0xc0 [ 1876.522730][T19874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.522754][T19874] RIP: 0033:0x7f815f19f559 [ 1876.522775][T19874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1876.522796][T19874] RSP: 002b:00007f8160142028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1876.522821][T19874] RAX: ffffffffffffffda RBX: 00007f815f425fa0 RCX: 00007f815f19f559 [ 1876.522838][T19874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1876.522851][T19874] RBP: 00007f815f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1876.522866][T19874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1876.522880][T19874] R13: 00007f815f426038 R14: 00007f815f425fa0 R15: 00007ffca17ec0d8 [ 1876.522918][T19874] [ 1876.766445][T19876] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1876.766519][T19876] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1876.769212][T15218] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1877.177449][T19882] loop7: detected capacity change from 0 to 2048 [ 1877.216017][T15218] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1877.281112][T19882] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1877.340231][T15218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.574416][T15218] usb 3-1: config 0 descriptor?? [ 1877.957610][T15218] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1878.120282][T19887] FAULT_INJECTION: forcing a failure. [ 1878.120282][T19887] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.120320][T19887] CPU: 1 UID: 0 PID: 19887 Comm: syz.7.2874 Tainted: G L syzkaller #0 PREEMPT(full) [ 1878.120355][T19887] Tainted: [L]=SOFTLOCKUP [ 1878.120364][T19887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1878.120379][T19887] Call Trace: [ 1878.120397][T19887] [ 1878.120407][T19887] dump_stack_lvl+0xe8/0x150 [ 1878.120450][T19887] should_fail_ex+0x3eb/0x540 [ 1878.120491][T19887] should_failslab+0xa8/0x100 [ 1878.120526][T19887] ? key_alloc+0x340/0xd20 [ 1878.120629][T19887] kmem_cache_alloc_noprof+0x9c/0x600 [ 1878.120661][T19887] ? key_alloc+0x340/0xd20 [ 1878.120697][T19887] key_alloc+0x340/0xd20 [ 1878.120739][T19887] keyring_alloc+0x45/0xb0 [ 1878.120776][T19887] lookup_user_key+0x47c/0x1230 [ 1878.120851][T19887] ? __pfx_lookup_user_key+0x10/0x10 [ 1878.120885][T19887] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1878.120924][T19887] ? __might_fault+0xaf/0x130 [ 1878.120952][T19887] ? strncpy_from_user+0x150/0x2c0 [ 1878.120992][T19887] __se_sys_add_key+0x315/0x420 [ 1878.121018][T19887] ? __pfx___se_sys_add_key+0x10/0x10 [ 1878.121051][T19887] ? __x64_sys_add_key+0x20/0xc0 [ 1878.121076][T19887] do_syscall_64+0x166/0x520 [ 1878.121105][T19887] ? trace_irq_disable+0x3b/0x140 [ 1878.121137][T19887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.121161][T19887] ? clear_bhb_loop+0x70/0xc0 [ 1878.121189][T19887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.121213][T19887] RIP: 0033:0x7f815f19f559 [ 1878.121234][T19887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1878.121255][T19887] RSP: 002b:00007f8160142028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1878.121280][T19887] RAX: ffffffffffffffda RBX: 00007f815f425fa0 RCX: 00007f815f19f559 [ 1878.121297][T19887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000840 [ 1878.121313][T19887] RBP: 00007f815f236b20 R08: fffffffffffffffe R09: 0000000000000000 [ 1878.121329][T19887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1878.121343][T19887] R13: 00007f815f426038 R14: 00007f815f425fa0 R15: 00007ffca17ec0d8 [ 1878.121381][T19887] [ 1878.395444][T15218] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1878.395474][T15218] [drm] Initialized udl on minor 2 [ 1878.663454][T19892] Invalid argument reading file caps for ./file0 [ 1879.008223][T13562] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1879.166243][T13562] usb 8-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1879.274997][T13562] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.595358][T13562] usb 8-1: config 0 descriptor?? [ 1879.937357][T13562] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1880.180456][T13562] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 3 [ 1880.180485][T13562] [drm] Initialized udl on minor 3 [ 1881.348931][ T5743] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1881.350151][ T5743] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1881.384806][ T5743] usb 5-1: USB disconnect, device number 21 [ 1881.385238][T15218] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1881.385400][T13598] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1881.385706][T15218] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1881.385892][T13598] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1881.386136][T13598] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1881.397081][T15187] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1881.458649][T13562] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1881.459045][T13562] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1881.469817][T15218] usb 3-1: USB disconnect, device number 22 [ 1881.483356][T13598] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1881.485346][T13598] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1881.485546][T13598] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1881.486973][T13562] usb 8-1: USB disconnect, device number 20 [ 1881.549688][T15187] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1881.549892][T15187] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1882.184116][T19944] netlink: 'syz.7.2896': attribute type 5 has an invalid length. [ 1882.285459][T19948] tmpfs: Too small a size for current use [ 1883.261542][T19953] loop7: detected capacity change from 0 to 1024 [ 1883.387639][T19953] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1883.405331][T19953] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1883.607176][T13411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1885.741080][T20021] input: syz0 as /devices/virtual/input/input25 [ 1886.665769][T20019] loop7: detected capacity change from 0 to 131072 [ 1886.684370][T20019] F2FS-fs (loop7): invalid crc value [ 1886.789894][T20019] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1886.812260][T20019] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1887.046896][T20040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2928'. [ 1887.293660][T20050] FAULT_INJECTION: forcing a failure. [ 1887.293660][T20050] name failslab, interval 1, probability 0, space 0, times 0 [ 1887.293706][T20050] CPU: 1 UID: 0 PID: 20050 Comm: syz.2.2932 Tainted: G L syzkaller #0 PREEMPT(full) [ 1887.293739][T20050] Tainted: [L]=SOFTLOCKUP [ 1887.293748][T20050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1887.293762][T20050] Call Trace: [ 1887.293771][T20050] [ 1887.293781][T20050] dump_stack_lvl+0xe8/0x150 [ 1887.293823][T20050] should_fail_ex+0x3eb/0x540 [ 1887.293864][T20050] should_failslab+0xa8/0x100 [ 1887.293900][T20050] __kmalloc_cache_noprof+0x9e/0x600 [ 1887.293928][T20050] ? __kmalloc_cache_noprof+0x148/0x600 [ 1887.293953][T20050] ? ceph_alloc_options+0xb2/0x1d0 [ 1887.294091][T20050] ? ceph_alloc_options+0xb2/0x1d0 [ 1887.294124][T20050] ceph_alloc_options+0xb2/0x1d0 [ 1887.294151][T20050] ceph_init_fs_context+0x68/0x4b0 [ 1887.294214][T20050] alloc_fs_context+0x99e/0xd00 [ 1887.294289][T20050] __se_sys_fsopen+0x118/0x370 [ 1887.294316][T20050] do_syscall_64+0x166/0x520 [ 1887.294345][T20050] ? trace_irq_disable+0x3b/0x140 [ 1887.294377][T20050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.294401][T20050] ? clear_bhb_loop+0x70/0xc0 [ 1887.294429][T20050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.294450][T20050] RIP: 0033:0x7f00edb9f559 [ 1887.294471][T20050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1887.294491][T20050] RSP: 002b:00007f00eead1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1887.294515][T20050] RAX: ffffffffffffffda RBX: 00007f00ede25fa0 RCX: 00007f00edb9f559 [ 1887.294534][T20050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 1887.294549][T20050] RBP: 00007f00edc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1887.294563][T20050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1887.294577][T20050] R13: 00007f00ede26038 R14: 00007f00ede25fa0 R15: 00007ffe326bd9a8 [ 1887.294616][T20050] [ 1890.168424][T20093] netlink: 'syz.7.2948': attribute type 1 has an invalid length. [ 1891.466035][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2952'. [ 1891.649757][T20103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1893.056325][T20130] loop2: detected capacity change from 0 to 4096 [ 1893.244966][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2967'. [ 1893.443013][T20130] ntfs3(loop2): ino=22, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_rename [ 1893.777503][T20147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1894.303251][T20159] 0x000000000000-0x000000020000 : "" [ 1894.618150][T20159] ftl_cs: FTL header not found. [ 1898.035981][T20196] loop4: detected capacity change from 0 to 24 [ 1898.054147][T20196] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1899.109036][T20196] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1899.244442][T20205] loop7: detected capacity change from 0 to 1024 [ 1899.351809][ T32] audit: type=1800 audit(2000001199.002:6087): pid=20205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2991" name="file1" dev="loop7" ino=20 res=0 errno=-22 [ 1899.410243][T20210] FAULT_INJECTION: forcing a failure. [ 1899.410243][T20210] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1899.410300][T20210] CPU: 1 UID: 0 PID: 20210 Comm: syz.4.2993 Tainted: G L syzkaller #0 PREEMPT(full) [ 1899.410332][T20210] Tainted: [L]=SOFTLOCKUP [ 1899.410341][T20210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1899.410355][T20210] Call Trace: [ 1899.410365][T20210] [ 1899.410375][T20210] dump_stack_lvl+0xe8/0x150 [ 1899.410420][T20210] should_fail_ex+0x3eb/0x540 [ 1899.410463][T20210] _copy_from_user+0x2d/0xb0 [ 1899.410570][T20210] wants_mount_setattr+0x1b6/0x8d0 [ 1899.410615][T20210] ? __pfx_wants_mount_setattr+0x10/0x10 [ 1899.410649][T20210] ? __fget_files+0x3a2/0x420 [ 1899.410693][T20210] __se_sys_mount_setattr+0x16a/0x280 [ 1899.410734][T20210] ? __pfx___se_sys_mount_setattr+0x10/0x10 [ 1899.410784][T20210] ? __x64_sys_mount_setattr+0x20/0xc0 [ 1899.410818][T20210] do_syscall_64+0x166/0x520 [ 1899.410847][T20210] ? trace_irq_disable+0x3b/0x140 [ 1899.410877][T20210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1899.410901][T20210] ? clear_bhb_loop+0x70/0xc0 [ 1899.410929][T20210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1899.410953][T20210] RIP: 0033:0x7f110639f559 [ 1899.410974][T20210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1899.410994][T20210] RSP: 002b:00007f11071e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 1899.411018][T20210] RAX: ffffffffffffffda RBX: 00007f1106625fa0 RCX: 00007f110639f559 [ 1899.411035][T20210] RDX: 0000000000008800 RSI: 0000000000000000 RDI: ffffffffffffffff [ 1899.411051][T20210] RBP: 00007f1106436b20 R08: 0000000000000020 R09: 0000000000000000 [ 1899.411066][T20210] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1899.411081][T20210] R13: 00007f1106626038 R14: 00007f1106625fa0 R15: 00007ffc4d39a068 [ 1899.411118][T20210] [ 1900.044356][ T32] audit: type=1326 audit(2000001199.692:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.9.2990" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d99f559 code=0x7ffc0000 [ 1900.069398][ T32] audit: type=1326 audit(2000001199.692:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.9.2990" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d99f559 code=0x7ffc0000 [ 1900.069575][ T32] audit: type=1326 audit(2000001199.692:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.9.2990" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d99f559 code=0x7ffc0000 [ 1900.069708][ T32] audit: type=1326 audit(2000001199.702:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.9.2990" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d99f559 code=0x7ffc0000 [ 1900.069819][ T32] audit: type=1326 audit(2000001199.702:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.9.2990" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d99f559 code=0x7ffc0000 [ 1900.069928][ T32] audit: type=1326 audit(2000001199.702:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.9.2990" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f244d99f559 code=0x7ffc0000 [ 1900.070046][ T32] audit: type=1326 audit(2000001199.702:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.9.2990" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d99f559 code=0x7ffc0000 [ 1900.070151][ T32] audit: type=1326 audit(2000001199.702:6095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.9.2990" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d99f559 code=0x7ffc0000 [ 1900.070271][ T32] audit: type=1326 audit(2000001199.712:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.9.2990" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f244d99f559 code=0x7ffc0000 [ 1900.332107][T20217] loop4: detected capacity change from 0 to 8192 [ 1900.343707][T20217] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1900.562440][T20229] FAULT_INJECTION: forcing a failure. [ 1900.562440][T20229] name failslab, interval 1, probability 0, space 0, times 0 [ 1900.562483][T20229] CPU: 0 UID: 0 PID: 20229 Comm: syz.2.3000 Tainted: G L syzkaller #0 PREEMPT(full) [ 1900.562519][T20229] Tainted: [L]=SOFTLOCKUP [ 1900.562528][T20229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1900.562543][T20229] Call Trace: [ 1900.562553][T20229] [ 1900.562563][T20229] dump_stack_lvl+0xe8/0x150 [ 1900.562601][T20229] should_fail_ex+0x3eb/0x540 [ 1900.562641][T20229] should_failslab+0xa8/0x100 [ 1900.562673][T20229] ? copy_pid_ns+0x23c/0x900 [ 1900.562704][T20229] kmem_cache_alloc_noprof+0x9c/0x600 [ 1900.562728][T20229] ? __pfx_inc_ucount+0x10/0x10 [ 1900.562752][T20229] ? copy_pid_ns+0x23c/0x900 [ 1900.562788][T20229] copy_pid_ns+0x23c/0x900 [ 1900.562824][T20229] ? __pfx_copy_pid_ns+0x10/0x10 [ 1900.562850][T20229] ? rcu_is_watching+0x16/0xb0 [ 1900.562886][T20229] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1900.562911][T20229] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 1900.562940][T20229] ? copy_ipcs+0x2ad/0x6c0 [ 1900.562964][T20229] ? copy_utsname+0x184/0x620 [ 1900.562994][T20229] create_new_namespaces+0x2ad/0x6b0 [ 1900.563038][T20229] ? security_capable+0x7e/0x2c0 [ 1900.563081][T20229] unshare_nsproxy_namespaces+0x144/0x190 [ 1900.563122][T20229] ksys_unshare+0x532/0x890 [ 1900.563169][T20229] ? __pfx_ksys_unshare+0x10/0x10 [ 1900.563205][T20229] ? rcu_is_watching+0x16/0xb0 [ 1900.563249][T20229] __x64_sys_unshare+0x38/0x50 [ 1900.563280][T20229] do_syscall_64+0x166/0x520 [ 1900.563307][T20229] ? trace_irq_disable+0x3b/0x140 [ 1900.563338][T20229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.563362][T20229] ? clear_bhb_loop+0x70/0xc0 [ 1900.563391][T20229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.563413][T20229] RIP: 0033:0x7f00edb9f559 [ 1900.563434][T20229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1900.563452][T20229] RSP: 002b:00007f00eead1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1900.563476][T20229] RAX: ffffffffffffffda RBX: 00007f00ede25fa0 RCX: 00007f00edb9f559 [ 1900.563493][T20229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 1900.563508][T20229] RBP: 00007f00edc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1900.563522][T20229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1900.563536][T20229] R13: 00007f00ede26038 R14: 00007f00ede25fa0 R15: 00007ffe326bd9a8 [ 1900.563571][T20229] [ 1901.132931][T20234] ªªªªª»: renamed from dummy0 (while UP) [ 1901.464311][T20246] loop4: detected capacity change from 0 to 512 [ 1902.190051][T20246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1902.192513][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3006'. [ 1902.192711][T20246] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1902.345355][T20246] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 66 vs 96 free clusters [ 1902.405709][T20246] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.3004: Failed to acquire dquot type 1 [ 1902.521082][T15084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1902.708335][T13562] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1902.819166][T20262] Invalid argument reading file caps for ./file0 [ 1902.858230][T13562] usb 3-1: Using ep0 maxpacket: 32 [ 1902.860389][T13562] usb 3-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 1903.108247][T13562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.108279][T13562] usb 3-1: Product: syz [ 1903.108295][T13562] usb 3-1: Manufacturer: syz [ 1903.108312][T13562] usb 3-1: SerialNumber: syz [ 1903.145057][T15218] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1903.200145][T20271] FAULT_INJECTION: forcing a failure. [ 1903.200145][T20271] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.200186][T20271] CPU: 1 UID: 0 PID: 20271 Comm: syz.4.3014 Tainted: G L syzkaller #0 PREEMPT(full) [ 1903.200220][T20271] Tainted: [L]=SOFTLOCKUP [ 1903.200229][T20271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1903.200248][T20271] Call Trace: [ 1903.200257][T20271] [ 1903.200268][T20271] dump_stack_lvl+0xe8/0x150 [ 1903.200313][T20271] should_fail_ex+0x3eb/0x540 [ 1903.200356][T20271] should_failslab+0xa8/0x100 [ 1903.200393][T20271] __kmalloc_cache_noprof+0x9e/0x600 [ 1903.200421][T20271] ? lock_acquire+0x115/0x350 [ 1903.200449][T20271] ? x509_cert_parse+0x5a/0x7a0 [ 1903.200570][T20271] ? x509_cert_parse+0x5a/0x7a0 [ 1903.200608][T20271] x509_cert_parse+0x5a/0x7a0 [ 1903.200645][T20271] x509_key_preparse+0x64/0x6d0 [ 1903.200676][T20271] ? down_read+0x2b9/0x320 [ 1903.200751][T20271] asymmetric_key_preparse+0xb9/0x1b0 [ 1903.200783][T20271] __key_create_or_update+0x360/0xab0 [ 1903.200826][T20271] ? __pfx___key_create_or_update+0x10/0x10 [ 1903.200855][T20271] ? lookup_user_key+0x1101/0x1230 [ 1903.200902][T20271] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1903.200956][T20271] key_create_or_update+0x42/0x60 [ 1903.200993][T20271] __se_sys_add_key+0x349/0x420 [ 1903.201021][T20271] ? __pfx___se_sys_add_key+0x10/0x10 [ 1903.201055][T20271] ? __x64_sys_add_key+0x20/0xc0 [ 1903.201082][T20271] do_syscall_64+0x166/0x520 [ 1903.201110][T20271] ? trace_irq_disable+0x3b/0x140 [ 1903.201141][T20271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.201165][T20271] ? clear_bhb_loop+0x70/0xc0 [ 1903.201196][T20271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.201220][T20271] RIP: 0033:0x7f110639f559 [ 1903.201243][T20271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1903.201275][T20271] RSP: 002b:00007f11071e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1903.201300][T20271] RAX: ffffffffffffffda RBX: 00007f1106625fa0 RCX: 00007f110639f559 [ 1903.201317][T20271] RDX: 00002000000018c0 RSI: 0000000000000000 RDI: 0000200000000200 [ 1903.201333][T20271] RBP: 00007f1106436b20 R08: ffffffffffffffff R09: 0000000000000000 [ 1903.201349][T20271] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1903.201364][T20271] R13: 00007f1106626038 R14: 00007f1106625fa0 R15: 00007ffc4d39a068 [ 1903.201401][T20271] [ 1903.253679][T20273] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3016'. [ 1903.443466][T15218] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 1903.482263][T15218] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1903.482300][T15218] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1903.482323][T15218] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1903.482370][T15218] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.541604][T15218] usb 8-1: config 0 descriptor?? [ 1903.855583][T13562] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 1904.533382][T15218] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1904.533439][T15218] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1904.533469][T15218] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1904.533497][T15218] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1904.533524][T15218] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1904.533552][T15218] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1904.533580][T15218] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1904.533607][T15218] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1904.533635][T15218] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1904.533663][T15218] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1904.648434][T15218] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1904.650837][T13562] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1904.662883][T13562] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 1904.668424][T13562] usb 3-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 1904.692767][T15218] usb 8-1: USB disconnect, device number 21 [ 1904.802180][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 1904.802202][ T32] audit: type=1326 audit(2000001204.452:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.0.3020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e04b9f559 code=0x7ffc0000 [ 1904.802434][ T32] audit: type=1326 audit(2000001204.452:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.0.3020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e04b9f559 code=0x7ffc0000 [ 1904.802937][ T32] audit: type=1326 audit(2000001204.452:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.0.3020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e04b9f559 code=0x7ffc0000 [ 1904.803178][ T32] audit: type=1326 audit(2000001204.452:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.0.3020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8e04b9f559 code=0x7ffc0000 [ 1904.804255][ T32] audit: type=1326 audit(2000001204.452:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.0.3020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e04b9f559 code=0x7ffc0000 [ 1904.804512][ T32] audit: type=1326 audit(2000001204.452:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.0.3020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e04b9f559 code=0x7ffc0000 [ 1904.807082][ T32] audit: type=1326 audit(2000001204.452:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.0.3020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e04b9f559 code=0x7ffc0000 [ 1904.822843][ T32] audit: type=1326 audit(2000001204.452:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.0.3020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f8e04b9f559 code=0x7ffc0000 [ 1904.857334][ T32] audit: type=1326 audit(2000001204.452:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.0.3020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e04b9f559 code=0x7ffc0000 [ 1904.984242][ T32] audit: type=1326 audit(2000001204.592:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20286 comm="syz.0.3020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e04b5fd8e code=0x7ffc0000 [ 1905.010402][T20285] fido_id[20285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1905.470569][T13562] usb 3-1: USB disconnect, device number 23 [ 1907.162746][T20305] FAULT_INJECTION: forcing a failure. [ 1907.162746][T20305] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.162787][T20305] CPU: 1 UID: 0 PID: 20305 Comm: syz.2.3027 Tainted: G L syzkaller #0 PREEMPT(full) [ 1907.162824][T20305] Tainted: [L]=SOFTLOCKUP [ 1907.162833][T20305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1907.162848][T20305] Call Trace: [ 1907.162858][T20305] [ 1907.162868][T20305] dump_stack_lvl+0xe8/0x150 [ 1907.162911][T20305] should_fail_ex+0x3eb/0x540 [ 1907.162953][T20305] should_failslab+0xa8/0x100 [ 1907.162989][T20305] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 1907.163019][T20305] ? __d_alloc+0x37/0x820 [ 1907.163137][T20305] ? __d_alloc+0x37/0x820 [ 1907.163175][T20305] __d_alloc+0x37/0x820 [ 1907.163204][T20305] ? pcpu_alloc+0x10/0x310 [ 1907.163266][T20305] d_alloc_pseudo+0x21/0xc0 [ 1907.163299][T20305] alloc_path_pseudo+0x107/0x220 [ 1907.163329][T20305] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1907.163356][T20305] ? do_raw_spin_lock+0x12b/0x2f0 [ 1907.163386][T20305] alloc_file_pseudo+0xa8/0x1e0 [ 1907.163421][T20305] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1907.163446][T20305] ? _raw_spin_unlock+0x28/0x50 [ 1907.163480][T20305] sock_alloc_file+0xb8/0x2e0 [ 1907.163546][T20305] ? __sys_socket+0x12b/0x1b0 [ 1907.163590][T20305] __sys_socket+0x13f/0x1b0 [ 1907.163628][T20305] __x64_sys_socket+0x7a/0x90 [ 1907.163679][T20305] do_syscall_64+0x166/0x520 [ 1907.163707][T20305] ? trace_irq_disable+0x3b/0x140 [ 1907.163738][T20305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.163763][T20305] ? clear_bhb_loop+0x70/0xc0 [ 1907.163792][T20305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1907.163815][T20305] RIP: 0033:0x7f00edb9f559 [ 1907.163838][T20305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1907.163857][T20305] RSP: 002b:00007f00eead1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1907.163882][T20305] RAX: ffffffffffffffda RBX: 00007f00ede25fa0 RCX: 00007f00edb9f559 [ 1907.163900][T20305] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 1907.163915][T20305] RBP: 00007f00edc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1907.163929][T20305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1907.163943][T20305] R13: 00007f00ede26038 R14: 00007f00ede25fa0 R15: 00007ffe326bd9a8 [ 1907.163981][T20305] [ 1907.553920][T20308] udevd[20308]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1907.865887][T20318] loop2: detected capacity change from 0 to 16 [ 1907.887841][T20318] erofs (device loop2): mounted with root inode @ nid 36. [ 1908.339121][ T5746] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1908.485228][T20332] block device autoloading is deprecated and will be removed. [ 1908.504999][ T5746] usb 8-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1908.507394][ T5746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.528285][ T5746] usb 8-1: config 0 descriptor?? [ 1908.761744][ T5746] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1908.968739][T20350] loop4: detected capacity change from 0 to 4096 [ 1909.007457][ T5746] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 1909.007486][ T5746] [drm] Initialized udl on minor 1 [ 1909.106694][T20350] ntfs3(loop4): ino=b, Correct links count -> 1. [ 1909.125442][T20350] ntfs3(loop4): ino=18, mi_enum_attr [ 1909.125485][T20350] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1909.164819][T20323] netlink: 'syz.7.3032': attribute type 1 has an invalid length. [ 1910.045516][T20375] loop2: detected capacity change from 0 to 256 [ 1910.101323][T20375] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1910.184868][T20375] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 1911.010175][ T5746] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1911.010648][ T5746] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1911.037326][ T5746] usb 8-1: USB disconnect, device number 22 [ 1911.046772][T13562] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1912.161393][T20406] loop4: detected capacity change from 0 to 256 [ 1912.454120][T20415] loop7: detected capacity change from 0 to 2048 [ 1912.522112][T20415] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1913.373207][T20420] fuse: fd is not a fuse device [ 1913.647074][T20430] netlink: 'syz.9.3072': attribute type 1 has an invalid length. [ 1914.791085][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.791148][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.975819][T20453] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 1915.145697][T20455] loop7: detected capacity change from 0 to 2048 [ 1915.193301][T20455] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1916.129328][T20465] nvmet: adding nsid 1 to subsystem testsubsys [ 1916.309703][ T5759] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1916.614523][ T5759] usb 8-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1916.763080][ T5759] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.875052][ T5759] usb 8-1: config 0 descriptor?? [ 1917.363566][ T5759] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1917.388125][ T5746] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1917.538909][ T5746] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1917.539961][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.543432][ T5746] usb 5-1: config 0 descriptor?? [ 1917.630165][ T5759] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 1917.630195][ T5759] [drm] Initialized udl on minor 1 [ 1917.694692][T20488] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1917.747333][ T5746] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1918.162973][T20471] netlink: 'syz.4.3089': attribute type 1 has an invalid length. [ 1918.444821][ T5746] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1918.445148][ T5746] [drm] Initialized udl on minor 2 [ 1918.600299][ T5746] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1918.616867][ T5746] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1918.633914][ T5746] usb 5-1: USB disconnect, device number 22 [ 1918.958215][ T5743] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1919.109155][ T5743] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1919.110353][ T5743] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 1919.110379][ T5743] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1919.110400][ T5743] usb 3-1: config 0 has no interface number 0 [ 1919.149932][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1919.149960][ T5743] usb 3-1: Product: syz [ 1919.149976][ T5743] usb 3-1: Manufacturer: syz [ 1919.149992][ T5743] usb 3-1: SerialNumber: syz [ 1919.180875][ T5743] usb 3-1: config 0 descriptor?? [ 1919.469332][ T5743] usb 3-1: USB disconnect, device number 24 [ 1921.312074][T20520] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3109'. [ 1923.002327][ T5759] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1923.002798][ T5759] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1923.008493][T15187] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1923.017253][T15187] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1923.017478][T15187] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1923.125502][ T5759] usb 8-1: USB disconnect, device number 23 [ 1923.996879][T20554] loop2: detected capacity change from 0 to 2048 [ 1924.037002][T20554] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1924.989966][ T32] kauditd_printk_skb: 34 callbacks suppressed [ 1924.989988][ T32] audit: type=1800 audit(2000001224.642:6148): pid=20583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3131" name="nullb0" dev="tmpfs" ino=1202 res=0 errno=-22 [ 1926.117721][T20595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1926.451657][T20605] loop7: detected capacity change from 0 to 2048 [ 1926.536160][T20605] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1928.512561][T13562] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1928.663081][T13562] usb 5-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 1928.666428][T13562] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1928.666458][T13562] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1929.040584][T13562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.040623][T13562] usb 5-1: Product: syz [ 1929.040639][T13562] usb 5-1: Manufacturer: syz [ 1929.040656][T13562] usb 5-1: SerialNumber: syz [ 1929.436875][T20622] ceph: No mds server is up or the cluster is laggy [ 1929.768971][T13562] usb 5-1: Cannot retrieve CPort count: -110 [ 1929.769033][T13562] usb 5-1: Cannot retrieve CPort count: -110 [ 1929.769058][T13562] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 1930.528250][ T5746] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1930.681324][ T5746] usb 8-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1930.682415][ T5746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.698918][ T5746] usb 8-1: config 0 descriptor?? [ 1930.931182][ T5746] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1931.156001][ T5746] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 1931.156028][ T5746] [drm] Initialized udl on minor 1 [ 1931.343411][T20649] netlink: 'syz.7.3154': attribute type 1 has an invalid length. [ 1931.887747][T15187] usb 5-1: USB disconnect, device number 23 [ 1932.109875][T20667] loop4: detected capacity change from 0 to 1024 [ 1932.113013][T20667] EXT4-fs: Ignoring removed mblk_io_submit option [ 1932.113044][T20667] EXT4-fs: Ignoring removed oldalloc option [ 1932.153349][T20667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1932.155147][T20667] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1932.279815][T20667] EXT4-fs error (device loop4): ext4_map_blocks:951: inode #15: block 3: comm syz.4.3164: lblock 3 mapped to illegal pblock 3 (length 3) [ 1932.301455][T20667] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1932.301492][T20667] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1932.301492][T20667] [ 1932.341743][T20667] EXT4-fs error (device loop4): ext4_map_blocks:951: inode #15: block 7: comm syz.4.3164: lblock 7 mapped to illegal pblock 7 (length 9) [ 1932.359834][T20667] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 1932.359869][T20667] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1932.359869][T20667] [ 1932.854219][T15084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1934.026318][ T5746] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1934.026799][ T5746] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1934.045124][ T5743] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1934.045576][ T5746] usb 8-1: USB disconnect, device number 24 [ 1934.060642][ T5743] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1934.060872][ T5743] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1934.262455][T20685] FAULT_INJECTION: forcing a failure. [ 1934.262455][T20685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1934.262493][T20685] CPU: 0 UID: 0 PID: 20685 Comm: syz.2.3170 Tainted: G L syzkaller #0 PREEMPT(full) [ 1934.262524][T20685] Tainted: [L]=SOFTLOCKUP [ 1934.262533][T20685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1934.262547][T20685] Call Trace: [ 1934.262556][T20685] [ 1934.262566][T20685] dump_stack_lvl+0xe8/0x150 [ 1934.262608][T20685] should_fail_ex+0x3eb/0x540 [ 1934.262650][T20685] _copy_from_user+0x2d/0xb0 [ 1934.262682][T20685] __sys_bpf+0x2e7/0xe00 [ 1934.262727][T20685] ? __pfx___sys_bpf+0x10/0x10 [ 1934.262767][T20685] ? do_futex+0x3e7/0x4e0 [ 1934.262824][T20685] ? rcu_is_watching+0x16/0xb0 [ 1934.262865][T20685] __x64_sys_bpf+0xba/0xd0 [ 1934.262902][T20685] do_syscall_64+0x166/0x520 [ 1934.262931][T20685] ? trace_irq_disable+0x3b/0x140 [ 1934.262962][T20685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.262985][T20685] ? clear_bhb_loop+0x70/0xc0 [ 1934.263014][T20685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.263038][T20685] RIP: 0033:0x7f00edb9f559 [ 1934.263059][T20685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1934.263079][T20685] RSP: 002b:00007f00eead1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1934.263103][T20685] RAX: ffffffffffffffda RBX: 00007f00ede25fa0 RCX: 00007f00edb9f559 [ 1934.263121][T20685] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 1934.263136][T20685] RBP: 00007f00edc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1934.263152][T20685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1934.263166][T20685] R13: 00007f00ede26038 R14: 00007f00ede25fa0 R15: 00007ffe326bd9a8 [ 1934.263214][T20685] [ 1935.755477][T20695] loop2: detected capacity change from 0 to 32768 [ 1935.801659][T20695] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1936.584040][T13562] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1936.912416][T14811] ocfs2: Unmounting device (7,2) on (node local) [ 1937.353852][T20722] loop4: detected capacity change from 0 to 2048 [ 1937.466964][T20722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1938.169010][T13562] usb 8-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1938.169056][T13562] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1938.170291][T13562] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1938.170349][T13562] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1938.170378][T13562] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1938.171382][T13562] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1938.171431][T13562] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1938.171460][T13562] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1938.175034][T13562] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1938.175087][T13562] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1938.175116][T13562] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1938.247232][T13562] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1938.247441][T13562] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1938.247518][T13562] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1938.330973][T13562] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1938.331028][T13562] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1938.331057][T13562] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1938.332579][T13562] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1938.332630][T13562] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1938.332660][T13562] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1938.333659][T13562] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1938.337961][T13562] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1938.342553][T13562] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1938.412641][T13562] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1938.412830][T13562] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1938.412905][T13562] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1938.502790][T13562] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1938.502823][T13562] usb 8-1: Product: syz [ 1938.502840][T13562] usb 8-1: Manufacturer: syz [ 1938.502857][T13562] usb 8-1: SerialNumber: syz [ 1938.535886][T13562] usb 8-1: config 0 descriptor?? [ 1938.620638][T20732] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1938.620674][T20732] block device autoloading is deprecated and will be removed. [ 1938.647633][T13562] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 1938.996676][ C0] usb 8-1: yurex_control_callback - control failed: -71 [ 1938.997108][ T5759] usb 8-1: USB disconnect, device number 25 [ 1939.021577][T20713] yurex 8-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 1939.023227][ T5759] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 1940.148435][T15187] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1940.267293][ T32] audit: type=1326 audit(2000001239.912:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20758 comm="syz.7.3195" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f815f19f559 code=0x0 [ 1940.309176][T15187] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1940.310415][T15187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.313126][T15187] usb 3-1: config 0 descriptor?? [ 1941.777730][T15187] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1942.010384][T15187] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1942.010413][T15187] [drm] Initialized udl on minor 1 [ 1943.177610][T20787] loop4: detected capacity change from 0 to 256 [ 1943.189496][T20787] exfat: Deprecated parameter 'utf8' [ 1943.189588][T20787] exfat: Deprecated parameter 'utf8' [ 1943.189604][T20787] exfat: Deprecated parameter 'utf8' [ 1943.232355][T20787] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1943.414467][T20795] FAULT_INJECTION: forcing a failure. [ 1943.414467][T20795] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1943.414505][T20795] CPU: 0 UID: 0 PID: 20795 Comm: syz.4.3207 Tainted: G L syzkaller #0 PREEMPT(full) [ 1943.414538][T20795] Tainted: [L]=SOFTLOCKUP [ 1943.414547][T20795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1943.414562][T20795] Call Trace: [ 1943.414571][T20795] [ 1943.414581][T20795] dump_stack_lvl+0xe8/0x150 [ 1943.414624][T20795] should_fail_ex+0x3eb/0x540 [ 1943.414665][T20795] get_futex_key+0x893/0x1410 [ 1943.414715][T20795] ? __pfx_get_futex_key+0x10/0x10 [ 1943.414745][T20795] ? preempt_schedule_common+0x7f/0xd0 [ 1943.414774][T20795] ? preempt_schedule_thunk+0x16/0x40 [ 1943.414810][T20795] futex_wake_op+0x20d/0xdc0 [ 1943.414854][T20795] ? futex_wake+0x51b/0x5f0 [ 1943.414880][T20795] ? __pfx_futex_wake_op+0x10/0x10 [ 1943.414910][T20795] ? __pfx_futex_wake+0x10/0x10 [ 1943.414965][T20795] do_futex+0x480/0x4e0 [ 1943.414995][T20795] ? __pfx_do_futex+0x10/0x10 [ 1943.415014][T20795] ? __fget_files+0x3a2/0x420 [ 1943.415043][T20795] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1943.415081][T20795] __se_sys_futex+0x3a8/0x450 [ 1943.415114][T20795] ? __pfx___se_sys_futex+0x10/0x10 [ 1943.415137][T20795] ? rcu_is_watching+0x16/0xb0 [ 1943.415179][T20795] ? __x64_sys_futex+0x21/0xf0 [ 1943.415205][T20795] do_syscall_64+0x166/0x520 [ 1943.415235][T20795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.415260][T20795] ? clear_bhb_loop+0x70/0xc0 [ 1943.415288][T20795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.415311][T20795] RIP: 0033:0x7f110639f559 [ 1943.415332][T20795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1943.415352][T20795] RSP: 002b:00007f11071e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1943.415376][T20795] RAX: ffffffffffffffda RBX: 00007f1106625fa0 RCX: 00007f110639f559 [ 1943.415397][T20795] RDX: 0000000000000004 RSI: 0000000000000005 RDI: 0000200000001680 [ 1943.415411][T20795] RBP: 00007f1106436b20 R08: 0000200000001680 R09: 0000000000000002 [ 1943.415428][T20795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1943.415442][T20795] R13: 00007f1106626038 R14: 00007f1106625fa0 R15: 00007ffc4d39a068 [ 1943.415479][T20795] [ 1943.718485][T13562] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1943.872122][T13562] usb 8-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 1943.872834][T13562] usb 8-1: config 0 has no interfaces? [ 1943.872882][T13562] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.909057][T13562] usb 8-1: config 0 descriptor?? [ 1944.304145][T13562] usb 8-1: USB disconnect, device number 26 [ 1946.045973][T20840] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1947.123110][T15187] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1947.124011][T15187] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1947.147659][ T5759] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1947.185648][T15187] usb 3-1: USB disconnect, device number 25 [ 1947.190522][ T5759] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1947.191130][ T5759] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1947.424065][T20860] netlink: 'syz.2.3230': attribute type 1 has an invalid length. [ 1947.424092][T20860] netlink: 'syz.2.3230': attribute type 2 has an invalid length. [ 1947.424108][T20860] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3230'. [ 1947.563614][T20864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1948.808151][T15187] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1949.266361][T15187] usb 3-1: Using ep0 maxpacket: 32 [ 1949.273870][T15187] usb 3-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1949.275197][T15187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1949.275228][T15187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1949.275266][T15187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.279889][T15187] usb 3-1: config 0 descriptor?? [ 1949.293849][T15187] hub 3-1:0.0: USB hub found [ 1950.157725][T15187] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1950.538764][T20905] syzkaller1: entered promiscuous mode [ 1950.538804][T20905] syzkaller1: entered allmulticast mode [ 1950.592918][T15187] hid_parser_main: 5 callbacks suppressed [ 1950.592945][T15187] hid-generic 0003:046D:C31C.000E: unknown main item tag 0x0 [ 1950.696908][T20908] overlayfs: failed to clone upperpath [ 1950.716567][T20908] overlayfs: failed to clone lowerpath [ 1950.813974][T15187] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1950.850991][T15187] usb 3-1: USB disconnect, device number 26 [ 1950.936595][T20916] fido_id[20916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1953.909009][T20952] Invalid ELF header magic: != ELF [ 1956.003560][T20983] overlayfs: failed to clone upperpath [ 1956.399745][T20989] loop2: detected capacity change from 0 to 4096 [ 1956.405774][T20989] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1956.405801][T20989] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1956.436196][T20989] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 1956.436328][T20989] System zones: 0-5 [ 1956.483175][T20989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1956.731921][T20989] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 1956.847027][T21003] loop4: detected capacity change from 0 to 512 [ 1956.903150][T21003] EXT4-fs: Ignoring removed nobh option [ 1957.119703][T21003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1957.119852][T21003] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1957.298913][T20999] fscrypt: AES-256-XTS using blk-crypto-fallback [ 1957.763914][T21016] loop7: detected capacity change from 0 to 2048 [ 1957.807244][T21016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1957.832352][T15084] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1957.928938][T20999] overlayfs: failed index dir cleanup (-512) [ 1957.928959][T20999] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1958.117707][T21024] 9p: Bad value for 'rfdno' [ 1958.154982][T14811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1960.393588][T21049] loop7: detected capacity change from 0 to 256 [ 1960.449603][T21049] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 1960.878124][T15187] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1960.890208][T21065] loop7: detected capacity change from 0 to 512 [ 1960.962934][T21065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1960.963062][T21065] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1961.022573][T21065] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1961.034847][T15187] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 1961.041582][T15187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1961.041617][T15187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1961.041642][T15187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1961.041685][T15187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.061153][T15187] usb 3-1: config 0 descriptor?? [ 1961.157600][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a3f6000: rx timeout, send abort [ 1961.208142][T21065] EXT4-fs (loop7): Remounting filesystem read-only [ 1961.272232][T13411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1961.310128][T12963] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 1961.310177][T12963] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 1961.660074][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a3f6000: abort rx timeout. Force session deactivation [ 1961.968575][T15187] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1961.968615][T15187] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1961.968644][T15187] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1961.968672][T15187] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1962.085049][T15187] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1962.115987][T15187] usb 3-1: USB disconnect, device number 27 [ 1962.306767][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3301'. [ 1962.423607][T21077] fido_id[21077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1962.444405][T21085] netlink: 'syz.4.3301': attribute type 1 has an invalid length. [ 1962.444433][T21085] netlink: 'syz.4.3301': attribute type 2 has an invalid length. [ 1964.831081][T21113] fuse: fd is not a fuse device [ 1964.953720][T21120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3314'. [ 1965.058303][T15187] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1965.132756][T21126] FAULT_INJECTION: forcing a failure. [ 1965.132756][T21126] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.132798][T21126] CPU: 1 UID: 0 PID: 21126 Comm: syz.7.3317 Tainted: G L syzkaller #0 PREEMPT(full) [ 1965.132831][T21126] Tainted: [L]=SOFTLOCKUP [ 1965.132841][T21126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1965.132856][T21126] Call Trace: [ 1965.132866][T21126] [ 1965.132876][T21126] dump_stack_lvl+0xe8/0x150 [ 1965.132920][T21126] should_fail_ex+0x3eb/0x540 [ 1965.132963][T21126] should_failslab+0xa8/0x100 [ 1965.133000][T21126] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 1965.133031][T21126] ? __d_alloc+0x37/0x820 [ 1965.133060][T21126] ? __d_alloc+0x37/0x820 [ 1965.133089][T21126] ? fast_dput+0x2a4/0x690 [ 1965.133120][T21126] __d_alloc+0x37/0x820 [ 1965.133149][T21126] ? hashlen_string+0xb6/0x110 [ 1965.133192][T21126] d_alloc_name+0xba/0x270 [ 1965.133225][T21126] ? __pfx_d_alloc_name+0x10/0x10 [ 1965.133265][T21126] ? dput+0x34/0x60 [ 1965.133293][T21126] ? proc_setup_self+0x129/0x1c0 [ 1965.133332][T21126] proc_setup_thread_self+0x48/0x1c0 [ 1965.133367][T21126] ? __pfx_proc_fill_super+0x10/0x10 [ 1965.133482][T21126] get_tree_nodev+0xbb/0x150 [ 1965.133516][T21126] vfs_get_tree+0x92/0x2a0 [ 1965.133551][T21126] do_new_mount+0x325/0xb00 [ 1965.133585][T21126] ? __pfx_do_new_mount+0x10/0x10 [ 1965.133614][T21126] ? ns_capable+0x84/0xe0 [ 1965.133647][T21126] ? path_mount+0x647/0x1050 [ 1965.133676][T21126] ? user_path_at+0xd4/0x160 [ 1965.133709][T21126] __se_sys_mount+0x31d/0x420 [ 1965.133743][T21126] ? __pfx___se_sys_mount+0x10/0x10 [ 1965.133778][T21126] ? __x64_sys_mount+0x20/0xc0 [ 1965.133807][T21126] do_syscall_64+0x166/0x520 [ 1965.133836][T21126] ? trace_irq_disable+0x3b/0x140 [ 1965.133865][T21126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.133888][T21126] ? clear_bhb_loop+0x70/0xc0 [ 1965.133916][T21126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.133939][T21126] RIP: 0033:0x7f815f19f559 [ 1965.133961][T21126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1965.133981][T21126] RSP: 002b:00007f8160142028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1965.134006][T21126] RAX: ffffffffffffffda RBX: 00007f815f425fa0 RCX: 00007f815f19f559 [ 1965.134023][T21126] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 1965.134039][T21126] RBP: 00007f815f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1965.134054][T21126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1965.134068][T21126] R13: 00007f815f426038 R14: 00007f815f425fa0 R15: 00007ffca17ec0d8 [ 1965.134105][T21126] [ 1965.134190][T21126] proc_fill_super: can't allocate /proc/thread-self [ 1965.246372][T15187] usb 5-1: Using ep0 maxpacket: 8 [ 1965.262173][ T5743] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1965.290095][T15187] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1965.632050][T15187] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1965.668408][T15187] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1965.668442][T15187] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1965.668469][T15187] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1965.668494][T15187] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1965.668540][T15187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.056417][T15187] usb 5-1: GET_CAPABILITIES returned 0 [ 1966.056470][T15187] usbtmc 5-1:16.0: can't read capabilities [ 1966.246473][ T5743] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1966.247920][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.262148][ T5743] usb 3-1: config 0 descriptor?? [ 1966.293317][T15187] usb 5-1: USB disconnect, device number 24 [ 1966.489650][ T5743] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1966.721467][ T5743] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1966.721495][ T5743] [drm] Initialized udl on minor 1 [ 1969.266950][T21169] loop4: detected capacity change from 0 to 2048 [ 1969.306331][T21169] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1970.208839][T21175] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3333'. [ 1970.995757][T21181] rxe_eth0 speed is unknown, defaulting to 1000 [ 1972.261170][ T5743] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1972.261647][ T5743] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1972.297870][T13562] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1972.298814][T13562] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1972.299338][T13562] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1972.382207][ T5759] usb 3-1: USB disconnect, device number 28 [ 1972.769212][T21200] jffs2: notice: (21200) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1973.771421][ T5759] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1973.839804][T21217] fuse: fd is not a fuse device [ 1973.918863][ T5759] usb 8-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 1973.919870][ T5759] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1973.919921][ T5759] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1973.919950][ T5759] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1973.919992][ T5759] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.877667][T21227] syz_tun: entered allmulticast mode [ 1974.896459][T21226] syz_tun: left allmulticast mode [ 1975.331459][ T5759] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 1975.331522][ T5759] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1975.331537][ T5759] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1976.235027][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.235087][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.237541][ T5759] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 1976.262306][ T5759] usb 8-1: USB disconnect, device number 27 [ 1976.396805][T21246] FAULT_INJECTION: forcing a failure. [ 1976.396805][T21246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1976.396845][T21246] CPU: 0 UID: 0 PID: 21246 Comm: syz.2.3353 Tainted: G L syzkaller #0 PREEMPT(full) [ 1976.396878][T21246] Tainted: [L]=SOFTLOCKUP [ 1976.396887][T21246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1976.396901][T21246] Call Trace: [ 1976.396918][T21246] [ 1976.396928][T21246] dump_stack_lvl+0xe8/0x150 [ 1976.396971][T21246] should_fail_ex+0x3eb/0x540 [ 1976.397014][T21246] _copy_to_user+0x31/0xb0 [ 1976.397040][T21246] bpf_verifier_vlog+0x52a/0x900 [ 1976.397079][T21246] btf_verifier_log+0x11d/0x1a0 [ 1976.397114][T21246] ? __pfx_btf_verifier_log+0x10/0x10 [ 1976.397138][T21246] ? __btf_verifier_log+0xe2/0x140 [ 1976.397170][T21246] ? __pfx___btf_verifier_log+0x10/0x10 [ 1976.397201][T21246] btf_func_proto_log+0x63e/0x840 [ 1976.397244][T21246] __btf_verifier_log_type+0x45d/0x6a0 [ 1976.397298][T21246] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 1976.397332][T21246] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 1976.397359][T21246] ? sort+0xb0/0x100 [ 1976.397510][T21246] btf_func_proto_check_meta+0xf4/0x160 [ 1976.397546][T21246] btf_check_all_metas+0x344/0xa30 [ 1976.397582][T21246] btf_parse_type_sec+0xf9/0x1a60 [ 1976.397619][T21246] ? __pfx_btf_check_sec_info+0x10/0x10 [ 1976.397654][T21246] ? btf_parse_hdr+0x5f2/0x810 [ 1976.397676][T21246] ? btf_parse_str_sec+0x244/0x2f0 [ 1976.397706][T21246] btf_new_fd+0x3e0/0x8f0 [ 1976.397746][T21246] __sys_bpf+0xda7/0xe00 [ 1976.397806][T21246] ? __pfx___sys_bpf+0x10/0x10 [ 1976.397846][T21246] ? do_futex+0x3e7/0x4e0 [ 1976.397920][T21246] ? rcu_is_watching+0x16/0xb0 [ 1976.397964][T21246] __x64_sys_bpf+0xba/0xd0 [ 1976.397998][T21246] do_syscall_64+0x166/0x520 [ 1976.398026][T21246] ? trace_irq_disable+0x3b/0x140 [ 1976.398073][T21246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.398096][T21246] ? clear_bhb_loop+0x70/0xc0 [ 1976.398124][T21246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.398148][T21246] RIP: 0033:0x7f00edb9f559 [ 1976.398169][T21246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1976.398190][T21246] RSP: 002b:00007f00eead1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1976.398215][T21246] RAX: ffffffffffffffda RBX: 00007f00ede25fa0 RCX: 00007f00edb9f559 [ 1976.398232][T21246] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1976.398248][T21246] RBP: 00007f00edc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1976.398263][T21246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1976.398278][T21246] R13: 00007f00ede26038 R14: 00007f00ede25fa0 R15: 00007ffe326bd9a8 [ 1976.398315][T21246] [ 1979.244420][T21283] loop2: detected capacity change from 0 to 164 [ 1979.730247][T21286] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.3364'. [ 1981.127095][T21298] loop7: detected capacity change from 0 to 32768 [ 1981.129957][T21298] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 1981.130795][T21298] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3366 (21298) [ 1981.141112][T21298] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1981.141148][T21298] BTRFS info (device loop7): using blake2b checksum algorithm [ 1981.166924][T21298] BTRFS info (device loop7 state E): setting nodatasum [ 1981.166955][T21298] BTRFS info (device loop7 state E): setting nodatacow [ 1981.166974][T21298] BTRFS info (device loop7 state E): disabling tree log [ 1981.166991][T21298] BTRFS info (device loop7 state E): disabling log replay at mount time [ 1981.167011][T21298] BTRFS info (device loop7 state E): force clearing of disk cache [ 1981.167030][T21298] BTRFS info (device loop7 state E): enabling auto defrag [ 1981.665743][T21324] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1981.665775][T21324] syzkaller0: Linktype set failed because interface is up [ 1982.636485][T13411] BTRFS info (device loop7 state E): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1982.711016][T21336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1982.715153][T21336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1982.715281][T21336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1982.715415][T21336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1982.715534][T21336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1982.715652][T21336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1982.715769][T21336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1982.715887][T21336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1982.716012][T21336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1982.716130][T21336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1988.811726][ T5743] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1989.143664][ T5743] usb 8-1: New USB device found: idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1989.182264][ T5743] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1989.182496][ T5743] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1989.182575][ T5743] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1989.182629][ T5743] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1989.182704][ T5743] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1989.657648][ T5743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1989.762041][ T5743] usb 8-1: Product: syz [ 1989.762065][ T5743] usb 8-1: Manufacturer: syz [ 1989.762081][ T5743] usb 8-1: SerialNumber: syz [ 1989.806113][ T5743] usb 8-1: config 0 descriptor?? [ 1990.069178][ T5743] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1990.069208][ T5743] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1990.270854][ T5743] radio-si470x 8-1:0.0: software version 0, hardware version 0 [ 1990.270882][ T5743] radio-si470x 8-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1990.270911][ T5743] radio-si470x 8-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1990.476745][ T5743] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 1991.137162][ T5743] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1991.137485][ T5743] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 1991.160259][ T5743] usb 8-1: USB disconnect, device number 28 [ 1991.696141][T21398] overlayfs: failed to clone upperpath [ 1992.048553][ T2009] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1992.221862][ T2009] usb 8-1: New USB device found: idVendor=05c6, idProduct=1000, bcdDevice=0.00 [ 1992.222992][ T2009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.296296][ T2009] usb-storage 8-1:1.0: USB Mass Storage device detected [ 1992.935799][ T2009] scsi host1: usb-storage 8-1:1.0 [ 1993.164942][ T2009] usb 8-1: USB disconnect, device number 29 [ 1993.253890][T21418] overlayfs: failed to clone upperpath [ 1994.201293][T21435] loop7: detected capacity change from 0 to 512 [ 1994.210566][T21435] EXT4-fs: Ignoring removed mblk_io_submit option [ 1994.265279][T21435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1994.329909][T21435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1994.330061][T21435] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1994.356035][T21435] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.3410: corrupted xattr block 33: invalid header [ 1994.383534][T21435] fscrypt (loop7, inode 15): Error -117 getting encryption context [ 1994.480712][T13411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1994.939238][T21445] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1996.040709][T21465] overlayfs: failed to clone lowerpath [ 1996.254640][T21473] loop2: detected capacity change from 0 to 2048 [ 1997.006789][T21473] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1997.349555][T21484] fuse: fd is not a fuse device [ 1997.796553][ T32] audit: type=1326 audit(2000001297.442:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21501 comm="syz.2.3435" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00edb9f559 code=0x0 [ 1998.188437][T21516] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1998.297034][T21521] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3443'. [ 1998.361423][T21522] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3443'. [ 1999.898126][T13598] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2000.058957][T13598] usb 5-1: New USB device found: idVendor=065a, idProduct=0009, bcdDevice=1.00 [ 2000.060103][T13598] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2000.060132][T13598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 2000.060175][T13598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.120993][T13598] opticon 5-1:1.0: opticon converter detected [ 2000.141655][T13598] usb 5-1: opticon converter now attached to ttyUSB0 [ 2000.910594][ T5743] usb 5-1: USB disconnect, device number 25 [ 2001.109149][ T5743] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 2001.109866][ T5743] opticon 5-1:1.0: device disconnected [ 2001.403248][T21527] loop7: detected capacity change from 0 to 32768 [ 2001.581420][T21527] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2002.169284][T21527] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop7": -EINTR [ 2002.602324][T21527] XFS (loop7): log mount failed [ 2002.629153][T21584] netlink: 'syz.0.3461': attribute type 12 has an invalid length. [ 2002.629177][T21584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3461'. [ 2004.709513][T21620] loop2: detected capacity change from 0 to 2048 [ 2005.391940][T21620] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2005.877080][T21627] bridge1: entered promiscuous mode [ 2005.877122][T21627] bridge1: entered allmulticast mode [ 2006.485867][T21644] loop4: detected capacity change from 0 to 164 [ 2009.929786][T21680] siw: device registration error -23 [ 2009.931150][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3486'. [ 2009.931251][T21680] tipc: Resetting bearer [ 2010.137132][T21680] tipc: Disabling bearer [ 2013.053944][T21714] loop2: detected capacity change from 0 to 2048 [ 2013.535114][T21714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2014.047149][T21738] loop2: detected capacity change from 0 to 16 [ 2014.051835][T21738] erofs (device loop2): mounted with root inode @ nid 36. [ 2014.067479][T21738] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 2014.067510][T21738] erofs (device loop2): readahead error at folio 1 @ nid 89 [ 2014.067529][T21738] erofs (device loop2): readahead error at folio 0 @ nid 89 [ 2014.067569][T21738] erofs (device loop2): read error -117 @ 0 of nid 89 [ 2014.067817][ T32] audit: type=1800 audit(2000001313.712:6151): pid=21738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3505" name="file2" dev="loop2" ino=89 res=0 errno=-117 [ 2014.468786][ T5743] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2014.630559][ T5743] usb 5-1: New USB device found: idVendor=047e, idProduct=ffff, bcdDevice=0.00 [ 2014.632653][ T5743] usb 5-1: config 0 has no interfaces? [ 2014.632692][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.642870][ T5743] usb 5-1: config 0 descriptor?? [ 2015.089384][T21759] loop2: detected capacity change from 0 to 32768 [ 2015.103982][T21759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3512 (21759) [ 2015.158859][T21759] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2015.158899][T21759] BTRFS info (device loop2): using crc32c checksum algorithm [ 2015.266852][T21759] BTRFS info (device loop2): enabling ssd optimizations [ 2015.266881][T21759] BTRFS info (device loop2): turning on flush-on-commit [ 2015.266899][T21759] BTRFS info (device loop2): enabling free space tree [ 2015.266916][T21759] BTRFS info (device loop2): enabling auto defrag [ 2015.266937][T21759] BTRFS info (device loop2): use lzo compression, level 1 [ 2015.266958][T21759] BTRFS info (device loop2): max_inline set to 4096 [ 2015.450638][ T5743] usb 5-1: USB disconnect, device number 26 [ 2015.726461][T21787] loop4: detected capacity change from 0 to 2048 [ 2015.738926][T14811] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2015.812668][T21787] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2018.008486][ T5759] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 2018.158039][ T5759] usb 8-1: Using ep0 maxpacket: 8 [ 2018.158772][ T5759] usb 8-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2018.162743][ T5759] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2018.162796][ T5759] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.167329][ T5759] usb 8-1: config 0 descriptor?? [ 2018.300085][T21828] bond2: invalid ARP target 0.0.0.0 specified for addition [ 2018.300116][T21828] bond2: option arp_ip_target: invalid value (0) [ 2018.466221][ T5759] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2018.998535][ T5759] usb 8-1: USB disconnect, device number 30 [ 2020.520702][T21828] bond2 (unregistering): Released all slaves [ 2020.946470][T21849] fuse: fd is not a fuse device [ 2022.855768][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 2022.866676][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 2023.185265][T21901] fuse: fd is not a fuse device [ 2024.164961][T21912] kvm: user requested TSC rate below hardware speed [ 2024.165267][T21912] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 2024.283451][T21918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3569'. [ 2024.283553][T21918] tipc: Resetting bearer [ 2024.375459][T21918] tipc: Disabling bearer [ 2024.435557][ T5759] infiniband s`z1: ib_query_port failed (-19) [ 2024.536508][T21927] tipc: Started in network mode [ 2024.536543][T21927] tipc: Node identity ac14142f, cluster identity 4711 [ 2024.536805][T21927] tipc: New replicast peer: 127.0.0.1 [ 2024.537621][T21927] tipc: Enabled bearer , priority 10 [ 2024.551082][T21927] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 2024.658692][T21929] rxe_eth0 speed is unknown, defaulting to 1000 [ 2024.666573][T14076] smbdirect: ib_dev[s`z1] removed [ 2024.848125][T13598] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 2025.000760][T13598] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 2025.004135][T13598] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2025.035999][T13598] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.036029][T13598] usb 8-1: Product: syz [ 2025.036044][T13598] usb 8-1: Manufacturer: syz [ 2025.036060][T13598] usb 8-1: SerialNumber: syz [ 2025.211841][T21939] loop4: detected capacity change from 0 to 128 [ 2025.825679][ T5759] tipc: Node number set to 2886997039 [ 2025.888081][ T32] audit: type=1800 audit(2000001325.502:6152): pid=21939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3578" name="bus" dev="loop4" ino=228 res=0 errno=-22 [ 2025.888146][ T32] audit: type=1804 audit(2000001325.512:6153): pid=21939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3578" name="/newroot/407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=228 res=1 errno=0 [ 2026.103049][T21943] loop2: detected capacity change from 0 to 256 [ 2026.137698][T21943] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 2026.184117][T21943] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 2026.184582][ T32] audit: type=1800 audit(2000001325.832:6154): pid=21943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3580" name="file1" dev="loop2" ino=230 res=0 errno=-22 [ 2026.187662][T21945] loop4: detected capacity change from 0 to 128 [ 2026.685575][T13598] cdc_ncm 8-1:1.0: failed to get mac address [ 2026.897470][T13598] cdc_ncm 8-1:1.0: bind() failure [ 2027.056621][T13598] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2027.059087][T13598] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2027.061746][T13598] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 2027.135619][T13598] usb 8-1: USB disconnect, device number 31 [ 2027.952156][T21966] overlayfs: failed to clone lowerpath [ 2029.132357][T21974] loop4: detected capacity change from 0 to 2048 [ 2029.156106][T21974] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2029.424933][T21983] loop2: detected capacity change from 0 to 128 [ 2029.537050][T21983] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2029.541944][T21983] ext4 filesystem being mounted at /378/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2029.583901][T21983] syz.2.3593 (pid 21983) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 2029.785471][T14811] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2030.414154][T21987] loop4: detected capacity change from 0 to 32768 [ 2030.655201][T21987] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2031.615018][T21987] XFS (loop4): Ending clean mount [ 2032.314817][T15084] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2032.441492][ T5759] kernel read not supported for file [fscontext] (pid: 5759 comm: kworker/1:4) [ 2032.530575][T22039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'. [ 2032.845737][T22046] net_ratelimit: 3320 callbacks suppressed [ 2032.845759][T22046] ip_tables: iptables: counters copy to user failed while replacing table [ 2032.891922][T22048] loop2: detected capacity change from 0 to 128 [ 2032.905126][T22048] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 2034.669879][T22062] random: crng reseeded on system resumption [ 2034.722327][T22062] Unrecognized hibernate image header format! [ 2034.722342][T22062] PM: hibernation: Image mismatch: architecture specific data [ 2034.749962][T22049] rxe_eth0 speed is unknown, defaulting to 1000 [ 2036.023981][T22082] FAULT_INJECTION: forcing a failure. [ 2036.023981][T22082] name failslab, interval 1, probability 0, space 0, times 0 [ 2036.024020][T22082] CPU: 0 UID: 0 PID: 22082 Comm: syz.2.3624 Tainted: G L syzkaller #0 PREEMPT(full) [ 2036.024052][T22082] Tainted: [L]=SOFTLOCKUP [ 2036.024061][T22082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2036.024075][T22082] Call Trace: [ 2036.024085][T22082] [ 2036.024095][T22082] dump_stack_lvl+0xe8/0x150 [ 2036.024137][T22082] should_fail_ex+0x3eb/0x540 [ 2036.024179][T22082] should_failslab+0xa8/0x100 [ 2036.024216][T22082] __kmalloc_cache_noprof+0x9e/0x600 [ 2036.024245][T22082] ? ip6addrlbl_add+0x137/0xae0 [ 2036.024364][T22082] ? ip6addrlbl_add+0x137/0xae0 [ 2036.024393][T22082] ip6addrlbl_add+0x137/0xae0 [ 2036.024433][T22082] ip6addrlbl_net_init+0x164/0x3d0 [ 2036.024461][T22082] ops_init+0x35d/0x5d0 [ 2036.024540][T22082] setup_net+0x118/0x350 [ 2036.024564][T22082] ? __pfx_setup_net+0x10/0x10 [ 2036.024586][T22082] ? down_read_killable+0x1b6/0x3b0 [ 2036.024618][T22082] ? __ns_common_init+0x384/0x590 [ 2036.024643][T22082] copy_net_ns+0x536/0x770 [ 2036.024670][T22082] create_new_namespaces+0x3f0/0x6b0 [ 2036.024706][T22082] ? security_capable+0x7e/0x2c0 [ 2036.024743][T22082] unshare_nsproxy_namespaces+0x144/0x190 [ 2036.024779][T22082] ksys_unshare+0x532/0x890 [ 2036.024816][T22082] ? __pfx_ksys_unshare+0x10/0x10 [ 2036.024853][T22082] ? rcu_is_watching+0x16/0xb0 [ 2036.024897][T22082] __x64_sys_unshare+0x38/0x50 [ 2036.024940][T22082] do_syscall_64+0x166/0x520 [ 2036.024967][T22082] ? trace_irq_disable+0x3b/0x140 [ 2036.024998][T22082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2036.025024][T22082] ? clear_bhb_loop+0x70/0xc0 [ 2036.025052][T22082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2036.025073][T22082] RIP: 0033:0x7f00edb9f559 [ 2036.025095][T22082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2036.025116][T22082] RSP: 002b:00007f00eead1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2036.025139][T22082] RAX: ffffffffffffffda RBX: 00007f00ede25fa0 RCX: 00007f00edb9f559 [ 2036.025157][T22082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2036.025170][T22082] RBP: 00007f00edc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 2036.025184][T22082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2036.025199][T22082] R13: 00007f00ede26038 R14: 00007f00ede25fa0 R15: 00007ffe326bd9a8 [ 2036.025237][T22082] [ 2036.206755][T22087] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3625'. [ 2036.207072][T22087] tipc: Resetting bearer [ 2036.316273][T22088] FAULT_INJECTION: forcing a failure. [ 2036.316273][T22088] name failslab, interval 1, probability 0, space 0, times 0 [ 2036.316308][T22088] CPU: 0 UID: 0 PID: 22088 Comm: syz.7.3626 Tainted: G L syzkaller #0 PREEMPT(full) [ 2036.316336][T22088] Tainted: [L]=SOFTLOCKUP [ 2036.316344][T22088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2036.316357][T22088] Call Trace: [ 2036.316365][T22088] [ 2036.316375][T22088] dump_stack_lvl+0xe8/0x150 [ 2036.316414][T22088] should_fail_ex+0x3eb/0x540 [ 2036.316451][T22088] should_failslab+0xa8/0x100 [ 2036.316483][T22088] __kvmalloc_node_noprof+0x171/0x820 [ 2036.316512][T22088] ? __kvmalloc_node_noprof+0x340/0x820 [ 2036.316538][T22088] ? bpf_compute_postorder+0xd3/0x9a0 [ 2036.316564][T22088] ? bpf_compute_postorder+0xd3/0x9a0 [ 2036.316598][T22088] bpf_compute_postorder+0xd3/0x9a0 [ 2036.316626][T22088] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 2036.316647][T22088] ? check_unwind_insns+0x670/0x910 [ 2036.316679][T22088] bpf_check+0x29cb/0x3530 [ 2036.316711][T22088] ? ktime_get_with_offset+0x93/0x2d0 [ 2036.316739][T22088] ? ktime_get_with_offset+0x93/0x2d0 [ 2036.316766][T22088] ? __pfx_bpf_check+0x10/0x10 [ 2036.316789][T22088] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2036.316819][T22088] bpf_prog_load+0x158f/0x1d60 [ 2036.316852][T22088] ? __pfx_bpf_prog_load+0x10/0x10 [ 2036.316899][T22088] ? __might_fault+0xaf/0x130 [ 2036.316945][T22088] __sys_bpf+0xd86/0xe00 [ 2036.316987][T22088] ? __pfx___sys_bpf+0x10/0x10 [ 2036.317027][T22088] ? do_futex+0x3e7/0x4e0 [ 2036.317080][T22088] ? rcu_is_watching+0x16/0xb0 [ 2036.317118][T22088] __x64_sys_bpf+0xba/0xd0 [ 2036.317152][T22088] do_syscall_64+0x166/0x520 [ 2036.317179][T22088] ? trace_irq_disable+0x3b/0x140 [ 2036.317207][T22088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2036.317229][T22088] ? clear_bhb_loop+0x70/0xc0 [ 2036.317256][T22088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2036.317277][T22088] RIP: 0033:0x7f815f19f559 [ 2036.317298][T22088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2036.317317][T22088] RSP: 002b:00007f8160142028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2036.317341][T22088] RAX: ffffffffffffffda RBX: 00007f815f425fa0 RCX: 00007f815f19f559 [ 2036.317358][T22088] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 2036.317371][T22088] RBP: 00007f815f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 2036.317385][T22088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2036.317399][T22088] R13: 00007f815f426038 R14: 00007f815f425fa0 R15: 00007ffca17ec0d8 [ 2036.317434][T22088] [ 2036.592357][T22087] tipc: Disabling bearer [ 2036.655898][T22085] siw: device registration error -23 [ 2037.164089][T22108] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2037.249648][T22110] 9p: Bad value for 'rfdno' [ 2037.675671][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.675758][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.202056][ T5992] IPVS: starting estimator thread 0... [ 2038.300136][T22120] IPVS: using max 24 ests per chain, 57600 per kthread [ 2038.327378][T22124] overlayfs: failed to clone upperpath [ 2038.470003][T22126] bridge_slave_0: invalid flags given to default FDB implementation [ 2038.664130][T22132] siw: device registration error -23 [ 2038.665508][T22132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3643'. [ 2038.793918][T22136] FAULT_INJECTION: forcing a failure. [ 2038.793918][T22136] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.793957][T22136] CPU: 0 UID: 0 PID: 22136 Comm: syz.7.3642 Tainted: G L syzkaller #0 PREEMPT(full) [ 2038.793989][T22136] Tainted: [L]=SOFTLOCKUP [ 2038.793997][T22136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2038.794012][T22136] Call Trace: [ 2038.794020][T22136] [ 2038.794031][T22136] dump_stack_lvl+0xe8/0x150 [ 2038.794071][T22136] should_fail_ex+0x3eb/0x540 [ 2038.794114][T22136] should_failslab+0xa8/0x100 [ 2038.794153][T22136] __kmalloc_cache_noprof+0x9e/0x600 [ 2038.794184][T22136] ? ip6addrlbl_add+0x137/0xae0 [ 2038.794213][T22136] ? ip6addrlbl_add+0x137/0xae0 [ 2038.794254][T22136] ip6addrlbl_add+0x137/0xae0 [ 2038.794295][T22136] ip6addrlbl_net_init+0x12c/0x3d0 [ 2038.794326][T22136] ops_init+0x35d/0x5d0 [ 2038.794364][T22136] setup_net+0x118/0x350 [ 2038.794390][T22136] ? __pfx_setup_net+0x10/0x10 [ 2038.794414][T22136] ? down_read_killable+0x1b6/0x3b0 [ 2038.794449][T22136] ? __ns_common_init+0x384/0x590 [ 2038.794476][T22136] copy_net_ns+0x536/0x770 [ 2038.794515][T22136] create_new_namespaces+0x3f0/0x6b0 [ 2038.794551][T22136] ? security_capable+0x7e/0x2c0 [ 2038.794588][T22136] unshare_nsproxy_namespaces+0x144/0x190 [ 2038.794625][T22136] ksys_unshare+0x532/0x890 [ 2038.794664][T22136] ? __pfx_ksys_unshare+0x10/0x10 [ 2038.794700][T22136] ? rcu_is_watching+0x16/0xb0 [ 2038.794746][T22136] __x64_sys_unshare+0x38/0x50 [ 2038.794779][T22136] do_syscall_64+0x166/0x520 [ 2038.794807][T22136] ? trace_irq_disable+0x3b/0x140 [ 2038.794836][T22136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2038.794859][T22136] ? clear_bhb_loop+0x70/0xc0 [ 2038.794887][T22136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2038.794909][T22136] RIP: 0033:0x7f815f19f559 [ 2038.794931][T22136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2038.794951][T22136] RSP: 002b:00007f8160142028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2038.794975][T22136] RAX: ffffffffffffffda RBX: 00007f815f425fa0 RCX: 00007f815f19f559 [ 2038.794992][T22136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2038.795006][T22136] RBP: 00007f815f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 2038.795020][T22136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2038.795034][T22136] R13: 00007f815f426038 R14: 00007f815f425fa0 R15: 00007ffca17ec0d8 [ 2038.795071][T22136] [ 2039.183079][T22142] fuse: fd is not a fuse device [ 2039.426729][T22150] loop7: detected capacity change from 0 to 512 [ 2040.117907][T22150] EXT4-fs error (device loop7): ext4_iget_extra_inode:6027: inode #15: comm syz.7.3652: corrupted in-inode xattr: invalid ea_ino [ 2040.118095][T22150] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 2040.118408][T22150] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.3652: couldn't read orphan inode 15 (err -117) [ 2040.118437][T22150] loop7: lost filesystem error report for type 5 error -117 [ 2040.177564][T22150] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2040.555972][T22172] siw: device registration error -23 [ 2040.563709][T22172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3663'. [ 2040.573323][ T5759] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2040.702612][T13411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2040.718667][ T5759] usb 3-1: Using ep0 maxpacket: 16 [ 2040.719478][ T5759] usb 3-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2040.720599][ T5759] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2040.720629][ T5759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2040.722902][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.722927][ T5759] usb 3-1: Product: syz [ 2040.722943][ T5759] usb 3-1: Manufacturer: syz [ 2040.722957][ T5759] usb 3-1: SerialNumber: syz [ 2040.793436][ T5759] usb 3-1: config 0 descriptor?? [ 2040.797389][ T5759] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2040.797424][ T5759] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 2041.334143][T22179] loop4: detected capacity change from 0 to 32768 [ 2041.336279][T22179] BTRFS warning: excessive commit interval 43283, use with care [ 2041.337423][T22179] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3665 (22179) [ 2041.405911][T22179] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2041.405955][T22179] BTRFS info (device loop4): using sha256 checksum algorithm [ 2041.427338][ T5759] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2041.434742][ T5759] em28xx 3-1:0.0: Config register raw data: 0xf7 [ 2041.434766][ T5759] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 2041.434783][ T5759] em28xx 3-1:0.0: No AC97 audio processor [ 2041.554053][T22179] BTRFS info (device loop4): rebuilding free space tree [ 2041.841728][T22179] BTRFS info (device loop4): turning on sync discard [ 2041.841790][T22179] BTRFS info (device loop4): enabling free space tree [ 2041.841811][T22179] BTRFS info (device loop4): force clearing of disk cache [ 2041.845866][ T5759] usb 3-1: USB disconnect, device number 29 [ 2042.524081][T22214] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3674'. [ 2042.539867][ T32] audit: type=1800 audit(1700000007.500:6155): pid=22213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3665" name="file1" dev="loop4" ino=260 res=0 errno=-22 [ 2042.655574][T14076] ------------[ cut here ]------------ [ 2042.655592][T14076] btrfs_abort_should_print_stack(__error) [ 2042.655611][T14076] WARNING: fs/btrfs/block-group.c:3881 at btrfs_chunk_alloc+0x1501/0x1550, CPU#0: kworker/u8:29/14076 [ 2042.679089][T14076] Modules linked in: [ 2042.683072][T14076] CPU: 0 UID: 0 PID: 14076 Comm: kworker/u8:29 Tainted: G L syzkaller #0 PREEMPT(full) [ 2042.695195][T14076] Tainted: [L]=SOFTLOCKUP [ 2042.699698][T14076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2042.709847][T14076] Workqueue: events_unbound btrfs_async_reclaim_data_space [ 2042.717196][T14076] RIP: 0010:btrfs_chunk_alloc+0x1501/0x1550 [ 2042.723284][T14076] Code: c1 0f 8c 79 fa ff ff 48 8b 7c 24 10 e8 c8 c9 f1 fd e9 6a fa ff ff e8 3e f8 7a fd eb 10 e8 37 f8 7a fd eb 09 e8 30 f8 7a fd 90 <0f> 0b 90 89 e9 f7 d9 e9 63 fb ff ff e8 1e f8 7a fd eb 10 e8 17 f8 [ 2042.745305][T14076] RSP: 0018:ffffc9000344f7a0 EFLAGS: 00010293 [ 2042.751819][T14076] RAX: ffffffff844e2240 RBX: ffff888065094001 RCX: ffff88802ca38000 [ 2042.759888][T14076] RDX: 0000000000000000 RSI: ffffffff90621eb0 RDI: 00000000fffffffe [ 2042.767904][T14076] RBP: 00000000fffffffe R08: ffff88802ca38000 R09: 0000000000000003 [ 2042.775991][T14076] R10: 00000000fffffffb R11: 0000000000000000 R12: 0000000000000001 [ 2042.784042][T14076] R13: dffffc0000000000 R14: ffff888013bcc178 R15: 00000000fffffffe [ 2042.792131][T14076] FS: 0000000000000000(0000) GS:ffff88812361c000(0000) knlGS:0000000000000000 [ 2042.801196][T14076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2042.807834][T14076] CR2: 00007f8e04df84b8 CR3: 0000000087df0000 CR4: 00000000003526f0 [ 2042.817289][T14076] Call Trace: [ 2042.820668][T14076] [ 2042.823648][T14076] ? btrfs_get_alloc_profile+0xa28/0xc60 [ 2042.829389][T14076] flush_space+0x3df/0xde0 [ 2042.833890][T14076] ? __pfx_flush_space+0x10/0x10 [ 2042.839337][T14076] ? do_raw_spin_unlock+0xf5/0x200 [ 2042.844516][T14076] do_async_reclaim_data_space+0x137/0x550 [ 2042.850740][T14076] ? process_scheduled_works+0x97a/0x1630 [ 2042.856521][T14076] btrfs_async_reclaim_data_space+0x41/0x90 [ 2042.862556][T14076] process_scheduled_works+0xc3d/0x1630 [ 2042.868289][T14076] ? __pfx_process_scheduled_works+0x10/0x10 [ 2042.874362][T14076] ? assign_work+0x3cf/0x5d0 [ 2042.879071][T14076] worker_thread+0xa47/0xfb0 [ 2042.883750][T14076] kthread+0x38b/0x480 [ 2042.887874][T14076] ? __pfx_worker_thread+0x10/0x10 [ 2042.893098][T14076] ? __pfx_kthread+0x10/0x10 [ 2042.897740][T14076] ret_from_fork+0x514/0xb70 [ 2042.902472][T14076] ? save_fpregs_to_fpstate+0x176/0x200 [ 2042.908138][T14076] ? __pfx_ret_from_fork+0x10/0x10 [ 2042.913300][T14076] ? __switch_to+0xc78/0x1410 [ 2042.918103][T14076] ? __pfx_kthread+0x10/0x10 [ 2042.922783][T14076] ret_from_fork_asm+0x1a/0x30 [ 2042.927615][T14076] [ 2042.930910][T14076] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2042.938238][T14076] CPU: 0 UID: 0 PID: 14076 Comm: kworker/u8:29 Tainted: G L syzkaller #0 PREEMPT(full) [ 2042.949576][T14076] Tainted: [L]=SOFTLOCKUP [ 2042.953937][T14076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2042.964026][T14076] Workqueue: events_unbound btrfs_async_reclaim_data_space [ 2042.971285][T14076] Call Trace: [ 2042.974611][T14076] [ 2042.977575][T14076] vpanic+0x26f/0x710 [ 2042.981596][T14076] panic+0xc5/0xd0 [ 2042.985354][T14076] ? __pfx_panic+0x10/0x10 [ 2042.989817][T14076] ? ret_from_fork_asm+0x1a/0x30 [ 2042.994803][T14076] __warn+0x315/0x4c0 [ 2042.998816][T14076] ? btrfs_chunk_alloc+0x1501/0x1550 [ 2043.004162][T14076] ? btrfs_chunk_alloc+0x1501/0x1550 [ 2043.009498][T14076] __report_bug+0x276/0x570 [ 2043.014143][T14076] ? btrfs_chunk_alloc+0x1501/0x1550 [ 2043.019485][T14076] ? __pfx___report_bug+0x10/0x10 [ 2043.024562][T14076] ? kfree+0x1c5/0x650 [ 2043.028669][T14076] ? btrfs_chunk_alloc_add_chunk_item+0xac7/0xfc0 [ 2043.035263][T14076] ? btrfs_chunk_alloc_add_chunk_item+0xb5e/0xfc0 [ 2043.041745][T14076] ? btrfs_chunk_alloc+0x1501/0x1550 [ 2043.047076][T14076] report_bug+0x16b/0x220 [ 2043.051466][T14076] ? btrfs_chunk_alloc+0x1501/0x1550 [ 2043.056798][T14076] ? btrfs_chunk_alloc+0x1503/0x1550 [ 2043.062138][T14076] handle_bug+0x9c/0x200 [ 2043.066453][T14076] exc_invalid_op+0x1a/0x50 [ 2043.071030][T14076] asm_exc_invalid_op+0x1a/0x20 [ 2043.075929][T14076] RIP: 0010:btrfs_chunk_alloc+0x1501/0x1550 [ 2043.081871][T14076] Code: c1 0f 8c 79 fa ff ff 48 8b 7c 24 10 e8 c8 c9 f1 fd e9 6a fa ff ff e8 3e f8 7a fd eb 10 e8 37 f8 7a fd eb 09 e8 30 f8 7a fd 90 <0f> 0b 90 89 e9 f7 d9 e9 63 fb ff ff e8 1e f8 7a fd eb 10 e8 17 f8 [ 2043.101530][T14076] RSP: 0018:ffffc9000344f7a0 EFLAGS: 00010293 [ 2043.107644][T14076] RAX: ffffffff844e2240 RBX: ffff888065094001 RCX: ffff88802ca38000 [ 2043.115654][T14076] RDX: 0000000000000000 RSI: ffffffff90621eb0 RDI: 00000000fffffffe [ 2043.123666][T14076] RBP: 00000000fffffffe R08: ffff88802ca38000 R09: 0000000000000003 [ 2043.131680][T14076] R10: 00000000fffffffb R11: 0000000000000000 R12: 0000000000000001 [ 2043.139684][T14076] R13: dffffc0000000000 R14: ffff888013bcc178 R15: 00000000fffffffe [ 2043.147733][T14076] ? btrfs_chunk_alloc+0x1500/0x1550 [ 2043.153094][T14076] ? btrfs_get_alloc_profile+0xa28/0xc60 [ 2043.158785][T14076] flush_space+0x3df/0xde0 [ 2043.163274][T14076] ? __pfx_flush_space+0x10/0x10 [ 2043.168272][T14076] ? do_raw_spin_unlock+0xf5/0x200 [ 2043.173429][T14076] do_async_reclaim_data_space+0x137/0x550 [ 2043.179348][T14076] ? process_scheduled_works+0x97a/0x1630 [ 2043.185128][T14076] btrfs_async_reclaim_data_space+0x41/0x90 [ 2043.191079][T14076] process_scheduled_works+0xc3d/0x1630 [ 2043.196738][T14076] ? __pfx_process_scheduled_works+0x10/0x10 [ 2043.202806][T14076] ? assign_work+0x3cf/0x5d0 [ 2043.207465][T14076] worker_thread+0xa47/0xfb0 [ 2043.212166][T14076] kthread+0x38b/0x480 [ 2043.216282][T14076] ? __pfx_worker_thread+0x10/0x10 [ 2043.221733][T14076] ? __pfx_kthread+0x10/0x10 [ 2043.226395][T14076] ret_from_fork+0x514/0xb70 [ 2043.231028][T14076] ? save_fpregs_to_fpstate+0x176/0x200 [ 2043.236682][T14076] ? __pfx_ret_from_fork+0x10/0x10 [ 2043.241838][T14076] ? __switch_to+0xc78/0x1410 [ 2043.246570][T14076] ? __pfx_kthread+0x10/0x10 [ 2043.251199][T14076] ret_from_fork_asm+0x1a/0x30 [ 2043.256016][T14076] [ 2043.259750][T14076] Kernel Offset: disabled [ 2043.264102][T14076] Rebooting in 86400 seconds..