last executing test programs: 4m0.791638421s ago: executing program 0 (id=91): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) ptrace$ARCH_MAP_VDSO_64(0x1e, r4, 0x7, 0x2003) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) syz_open_dev$usbfs(0x0, 0x76, 0x101301) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x3, 0xff, 0x66c3}, 0x20) r7 = fcntl$dupfd(r1, 0x406, r0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x10) inotify_add_watch(r8, &(0x7f0000000000)='./file0\x00', 0x4000828) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000000)={0x20000000}) 3m55.793879848s ago: executing program 0 (id=102): socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x5}}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 3m52.036368513s ago: executing program 0 (id=109): ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000300)) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0}, 0x67}], 0x1, 0x40000102, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r2, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000000)="836b", 0x2, 0x840, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x3, 0x2, 0x3, 0x2, 0x0, 0xffa6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffcc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x73c0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000600000000140000", @ANYRES32, @ANYBLOB="0000000000000000000400000000001900000000", @ANYRES32=0x0, @ANYRES32], 0xfffffffffffffd41) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r4}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x15a}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x99}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7fff}], 0x98) write(r5, &(0x7f0000000000)='7', 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, 0x0) fanotify_init(0x40, 0x80000) 3m48.281639686s ago: executing program 0 (id=117): symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fspick(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) getgroups(0x27, &(0x7f0000002540)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, 0x5405, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7a680000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000100)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000140)=ANY=[], 0xd) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 3m46.830258953s ago: executing program 0 (id=119): socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x5}}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 3m44.422458938s ago: executing program 0 (id=126): syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m42.397752075s ago: executing program 32 (id=126): syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m0.885091261s ago: executing program 4 (id=221): r0 = getpid() syz_open_dev$I2C(0x0, 0x1, 0x2a100) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x1800, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 3m0.23666116s ago: executing program 4 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f826e376464f30f11745a2f660fc73166edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0xaaaaaaaaaaaad67, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x89}, [@ldst={0x5}]}, 0x0, 0x5}, 0x94) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xffffffffffffffa4}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$tun(r2, &(0x7f00000000c0)={@void, @void, @eth={@empty, @broadcast, @void, {@mpls_mc={0x8848, {[{0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xfff09}], @generic="ae6b74df51b1f21c8b6028aca23d14413ae9340a4df9f9ade2a894dba3fa8d5f537fecbee5f9de2f6976012b96cf41fa3225409ad9e6d41fea0072bfce2f9ea1faf19171b1aa1f3faf17fa688e8143246abc3bfd2dd307cb10aa6b79ddb6ead4d8ef182731f54c4b0f6cca142ca6398066a81160ab651cf11b9ae7ac1fe47f3ad0033ab6b6424c4fee5f7b2d70515329fb0a864116328a95a73b6e2e0a3306b2015a6a08e3bc2ae818762fc2c0d83a4fdf91cf5598c0"}}}}}, 0xd0) 2m59.01111056s ago: executing program 4 (id=226): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'bridge_slave_1\x00', {0x2, 0x4e21, @private=0xa010102}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @remote}, 0x61) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="02e51e516374"}, 0x10) 2m58.750878598s ago: executing program 4 (id=228): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f41d6a0ae6dddfbd1ce5d29c2ee5e020000000000000037ff0edf110ff411761fc2eb4b794060e667dfafaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542d6393ba79551e33c8e1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359568e22da4c6681009e53000000005700", [0x8, 0x9]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x105) (fail_nth: 1) pwritev2(r0, 0x0, 0x0, 0x2400, 0x7, 0x13) 2m53.257921694s ago: executing program 4 (id=231): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) io_cancel(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x400101e0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = dup(r0) syz_ublk_setup_queues(r4, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m49.813417903s ago: executing program 4 (id=243): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) io_cancel(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x400101e0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = dup(r0) syz_ublk_setup_queues(r2, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m49.165942292s ago: executing program 33 (id=243): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) io_cancel(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x400101e0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = dup(r0) syz_ublk_setup_queues(r2, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1m14.293754669s ago: executing program 2 (id=502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000100)=0x20b, 0x4) sendmmsg$inet6(r8, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000048c0)="04", 0x1}], 0x1}}], 0x1, 0x4000001) r9 = dup(r8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r9) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x0) 1m8.706832628s ago: executing program 2 (id=512): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="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", 0xf96, 0x0) 1m7.462103951s ago: executing program 2 (id=515): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x1c8983, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x8, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x40046607, &(0x7f00000003c0)={@id, 0x10, 0x0, '\x00', @d}) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r1, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") 1m4.946265552s ago: executing program 2 (id=518): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000440)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@anchor={'anchor', 0x3d, 0x7}}, {@noadinicb}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@uid_ignore}, {@mode={'mode', 0x3d, 0x8009}}, {@dmode={'dmode', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@undelete}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x101}}]}, 0x1, 0xc6d, &(0x7f0000001980)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000380)='./bus\x00') sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f00040600666c6167730007020000000002000000000200", 0x39) 1m3.431254942s ago: executing program 2 (id=520): socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @generic={0xc, 0x8, 0x8, 0x5}, @alu={0x7, 0x0, 0x9, 0x9, 0x8, 0x4}, @jmp={0x5, 0x0, 0x9, 0x4, 0xb, 0x6, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x81, 0xfe, &(0x7f0000000500)=""/254, 0x41000, 0x80, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x8, 0x1ff, 0x81}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0xffffffffffffffff, r4, r2, r0], &(0x7f0000000800)=[{0x2, 0x5, 0xd, 0x5}, {0x4, 0x4, 0x3, 0xc}, {0x0, 0x3, 0xf, 0x4}], 0x10, 0x10000}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) syz_open_procfs(0x0, &(0x7f0000000300)='sessionid\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f779000f20e035000001000f22e066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x50}], 0x1, 0x43, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4008, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x146017}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 1m1.418494801s ago: executing program 2 (id=524): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x803}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000340)="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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e02100418"], 0x7) getpgrp(0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x5db) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f0000000600)={{@_ha_fsid={[0x9, 0xfffffff7]}, {0xa, 0x80, 0x101, 0x9}}, {{[0x3, 0xab85, 0x41d, 0x400]}, 0x0, 0x3, 0x5, 0x0, &(0x7f00000004c0)=[{{@align=0x7fffffffffffffff, {0x1, 0x6, 0x10000, 0x9}}, 0x3, 0x0, '!@\x00'}, {{@_ha_fsid={[0x92, 0x5]}, {0xbd, 0x4, 0x0, 0xb29b}}, 0x1, 0x0, '\x00'}, {{@_ha_fsid={[0x0, 0x7]}, {0x5, 0x6, 0x2, 0x8000}}, 0xfffffffa, 0x0, '\x00'}, {{@align=0x3ff800000000000, {0x81, 0x5, 0x2, 0x8}}, 0x5, 0x0, '-\x00'}, {{@align=0x6, {0x6, 0x8, 0xfb28, 0x4}}, 0x7, 0x0, 'securityfs\x00'}, {{@align, {0x8, 0x7, 0x2, 0x48}}, 0x8, 0x0, 'rpc_pipefs\x00'}, {{@align=0x5, {0x1, 0x3, 0x3, 0x3}}, 0x6, 0x0, '\\:!\x00'}]}}) write(r1, &(0x7f0000000200)='measure u', 0x9) 1m0.8772411s ago: executing program 34 (id=524): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x803}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000340)="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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e02100418"], 0x7) getpgrp(0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x5db) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f0000000600)={{@_ha_fsid={[0x9, 0xfffffff7]}, {0xa, 0x80, 0x101, 0x9}}, {{[0x3, 0xab85, 0x41d, 0x400]}, 0x0, 0x3, 0x5, 0x0, &(0x7f00000004c0)=[{{@align=0x7fffffffffffffff, {0x1, 0x6, 0x10000, 0x9}}, 0x3, 0x0, '!@\x00'}, {{@_ha_fsid={[0x92, 0x5]}, {0xbd, 0x4, 0x0, 0xb29b}}, 0x1, 0x0, '\x00'}, {{@_ha_fsid={[0x0, 0x7]}, {0x5, 0x6, 0x2, 0x8000}}, 0xfffffffa, 0x0, '\x00'}, {{@align=0x3ff800000000000, {0x81, 0x5, 0x2, 0x8}}, 0x5, 0x0, '-\x00'}, {{@align=0x6, {0x6, 0x8, 0xfb28, 0x4}}, 0x7, 0x0, 'securityfs\x00'}, {{@align, {0x8, 0x7, 0x2, 0x48}}, 0x8, 0x0, 'rpc_pipefs\x00'}, {{@align=0x5, {0x1, 0x3, 0x3, 0x3}}, 0x6, 0x0, '\\:!\x00'}]}}) write(r1, &(0x7f0000000200)='measure u', 0x9) 16.94422148s ago: executing program 7 (id=623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@getchain={0x64, 0x66, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xa, 0x4}, {0x0, 0xc}, {0x3, 0x1}}, [{0x8, 0xb, 0xf7e5}, {0x8, 0xb, 0x40}, {0x8}, {0x8, 0xb, 0x100001}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x8000}]}, 0x64}, 0x1, 0x0, 0x0, 0x88c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="6d6ff16901dc11fffe8800000e63142c213d0a527cf1dd2c2fc74c012c06bc9e8100000000000000000084000001fc01000000000000cf54cb21000000004e254e2101dc9078ee373935ef0f8da10b47000507b002", @ANYBLOB="ae92472a02b583812780e338055667511426583be3e4ba08a3ed3d556267a061d8f67562a95c819cbf308b744d9dc04275548803c3bec7a0f3d64c2eeeacead9a2dec754f5372d6b636b181c9aff33b61a24e2a7c235876386a8cfa9b34829e0b2d160efa682a52f93f8c1cc90c9797ae34c0cf45dda0a487c87e66668aedd169dcd7b8caafc52cb95a1d0d31b488727197abdacfd3b4d178f5fb9fdd9196c2d3bc46c463d440f8c94eba08f5abcaeeb64a534de455beaca1e3f72031ee1ab0cb8dab1b64418d2dbef3e48fbffab0c97a94ac958ee99fda34a057a2028eebb879aa0a026e60b60e659642cdea481cbef5fe0d2a41699991518e9111581", @ANYRESDEC=r9], 0x204) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x12, 0x60d, 0xf0, 0x202, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xfe], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xd0, 0xf0}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xae328689605bc686) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0xd, 0x9}, {0xffff, 0xb}, {0x4, 0xa}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x0, 0x6, 0x800, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x2, 0x10001, 0x6, 0x6}}, @TCA_CBS_PARMS={0x18, 0x1, {0x92, '\x00', 0xea4, 0x8, 0x4, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x87, '\x00', 0x9, 0x5, 0x1, 0x4}}]}}]}, 0x90}}, 0x4890) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) r12 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 14.819435866s ago: executing program 7 (id=629): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xe0f02, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000300)=ANY=[], 0x0) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r4, &(0x7f0000000000)="5a000300010003", 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000600)={0x0, &(0x7f0000000540)="f54a79c7fadde1ca45652c7de9fe604c0e3cc71962ab4a6d3526130fd878e8ec08e821a5234d19779cb17a97f838df8f626472dac9ef6e359555ad693b47d3794400aecbbd635dd58b68fa3f9f96fb4143221ee1e986aa53ede1d436c9bc978499313e9fe267bebaf17767d50accf548459a9032211ca6ba967b9ff17060a2c61db5b7b7c23effb5e83698ce2daae9ee7d409c2b606fa8de74f950fa15f1faaaeab5b78281f07a626c676ec1b5338361", 0xb0}) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) timer_create(0xfffffffc, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x7daa, 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=r4, @ANYRES32=r2, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x3, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000180)="63fced8e467a513d860000007c00", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) 13.021471356s ago: executing program 6 (id=632): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x9b2cd000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x1400, 0x0, 0x2, 0x1100, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x2, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x67) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf25000000000000000000000000000000000a0101010000000000000000000000004e2300004e2400000a0080205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b5070000000000000000000000000000060000000000000009000000000044000000000000000000ffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000000002060100000000000000080000004f070000"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505f719000000000000000000000000000000000064010100000075a13be6e6f193ff8583a6ad1102", @ANYRES64=r4, @ANYRESDEC=r7, @ANYRES32=r4], 0x38}}, 0x40408c0) 12.374884475s ago: executing program 6 (id=633): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="01000000"], 0x40) keyctl$describe(0x6, 0x0, &(0x7f0000000240)=""/155, 0x9b) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f00000043c0)=ANY=[], 0x2, 0x1a1, &(0x7f0000000000)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30bd, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000800000000000218110000159a410d2c11e387ea43b72115ffdf0ba23a77c3e54a984ff3b1fee1c7f3dc467cb173619f2bc98fc320d794074f9ea03c1f1f9303bad484a8eb5cd4510797af0d12c2046634d5815061421d1aa06ee42d0517ddec22c1c150004af23a7ea4a28f78fa118baf8055c29d583638fe6df529c84d0800ebd50a2a417089ad1b8ed429faca007220b5fa91eaf0ca9195a84125cbfb974a0a7c7c85eb8d5e0fcbc0e3bfba1915a8b823f7226705c5a61d3da572f6713f81e0c74c6b79e03ae1b227caee9aff", @ANYRES64=r8, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000236cab75183aad54898a8bacee259e5c008e51a0930000000000b702000000000000850000008600000018110000171b6d5c7ec98d90f1eea44d763e38aeac6a9efbd987be13e5a0bb73538955222548fcf60228718a7e37c309930c15b42440c95326853132155ff6cfd2792f60b660f4806266bf2af4562fabdd037dc2d53c83448b914c7fc17ce7a129", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r11, 0x7a0, &(0x7f0000000000)={@local}) r12 = socket$inet_icmp(0x2, 0x2, 0x1) close(r12) r13 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f00000003c0)={'geneve0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x40, 0x9, "336e4700a300"}}) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8100) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 11.872911417s ago: executing program 7 (id=634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000130a03000000000000000000050000000900020073797a310000000008000340000000060900010073797a30"], 0x34}}, 0x0) (fail_nth: 4) 11.187377524s ago: executing program 7 (id=636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@nointegrity}, {@usrquota}, {@errors_continue}, {@gid}, {}, {}, {@noquota}, {@quota}, {@errors_continue}, {@grpquota}]}, 0x24, 0x62d1, &(0x7f000000c880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0x8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984", 0x4}], 0x1}}], 0x1, 0x2090) faccessat(r1, &(0x7f0000000040)='./file1\x00', 0x64) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES32=r0], 0x34}}, 0x4000040) 10.958895045s ago: executing program 6 (id=637): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$MSR(&(0x7f0000000180), 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000140000032abd7000fbdbdd2502209a00", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x400c001}, 0x8004) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe000000007203"], 0x0}, 0x94) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x0, 0x4000000) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) memfd_create(0x0, 0xfb727c3cdf3aa4e9) io_submit(0x0, 0x0, 0x0) 10.941085416s ago: executing program 5 (id=638): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x10800, &(0x7f0000000140)="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", 0xff, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000003c0)="700addf0e6a6f9c45133fe563f9a403cbef8d16622df5c9dbd10fd5932463b187f39176ae525065df78b6973b5899cda929afd91ddd121f566957735d9fdebf4c54ed92fd23295f644f6") sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x41d9fda7) 10.552838504s ago: executing program 5 (id=639): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read$char_usb(r0, &(0x7f0000000100)=""/58, 0x3a) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) close(r2) pwritev(r1, &(0x7f0000000640), 0x2000000000000346, 0x9, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @main=@item_4={0x3, 0x0, 0xc, "ed8bb206"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "7488"}, @main=@item_4={0x3, 0x0, 0x8, "749e821c"}, @local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0xa, "09007a15"}, @main=@item_4={0x3, 0x0, 0xb, "a9fcd59c"}]}}, 0x0}, 0x0) 10.162552521s ago: executing program 1 (id=640): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x3, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) syz_open_procfs$namespace(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) unshare(0x28000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettimeofday(0x0, 0x0) r2 = syz_open_dev$sndpcmc(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4a3, 0x3ff, 0x401, 0xa, 0xffffffffffffc474, 0x1adc, 0x6, 0x0, 0x4, 0x1}) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) io_setup(0x81, 0x0) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='p', 0x300}]) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80984120, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0xdc, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1a}, {0xffff, 0xffff}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xf}, @qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x7}]}}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xe9, 0x0, 0xbe54, 0x0, 0x4, 0x101, 0x3}}, {0xa, 0x2, [0x5, 0x4, 0x3]}}, {{0x1c, 0x1, {0x92, 0x8, 0x8, 0x7, 0x1, 0x0, 0x4, 0x8}}, {0x14, 0x2, [0x5, 0x8, 0x2bf, 0x1ff, 0x7, 0xd, 0x9ca, 0x3]}}, {{0x1c, 0x1, {0x1, 0x0, 0xc, 0x1000, 0x1, 0x4, 0x80, 0x5}}, {0xe, 0x2, [0x7, 0x6, 0x9c48, 0xc279, 0x4]}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$9p_xen(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) msgget(0x2, 0x624) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000000)=0x5, 0x4) syz_emit_ethernet(0x97, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x400, {[@nop]}}}}}}}}, 0x0) flock(0xffffffffffffffff, 0x37b8297d3fbaacb3) 9.983956697s ago: executing program 1 (id=641): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e295f120460d780092820102030109021b0001020000000904"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 9.872819485s ago: executing program 3 (id=642): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) msgrcv(0x0, 0x0, 0x0, 0x1, 0x7000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) memfd_secret(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x23, 0x5ab9, 0x8, 0x0, 0x80, r2, 0x5, '\x00', r3, r1, 0x3, 0x1, 0x4}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x0, 0x4a, 0x0, 0x5, 0x200000}, 0x28) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000000)=0x1) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000040)={0xf0f046}) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r11, 0x4010ae68, &(0x7f0000000080)={0x100000, 0x100000, 0x1}) 9.774236733s ago: executing program 6 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) getpid() syz_clone3(&(0x7f0000001d00)={0x20000700, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9.178775049s ago: executing program 7 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0xfffffffe, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000500)={0x0, 0x1fffd, 0x800, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {}, 0x1f, r11, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffff"], 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x3d}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ioprio_get$uid(0x3, r1) 9.02350969s ago: executing program 3 (id=645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 8.693504742s ago: executing program 6 (id=646): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0xfffffffe, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) (fail_nth: 1) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000500)={0x0, 0x1fffd, 0x800, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {}, 0x1f, r11, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffff"], 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x3d}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ioprio_get$uid(0x3, r1) 8.615064345s ago: executing program 3 (id=647): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020240020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x0, 0x6, 0x3, "39dc4a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0xb, 0x2, "b39f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r2, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x7, 0x0, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x10001, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00006d9000/0x4000)=nil, 0x4000, 0xb635773f06ebbeeb, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./debug/regulator/regulator_summary\x00', &(0x7f00000000c0)={0x28102, 0x10}, 0x18) ioctl$UBLK_U_CMD_ADD_DEV(r2, 0xc0207504, &(0x7f0000000280)={0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x2, 0xe35, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4a}}) r8 = openat(r7, &(0x7f0000000040)='./debug/regulator/regulator_summary\x00', 0x802, 0x78) writev(r8, 0x0, 0x0) 7.000186003s ago: executing program 6 (id=648): setrlimit(0x6, &(0x7f0000000140)={0x2588, 0x2}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r1, 0x4, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000007301a400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:07.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='1', 0x1) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x4400000d, 0x200) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x40200, 0x1b) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) syz_usb_connect$uac3(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008410e4d5340000102030109029200030109200c080b0001010130f70904000000010130000a2401012e0003100000132403030000ff060004000000080004000a0011240806"], 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000240)={0x2, 0x2, 0x5f70, 0x80000000, 0xffff, 0xffffffff}) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000380)=ANY=[@ANYBLOB='map=off,nocompress\x00sbsector=0x0000000000000005,showassoc,session=0x0000000000000062,block=0x0000000000000400Amap=acorn,iocharset=iso8859-2,dmode=0x0000000000380000,showassoc,mode=0x0000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6663636f6e74658425b929c7b541993878743d73f46166665f752c7065726d696374696f2c0000"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x0) 6.90117118s ago: executing program 5 (id=649): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000002000000000000000800000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) pselect6(0x40, &(0x7f0000000140)={0x7fffffff, 0x5b03, 0x800, 0x81, 0xffff, 0x1, 0xd3, 0xffffffffffffffff}, &(0x7f0000000180)={0x4, 0x5, 0x5, 0x79eb, 0x80000000, 0x5, 0x7, 0x5}, &(0x7f00000003c0)={0x9, 0x800, 0x8, 0x10000000, 0x3, 0x6, 0x0, 0x5}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x7]}, 0x8}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x23, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000080000000000e04000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002800000018370000010000000000000000000000184b0000f9ffffff0000000000000000181b0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000f768feaa85000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000100)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x2, 0x1ff, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1], 0x0, 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000001c0), &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r1, &(0x7f0000000600), &(0x7f0000000840)=""/10, 0x4}, 0x20) 5.009050631s ago: executing program 1 (id=650): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x9, 0x0, @fd_index=0x4, 0x0, 0x0, 0x5, 0x0, 0x1}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000d40)={0x0, 0xdec0, 0x4000, 0x3, 0x293}, &(0x7f0000000fc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe198, 0x40000, 0x0, 0x3c6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc8ad, 0x4000, 0x1, 0xc3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5060, 0x4, 0x3, 0x186}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf8, 0x200, 0xfffffffe, 0x345}}], 0x4, &(0x7f0000003600)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x2, 0xac, 0x0, &(0x7f0000002600)=@buf_1k="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"}}, &(0x7f0000003680)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x1418, 0x1, 0x70bd25, 0x8000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x10000}]}, 0x18}}, 0x4008040) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x800000, &(0x7f0000000180)={[{@part={'part', 0x3d, 0x1}}, {@nodecompose}, {@barrier}, {@barrier}, {@part={'part', 0x3d, 0xc}}, {@nls={'nls', 0x3d, 'iso8859-3'}}, {@creator={'creator', 0x3d, "7f0e5bc8"}}, {@force}]}, 0x1, 0x5e5, &(0x7f0000000680)="$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") r2 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) open(&(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, 0x50) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3, 0x14, 0x3, 0x9, 0x46, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x723, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x9, 0x200, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6, 0xaf]}) write(r3, &(0x7f0000000000)="e7", 0x1) r5 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x6a, 0x3, 0x0, 0x4) rt_sigtimedwait(&(0x7f0000000040)={[0x1]}, 0x0, 0x0, 0x8) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x14) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) sendfile(r7, r6, 0x0, 0x783) sendfile(r2, r3, &(0x7f0000000300)=0x5, 0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="e5e95f16d1d020c041493d3eb49cbd69a801e60d9536391ef22cf9b8efd9054a376b667546a2c7a79cce5a67804b641fa2f296f27c02106f166fb2f95ea5669efcac7b09a5f2f658fbfb12357b4111282517ea7f18ad7796506ab0ff3f"], 0x30}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r9, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x345, 0x3a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 4.891084279s ago: executing program 3 (id=651): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="3300000008000102030405060101", 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, &(0x7f0000000140)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x10, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="d6359083441c2d9ff788bbf2fa51774d8ea0bae71dfc764e4eaa11f85cf5ad06b93a0efc3a8acad9964363facfbac6275727563e63b3a6fec9a7fc7ecf3fcc59500d3fb868ddb04c049e19885171db527cc5d5971af640339c726469847438cfa5c2127b262c757950ab4daaa092a9a86321b8", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x14) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) bind$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x1, @empty, 0x2, 0x3}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a40)='./file1\x00', 0x2800830, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x172, &(0x7f0000000ac0)="$eJzs2zGLE0EUB/C3Zk9zV10tFgs2VkGtLBU5QVxQlBRaKZw2dxIwzWpj8JPYWPjhBEmVQhgxC4nGSPDCZkPy+zV58N8h7xWTYQL78trbs9PB8M3gyTi6WRb53ShiksVxXIpO1EYBAOySSUrxPaWUrozi8HOklNruCABomvMfAPbPyvP/TkuNAQCNcf8HgP3z7PmLR/fK8uRpUXQjvo2qftWvP+v8wcPy5GYxdTxfNa6qfmeW36rz4s/8II7q/MvtpfnluHG9Xv8ru/+4XMiP4rT58QEAAGAv9IqZpff7Xu9feV399v/Awv09j6v5xsYAAP7D8P2Hs1fn56/f7XgR29HGNhUft6ON9YsfKaULLP/0dboD8lUPd6OFuQ7W/NIsItZro+1fJqBp802/6snDzTQEAAAAAAAAAAAAAAD8pdmXmTptjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABL/QwAAP//GahMlQ==") mknod$loop(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='.\x02\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x10}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000844}, 0x24) syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1ce, &(0x7f00000002c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.002366591s ago: executing program 5 (id=652): ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000300)) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0}, 0x67}], 0x1, 0x40000102, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r2, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000000)="836b", 0x2, 0x840, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x3, 0x2, 0x3, 0x2, 0x0, 0xffa6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffcc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x73c0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000600000000140000", @ANYRES32, @ANYBLOB="00000000000000000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xfffffffffffffd41) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r4}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x15a}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x99}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7fff}], 0x98) write(r5, &(0x7f0000000000)='7', 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, 0x0) fanotify_init(0x40, 0x80000) 3.732516996s ago: executing program 3 (id=653): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x800000000000005, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000080), 0x12) connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r5 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x68, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@]]/\']%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(({##Z*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ':&((-$[}\xa2(@+\'\x00'}]}]}]}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x807c6406, &(0x7f0000002140)=""/29) 2.367952888s ago: executing program 7 (id=654): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x70000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x4, 0x1, 0x3, 0x1d}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000001, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 64) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@typedef={0x6, 0x0, 0x0, 0x8, 0x2}, @enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0x8, [{0x6, 0x8, 0x2b6}]}]}, {0x0, [0x0, 0x5f, 0x30, 0x0, 0x2e, 0x61]}}, 0x0, 0x44, 0x0, 0x4}, 0x28) (async, rerun: 32) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_FSGEOMETRY_V4(r3, 0x8070587c, &(0x7f0000000180)) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2712, 0x0, &(0x7f0000000040)) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000000)) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r4, @ANYBLOB="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"], 0x8c8}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 2.075966238s ago: executing program 1 (id=655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x3f00, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 2.028899426s ago: executing program 3 (id=656): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="0200", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc138fd10, &(0x7f0000000180)="0400000000000000000000007e01") syz_usb_connect(0x5, 0x7a0, &(0x7f0000001200)=ANY=[@ANYBLOB="12011001df382540cd0c990095bd0102030109028e0703020910000904"], 0x0) 1.921468267s ago: executing program 5 (id=657): syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="5c35fdcaedf2", @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xc7, 0x11, 0x0, @empty, @empty=0x1000000, {[@rr={0x7, 0xf, 0xd, [@private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x41}]}]}}, {0x1, 0x4e20, 0x8}}}}}, 0x0) 1.671015549s ago: executing program 1 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r4, &(0x7f0000000600), &(0x7f0000000840)=""/10, 0x4}, 0x20) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x2}) 1.640179516s ago: executing program 5 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4001) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x9, 0x0, 0x0, 0x3, '\x00', 0x7}, 0x3, 0x10000000, 0x5, r3, 0x1, 0x8, 'syz1\x00', &(0x7f0000000040)=[')\x00'], 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 0s ago: executing program 1 (id=660): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod(&(0x7f0000000000)='mtd0\x00', 0x1000, 0x78) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6}) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280), 0xd22be5311ce89ee5, 0x0) sendfile(r0, r2, 0x0, 0xffffffff000) write$nbd(r2, &(0x7f0000000040)={0x67446698, 0x0, 0x3, 0x2, 0x4, "ef140296ee2f43be7ce2fc57075f55d00d54f1fec58b5fc56ebd0497edc031d2ab0949d87dcc3546a5592f8732fdbab6e12ad6e57c81eb92619629805076ee50a564eb26bd5e6f4abe9fab5dbb562648789dbe979102cbf574df235464e56cde19f7c45ef624af7c0fd18ed2aa9d2ea15cefeec5450ee8acba1606e3b9bb1de25e94d9c6f8b70aaef393a85522241f7019976b9f6cfa21465a02945ed02d84"}, 0xaf) r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1ff, 0x2200) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000003c0)={0x2, 'ip6erspan0\x00', {0x6}, 0x6}) readlinkat(r3, &(0x7f00000001c0)='.\x00', &(0x7f0000000340)=""/105, 0x69) kernel console output (not intermixed with test programs): nk [ 240.181782][ T5726] usb 3-1: device descriptor read/64, error -71 [ 240.204507][ T3378] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.271999][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.449470][ T5726] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 240.464727][ T3366] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.464877][ T3366] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.683206][ T5726] usb 3-1: device descriptor read/64, error -71 [ 240.798460][ T5726] usb usb3-port1: attempt power cycle [ 240.948475][ T7154] FAULT_INJECTION: forcing a failure. [ 240.948475][ T7154] name fail_futex, interval 1, probability 0, space 0, times 1 [ 240.948526][ T7154] CPU: 0 UID: 0 PID: 7154 Comm: syz.3.293 Not tainted syzkaller #0 PREEMPT(full) [ 240.948552][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.948571][ T7154] Call Trace: [ 240.948581][ T7154] [ 240.948590][ T7154] dump_stack_lvl+0xe8/0x150 [ 240.948634][ T7154] should_fail_ex+0x3eb/0x540 [ 240.948681][ T7154] get_futex_key+0x1b4/0x1580 [ 240.948729][ T7154] ? __pfx_get_futex_key+0x10/0x10 [ 240.948774][ T7154] futex_wake+0x119/0x5f0 [ 240.948808][ T7154] ? __pfx_futex_wake+0x10/0x10 [ 240.948842][ T7154] ? mm_exit_exec_release+0x20/0x290 [ 240.948875][ T7154] do_futex+0x458/0x4e0 [ 240.948903][ T7154] ? __pfx_do_futex+0x10/0x10 [ 240.948931][ T7154] ? __might_fault+0xaf/0x130 [ 240.948967][ T7154] mm_exit_exec_release+0x10d/0x290 [ 240.949000][ T7154] exit_mm+0x50/0x240 [ 240.949027][ T7154] do_exit+0x6a8/0x2380 [ 240.949060][ T7154] ? __pfx_do_exit+0x10/0x10 [ 240.949087][ T7154] ? do_raw_spin_lock+0x12b/0x2f0 [ 240.949120][ T7154] do_group_exit+0x22d/0x2f0 [ 240.949143][ T7154] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.949181][ T7154] get_signal+0x1216/0x12c0 [ 240.949234][ T7154] arch_do_signal_or_restart+0xbb/0x860 [ 240.949271][ T7154] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 240.949313][ T7154] ? ksys_write+0x242/0x270 [ 240.949348][ T7154] exit_to_user_mode_loop+0x10e/0x770 [ 240.949377][ T7154] ? rcu_is_watching+0x16/0xb0 [ 240.949414][ T7154] do_syscall_64+0x328/0x520 [ 240.949436][ T7154] ? trace_irq_disable+0x3b/0x140 [ 240.949466][ T7154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.949488][ T7154] ? clear_bhb_loop+0x70/0xc0 [ 240.949514][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.949537][ T7154] RIP: 0033:0x7fc74139e159 [ 240.949557][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.949577][ T7154] RSP: 002b:00007fc74225a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 240.949601][ T7154] RAX: fffffffffffffe00 RBX: 00007fc741626098 RCX: 00007fc74139e159 [ 240.949618][ T7154] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc741626098 [ 240.949632][ T7154] RBP: 00007fc741626090 R08: 0000000000000000 R09: 0000000000000000 [ 240.949645][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.949658][ T7154] R13: 00007fc741626128 R14: 00007fff33713e00 R15: 00007fff33713ee8 [ 240.949701][ T7154] [ 241.199872][ T5726] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 241.228702][ T5726] usb 3-1: device descriptor read/8, error -71 [ 241.357683][ T3378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.357708][ T3378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.449463][ T3378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.449488][ T3378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.487055][ T5726] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 241.508728][ T5726] usb 3-1: device descriptor read/8, error -71 [ 241.627511][ T5726] usb usb3-port1: unable to enumerate USB device [ 243.676396][ T7184] loop2: detected capacity change from 0 to 256 [ 243.734805][ T7185] netlink: 'syz.5.300': attribute type 1 has an invalid length. [ 243.851339][ T7185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.142212][ T7188] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 246.000497][ T7204] futex_wake_op: syz.2.302 tries to shift op by 144; fix this program [ 246.834741][ T7212] netlink: 32 bytes leftover after parsing attributes in process `syz.2.309'. [ 246.838300][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 248.120895][ T7234] loop6: detected capacity change from 0 to 256 [ 248.307454][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 249.329658][ T5748] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 250.082323][ T5748] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 250.083593][ T5748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.083625][ T5748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.083650][ T5748] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.083694][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.135998][ T5748] usb 6-1: config 0 descriptor?? [ 250.620979][ T5748] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 250.784200][ T5748] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 251.009819][ T7264] futex_wake_op: syz.1.318 tries to shift op by 144; fix this program [ 251.914758][ T51] IPVS: starting estimator thread 0... [ 252.006157][ T5748] usb 6-1: USB disconnect, device number 8 [ 252.014677][ T7277] IPVS: using max 28 ests per chain, 67200 per kthread [ 253.005021][ T850] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 253.331786][ T850] usb 3-1: Using ep0 maxpacket: 16 [ 253.332571][ T850] usb 3-1: New USB device found: idVendor=05ac, idProduct=027b, bcdDevice=0.00 [ 253.333845][ T850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.206243][ T850] usb 3-1: config 0 descriptor?? [ 255.573979][ T7323] loop6: detected capacity change from 0 to 24 [ 255.586676][ T7323] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 255.630696][ T7323] VFS: Can't find a romfs filesystem on dev loop6. [ 255.630696][ T7323] [ 255.847605][ T7328] futex_wake_op: syz.3.330 tries to shift op by 144; fix this program [ 256.992038][ T850] usbhid 3-1:0.0: can't add hid device: -71 [ 256.992204][ T850] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 257.404689][ T850] usb 3-1: USB disconnect, device number 20 [ 257.711730][ T5727] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 257.760469][ T33] kauditd_printk_skb: 14 callbacks suppressed [ 257.760497][ T33] audit: type=1800 audit(1790286522.856:236): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.334" name="/" dev="sockfs" ino=14904 res=0 errno=0 [ 257.878222][ T5727] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 257.881030][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.881066][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.881092][ T5727] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.881138][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.945287][ T5727] usb 4-1: config 0 descriptor?? [ 259.085436][ T5727] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 259.143590][ T5727] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 259.249451][ T7378] futex_wake_op: syz.6.343 tries to shift op by 144; fix this program [ 259.461003][ T850] usb 4-1: USB disconnect, device number 11 [ 260.617197][ T7382] fido_id[7382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 260.802253][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.802317][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.942485][ T7420] loop2: detected capacity change from 0 to 32768 [ 263.107872][ T7420] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 263.107890][ T7420] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 263.743090][ T7420] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 263.776279][ T5748] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 263.776301][ T5748] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 264.023338][ T7430] FAULT_INJECTION: forcing a failure. [ 264.023338][ T7430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.023391][ T7430] CPU: 0 UID: 0 PID: 7430 Comm: syz.5.356 Not tainted syzkaller #0 PREEMPT(full) [ 264.023416][ T7430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 264.023431][ T7430] Call Trace: [ 264.023439][ T7430] [ 264.023449][ T7430] dump_stack_lvl+0xe8/0x150 [ 264.023492][ T7430] should_fail_ex+0x3eb/0x540 [ 264.023531][ T7430] _copy_from_user+0x2d/0xb0 [ 264.023557][ T7430] kstrtouint_from_user+0xd6/0x180 [ 264.023593][ T7430] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 264.023636][ T7430] ? lock_acquire+0x115/0x350 [ 264.023670][ T7430] proc_fail_nth_write+0x8e/0x210 [ 264.023699][ T7430] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 264.023736][ T7430] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 264.023764][ T7430] vfs_write+0x296/0xba0 [ 264.023800][ T7430] ? __pfx_vfs_write+0x10/0x10 [ 264.023828][ T7430] ? __fget_files+0x2a/0x420 [ 264.023850][ T7430] ? __fget_files+0x3a2/0x420 [ 264.023871][ T7430] ? __fget_files+0x2a/0x420 [ 264.023899][ T7430] ? fdget+0x1ac/0x250 [ 264.023930][ T7430] ksys_write+0x150/0x270 [ 264.023964][ T7430] ? __pfx_ksys_write+0x10/0x10 [ 264.024004][ T7430] do_syscall_64+0x166/0x520 [ 264.024027][ T7430] ? trace_irq_disable+0x3b/0x140 [ 264.024057][ T7430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.024080][ T7430] ? clear_bhb_loop+0x70/0xc0 [ 264.024108][ T7430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.024131][ T7430] RIP: 0033:0x7f03a9f5e98e [ 264.024150][ T7430] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 264.024170][ T7430] RSP: 002b:00007f03aae3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.024193][ T7430] RAX: ffffffffffffffda RBX: 00007f03aae3f6c0 RCX: 00007f03a9f5e98e [ 264.024210][ T7430] RDX: 0000000000000001 RSI: 00007f03aae3f0a0 RDI: 0000000000000007 [ 264.024224][ T7430] RBP: 00007f03aae3f090 R08: 0000000000000000 R09: 0000000000000000 [ 264.024238][ T7430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.024251][ T7430] R13: 00007f03aa226218 R14: 00007f03aa226180 R15: 00007fff3abdaae8 [ 264.024288][ T7430] [ 264.557391][ T33] audit: type=1800 audit(1790286529.121:237): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.359" name="/" dev="sockfs" ino=15062 res=0 errno=0 [ 264.614924][ T5726] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 264.666627][ T5748] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 821ms [ 264.717689][ T5748] gfs2: fsid=syz:syz.0: jid=0: Done [ 264.718365][ T7420] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 264.789000][ T7420] gfs2: fsid=syz:syz.0: found 1 quota changes [ 264.799989][ T5726] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 264.804334][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.804369][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.804394][ T5726] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.804440][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.823145][ T5726] usb 4-1: config 0 descriptor?? [ 265.948301][ T5726] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 266.022259][ T5726] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 266.120994][ T7458] netlink: 'syz.6.360': attribute type 4 has an invalid length. [ 266.169244][ T7457] loop5: detected capacity change from 0 to 32768 [ 266.227276][ T7457] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 266.244505][ T7457] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 266.248828][ T7455] lo: entered allmulticast mode [ 266.409977][ T7457] XFS (loop5): Ending clean mount [ 266.430874][ T7457] XFS (loop5): Quotacheck needed: Please wait. [ 266.631721][ T7457] XFS (loop5): Quotacheck: Done. [ 267.051074][ T7481] FAULT_INJECTION: forcing a failure. [ 267.051074][ T7481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.051106][ T7481] CPU: 1 UID: 0 PID: 7481 Comm: syz.5.361 Not tainted syzkaller #0 PREEMPT(full) [ 267.051138][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 267.051152][ T7481] Call Trace: [ 267.051160][ T7481] [ 267.051169][ T7481] dump_stack_lvl+0xe8/0x150 [ 267.051225][ T7481] should_fail_ex+0x3eb/0x540 [ 267.051265][ T7481] strncpy_from_user+0x36/0x2c0 [ 267.051303][ T7481] do_getname+0x77/0x250 [ 267.051340][ T7481] __se_sys_rmdir+0x1e/0x140 [ 267.051373][ T7481] do_syscall_64+0x166/0x520 [ 267.051397][ T7481] ? trace_irq_disable+0x3b/0x140 [ 267.051428][ T7481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.051451][ T7481] ? clear_bhb_loop+0x70/0xc0 [ 267.051497][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.051518][ T7481] RIP: 0033:0x7f03a9f9e159 [ 267.051537][ T7481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.051556][ T7481] RSP: 002b:00007f03aae1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 267.051579][ T7481] RAX: ffffffffffffffda RBX: 00007f03aa226270 RCX: 00007f03a9f9e159 [ 267.051596][ T7481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 267.051610][ T7481] RBP: 00007f03aae1e090 R08: 0000000000000000 R09: 0000000000000000 [ 267.051623][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.051637][ T7481] R13: 00007f03aa226308 R14: 00007f03aa226270 R15: 00007fff3abdaae8 [ 267.051671][ T7481] [ 267.054532][ T7481] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 267.871057][ T6333] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 267.939957][ T7488] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 267.950943][ T7488] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.194721][ T33] audit: type=1800 audit(1790286532.480:238): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.369" name="/" dev="sockfs" ino=15722 res=0 errno=0 [ 269.344657][ T5726] usb 4-1: USB disconnect, device number 12 [ 269.736088][ T7512] KVM: debugfs: duplicate directory 7512-4 [ 270.089073][ T7522] tipc: Started in network mode [ 270.089197][ T7522] tipc: Node identity 4, cluster identity 4711 [ 270.089232][ T7522] tipc: Node number set to 4 [ 270.819067][ T7527] netlink: 'syz.1.373': attribute type 4 has an invalid length. [ 271.199841][ T7540] loop2: detected capacity change from 0 to 512 [ 271.272303][ T7540] EXT4-fs (loop2): orphan cleanup on readonly fs [ 271.278236][ T7540] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.377: casefold flag without casefold feature [ 271.278268][ T7540] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 271.285438][ T7540] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.377: couldn't read orphan inode 15 (err -117) [ 271.285471][ T7540] loop2: lost filesystem error report for type 5 error -117 [ 271.290476][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 271.290498][ C1] EXT4-fs (loop2): initial error at time 1790286535: ext4_orphan_get:1403: inode 15 [ 271.290530][ C1] EXT4-fs (loop2): last error at time 1790286535: ext4_orphan_get:1408 [ 271.356185][ T5617] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 271.379211][ T7540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 271.403604][ T3378] Bluetooth: hci5: Frame reassembly failed (-84) [ 271.529209][ T5617] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 271.530366][ T5617] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.530398][ T5617] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.530424][ T5617] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.530469][ T5617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.538412][ T5617] usb 7-1: config 0 descriptor?? [ 272.304994][ T5617] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 272.491806][ T5617] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 272.687208][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 272.973479][ T5617] usb 7-1: USB disconnect, device number 2 [ 273.546690][ T4929] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 274.017105][ T7572] netlink: 'syz.2.386': attribute type 4 has an invalid length. [ 274.058986][ T7572] lo: entered allmulticast mode [ 274.192824][ T7569] loop6: detected capacity change from 0 to 32768 [ 274.202871][ T7569] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.385 (7569) [ 274.229957][ T7569] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 274.229990][ T7569] BTRFS info (device loop6): using blake2b checksum algorithm [ 274.332026][ T7588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.359075][ T7591] loop5: detected capacity change from 0 to 128 [ 274.396052][ T7591] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.396470][ T7591] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.502337][ T7600] FAULT_INJECTION: forcing a failure. [ 274.502337][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 274.502370][ T7600] CPU: 0 UID: 0 PID: 7600 Comm: syz.2.390 Not tainted syzkaller #0 PREEMPT(full) [ 274.502394][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.502411][ T7600] Call Trace: [ 274.502420][ T7600] [ 274.502429][ T7600] dump_stack_lvl+0xe8/0x150 [ 274.502467][ T7600] should_fail_ex+0x3eb/0x540 [ 274.502505][ T7600] should_failslab+0xa8/0x100 [ 274.502536][ T7600] __kmalloc_noprof+0xf9/0x710 [ 274.502558][ T7600] ? rcu_is_watching+0x16/0xb0 [ 274.502589][ T7600] ? tomoyo_realpath_from_path+0xef/0x640 [ 274.502612][ T7600] ? tomoyo_realpath_from_path+0xef/0x640 [ 274.502642][ T7600] tomoyo_realpath_from_path+0xef/0x640 [ 274.502677][ T7600] ? tomoyo_path_number_perm+0x219/0x5f0 [ 274.502707][ T7600] tomoyo_path_number_perm+0x246/0x5f0 [ 274.502742][ T7600] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 274.502772][ T7600] ? __lock_acquire+0x747/0x2de0 [ 274.502838][ T7600] ? __fget_files+0x2a/0x420 [ 274.502863][ T7600] ? __fget_files+0x2a/0x420 [ 274.502885][ T7600] ? __fget_files+0x2a/0x420 [ 274.502911][ T7600] security_file_ioctl+0xc3/0x2a0 [ 274.502944][ T7600] __se_sys_ioctl+0x47/0x170 [ 274.502975][ T7600] do_syscall_64+0x166/0x520 [ 274.502998][ T7600] ? trace_irq_disable+0x3b/0x140 [ 274.503026][ T7600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.503048][ T7600] ? clear_bhb_loop+0x70/0xc0 [ 274.503074][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.503096][ T7600] RIP: 0033:0x7f6398d9e159 [ 274.503116][ T7600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.503133][ T7600] RSP: 002b:00007f6399c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.503164][ T7600] RAX: ffffffffffffffda RBX: 00007f6399025fa0 RCX: 00007f6398d9e159 [ 274.503180][ T7600] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000004 [ 274.503194][ T7600] RBP: 00007f6399c55090 R08: 0000000000000000 R09: 0000000000000000 [ 274.503207][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.503220][ T7600] R13: 00007f6399026038 R14: 00007f6399025fa0 R15: 00007ffe185b6808 [ 274.503254][ T7600] [ 274.504106][ T7600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 274.783222][ T5617] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 274.813710][ T6333] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.848489][ T7569] BTRFS info (device loop6): enabling ssd optimizations [ 274.848539][ T7569] BTRFS info (device loop6): turning on async discard [ 274.848555][ T7569] BTRFS info (device loop6): enabling free space tree [ 274.849398][ T7569] BTRFS info (device loop6): use zstd compression, level 3 [ 274.967108][ T5617] usb 4-1: New USB device found: idVendor=0925, idProduct=8066, bcdDevice=0.00 [ 274.971065][ T5617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.971101][ T5617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.971141][ T5617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.996891][ T5617] usb 4-1: config 0 descriptor?? [ 275.091160][ T7608] FAULT_INJECTION: forcing a failure. [ 275.091160][ T7608] name failslab, interval 1, probability 0, space 0, times 0 [ 275.091190][ T7608] CPU: 1 UID: 0 PID: 7608 Comm: syz.5.391 Not tainted syzkaller #0 PREEMPT(full) [ 275.091214][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 275.091225][ T7608] Call Trace: [ 275.091233][ T7608] [ 275.091241][ T7608] dump_stack_lvl+0xe8/0x150 [ 275.091276][ T7608] should_fail_ex+0x3eb/0x540 [ 275.091316][ T7608] should_failslab+0xa8/0x100 [ 275.091348][ T7608] __kmalloc_cache_noprof+0x9e/0x600 [ 275.091371][ T7608] ? ppp_register_net_channel+0x58/0x770 [ 275.091399][ T7608] ? ppp_register_net_channel+0x58/0x770 [ 275.091434][ T7608] ppp_register_net_channel+0x58/0x770 [ 275.091468][ T7608] pppoe_connect+0x778/0xcf0 [ 275.091502][ T7608] __sys_connect+0x316/0x450 [ 275.091540][ T7608] ? __pfx___sys_connect+0x10/0x10 [ 275.091584][ T7608] ? rcu_is_watching+0x16/0xb0 [ 275.091626][ T7608] __x64_sys_connect+0x7a/0x90 [ 275.091681][ T7608] do_syscall_64+0x166/0x520 [ 275.091707][ T7608] ? trace_irq_disable+0x3b/0x140 [ 275.091735][ T7608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.091758][ T7608] ? clear_bhb_loop+0x70/0xc0 [ 275.091784][ T7608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.091804][ T7608] RIP: 0033:0x7f03a9f9e159 [ 275.091823][ T7608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.091843][ T7608] RSP: 002b:00007f03aae81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 275.091866][ T7608] RAX: ffffffffffffffda RBX: 00007f03aa225fa0 RCX: 00007f03a9f9e159 [ 275.091882][ T7608] RDX: 000000000000001e RSI: 0000200000000040 RDI: 0000000000000007 [ 275.091898][ T7608] RBP: 00007f03aa03506b R08: 0000000000000000 R09: 0000000000000000 [ 275.091911][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.091924][ T7608] R13: 00007f03aa226038 R14: 00007f03aa225fa0 R15: 00007fff3abdaae8 [ 275.091958][ T7608] [ 275.405263][ T7610] loop0: detected capacity change from 40427 to 0 [ 275.440506][ T7611] FAULT_INJECTION: forcing a failure. [ 275.440506][ T7611] name failslab, interval 1, probability 0, space 0, times 0 [ 275.440540][ T7611] CPU: 1 UID: 0 PID: 7611 Comm: syz.6.385 Not tainted syzkaller #0 PREEMPT(full) [ 275.440564][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 275.440578][ T7611] Call Trace: [ 275.440587][ T7611] [ 275.440596][ T7611] dump_stack_lvl+0xe8/0x150 [ 275.440638][ T7611] should_fail_ex+0x3eb/0x540 [ 275.440678][ T7611] should_failslab+0xa8/0x100 [ 275.440708][ T7611] ? do_getname+0x2e/0x250 [ 275.440740][ T7611] kmem_cache_alloc_noprof+0x9c/0x600 [ 275.440766][ T7611] ? __mutex_unlock_slowpath+0x731/0x900 [ 275.440791][ T7611] ? do_getname+0x2e/0x250 [ 275.440829][ T7611] do_getname+0x2e/0x250 [ 275.440859][ T7611] ? user_path_at+0x1e/0x160 [ 275.440887][ T7611] user_path_at+0x2a/0x160 [ 275.440915][ T7611] __se_sys_mount+0x2dc/0x420 [ 275.440953][ T7611] ? __pfx___se_sys_mount+0x10/0x10 [ 275.440983][ T7611] ? __x64_sys_mount+0x20/0xc0 [ 275.441008][ T7611] do_syscall_64+0x166/0x520 [ 275.441032][ T7611] ? trace_irq_disable+0x3b/0x140 [ 275.441061][ T7611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.441085][ T7611] ? clear_bhb_loop+0x70/0xc0 [ 275.441112][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.441134][ T7611] RIP: 0033:0x7f5bd6f9e159 [ 275.441154][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.441173][ T7611] RSP: 002b:00007f5bd7e38028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.441196][ T7611] RAX: ffffffffffffffda RBX: 00007f5bd7226360 RCX: 00007f5bd6f9e159 [ 275.441213][ T7611] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 275.441227][ T7611] RBP: 00007f5bd7e38090 R08: 0000000000000000 R09: 0000000000000000 [ 275.441241][ T7611] R10: 00000000010f4c2a R11: 0000000000000246 R12: 0000000000000001 [ 275.441256][ T7611] R13: 00007f5bd72263f8 R14: 00007f5bd7226360 R15: 00007ffddcd25578 [ 275.441292][ T7611] [ 275.686744][ T5617] hid-generic 0003:0925:8066.000C: unbalanced collection at end of report description [ 275.702145][ T5617] hid-generic 0003:0925:8066.000C: probe with driver hid-generic failed with error -22 [ 275.741582][ T7614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 275.741611][ T7614] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 275.767986][ T7614] vhci_hcd vhci_hcd.0: Device attached [ 275.857153][ T7588] loop3: detected capacity change from 0 to 512 [ 275.874294][ T7588] ext4: Unknown parameter 'nouser_xattr' [ 275.924634][ T33] audit: type=1800 audit(1790286539.612:239): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.385" name="bus" dev="loop6" ino=264 res=0 errno=0 [ 275.951204][ T5617] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 275.995850][ T33] audit: type=1326 audit(1790286539.686:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.395" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccf19e159 code=0x7ffc0000 [ 275.995912][ T33] audit: type=1326 audit(1790286539.686:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.395" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccf19e159 code=0x7ffc0000 [ 275.996057][ T33] audit: type=1326 audit(1790286539.686:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.395" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccf19e159 code=0x7ffc0000 [ 275.996597][ T33] audit: type=1326 audit(1790286539.686:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.395" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccf19e159 code=0x7ffc0000 [ 276.003301][ T33] audit: type=1326 audit(1790286539.686:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.395" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccf19e159 code=0x7ffc0000 [ 276.003359][ T33] audit: type=1326 audit(1790286539.686:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.395" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f7ccf19e159 code=0x7ffc0000 [ 276.003415][ T33] audit: type=1326 audit(1790286539.686:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.395" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccf19e159 code=0x7ffc0000 [ 276.003461][ T33] audit: type=1326 audit(1790286539.686:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.395" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccf19e159 code=0x7ffc0000 [ 276.031987][ T33] audit: type=1326 audit(1790286539.695:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.395" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccf19e159 code=0x7ffc0000 [ 276.032710][ T5617] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 276.070677][ T32] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 276.258686][ T32] usb 3-1: device descriptor read/64, error -71 [ 276.514865][ T850] usb 4-1: USB disconnect, device number 13 [ 276.517267][ T32] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 276.615426][ T7615] loop5: detected capacity change from 0 to 32768 [ 276.669183][ T32] usb 3-1: device descriptor read/64, error -71 [ 276.806321][ T32] usb usb3-port1: attempt power cycle [ 276.828595][ T7615] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 276.854994][ T7615] JBD2: Ignoring recovery information on journal [ 277.027188][ T7615] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 277.198298][ T32] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 277.230127][ T32] usb 3-1: device descriptor read/8, error -71 [ 277.403355][ T6333] ocfs2: Unmounting device (7,5) on (node local) [ 277.501855][ T32] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 277.537410][ T32] usb 3-1: device descriptor read/8, error -71 [ 277.666059][ T32] usb usb3-port1: unable to enumerate USB device [ 277.695539][ T7630] loop3: detected capacity change from 0 to 32768 [ 277.753317][ T7630] JBD2: Ignoring recovery information on journal [ 277.765022][ T7630] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 277.791094][ T7630] JBD2: bad block at offset 32 [ 277.813324][ T7630] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 278.361721][ T6895] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 278.380677][ T5612] ocfs2: Unmounting device (7,3) on (node local) [ 278.409550][ T7647] FAULT_INJECTION: forcing a failure. [ 278.409550][ T7647] name failslab, interval 1, probability 0, space 0, times 0 [ 278.409573][ T7647] CPU: 0 UID: 0 PID: 7647 Comm: syz.5.404 Not tainted syzkaller #0 PREEMPT(full) [ 278.409591][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 278.409601][ T7647] Call Trace: [ 278.409607][ T7647] [ 278.409614][ T7647] dump_stack_lvl+0xe8/0x150 [ 278.409643][ T7647] should_fail_ex+0x3eb/0x540 [ 278.409672][ T7647] should_failslab+0xa8/0x100 [ 278.409695][ T7647] __kmalloc_cache_node_noprof+0xa5/0x620 [ 278.409716][ T7647] ? blk_mq_init_tags+0x83/0x2d0 [ 278.409742][ T7647] ? blk_mq_init_tags+0x83/0x2d0 [ 278.409769][ T7647] blk_mq_init_tags+0x83/0x2d0 [ 278.409793][ T7647] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 278.409811][ T7647] ? kfree+0x1c5/0x650 [ 278.409834][ T7647] ? blk_mq_map_queues+0x3ea/0x490 [ 278.409864][ T7647] ? blk_mq_map_queues+0x3ea/0x490 [ 278.409892][ T7647] blk_mq_alloc_set_map_and_rqs+0x1a0/0x810 [ 278.409921][ T7647] blk_mq_alloc_tag_set+0x8e5/0x1000 [ 278.409948][ T7647] loop_add+0x436/0xb40 [ 278.409970][ T7647] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 278.409995][ T7647] ? __pfx_loop_add+0x10/0x10 [ 278.410041][ T7647] loop_control_ioctl+0x12b/0x5a0 [ 278.410063][ T7647] ? __fget_files+0x2a/0x420 [ 278.410080][ T7647] ? __pfx_loop_control_ioctl+0x10/0x10 [ 278.410105][ T7647] ? bpf_lsm_file_ioctl+0x9/0x20 [ 278.410127][ T7647] ? __pfx_loop_control_ioctl+0x10/0x10 [ 278.410152][ T7647] __se_sys_ioctl+0xfc/0x170 [ 278.410175][ T7647] do_syscall_64+0x166/0x520 [ 278.410218][ T7647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.410244][ T7647] ? clear_bhb_loop+0x70/0xc0 [ 278.410272][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.410294][ T7647] RIP: 0033:0x7f03a9f9e159 [ 278.410314][ T7647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.410333][ T7647] RSP: 002b:00007f03aae81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.410357][ T7647] RAX: ffffffffffffffda RBX: 00007f03aa225fa0 RCX: 00007f03a9f9e159 [ 278.410374][ T7647] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000005 [ 278.410388][ T7647] RBP: 00007f03aa03506b R08: 0000000000000000 R09: 0000000000000000 [ 278.410403][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.410416][ T7647] R13: 00007f03aa226038 R14: 00007f03aa225fa0 R15: 00007fff3abdaae8 [ 278.410452][ T7647] [ 278.411020][ T7647] blk-mq: reduced tag depth (128 -> 64) [ 278.936769][ T7617] vhci_hcd: connection reset by peer [ 278.978341][ T42] vhci_hcd vhci_hcd.2: stop threads [ 278.979304][ T42] vhci_hcd vhci_hcd.2: release socket [ 278.982464][ T42] vhci_hcd vhci_hcd.2: disconnect device [ 279.091692][ T7653] netlink: 40 bytes leftover after parsing attributes in process `syz.5.406'. [ 279.182388][ T7655] FAULT_INJECTION: forcing a failure. [ 279.182388][ T7655] name failslab, interval 1, probability 0, space 0, times 0 [ 279.182424][ T7655] CPU: 0 UID: 60928 PID: 7655 Comm: syz.2.408 Not tainted syzkaller #0 PREEMPT(full) [ 279.182463][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 279.182476][ T7655] Call Trace: [ 279.182486][ T7655] [ 279.182496][ T7655] dump_stack_lvl+0xe8/0x150 [ 279.182536][ T7655] should_fail_ex+0x3eb/0x540 [ 279.182576][ T7655] should_failslab+0xa8/0x100 [ 279.182609][ T7655] __kmalloc_cache_noprof+0x9e/0x600 [ 279.182635][ T7655] ? copy_time_ns+0x1c2/0x640 [ 279.182672][ T7655] ? copy_time_ns+0x1c2/0x640 [ 279.182709][ T7655] copy_time_ns+0x1c2/0x640 [ 279.182742][ T7655] create_new_namespaces+0x48d/0x6b0 [ 279.182790][ T7655] unshare_nsproxy_namespaces+0x144/0x190 [ 279.182827][ T7655] ksys_unshare+0x53c/0x890 [ 279.182864][ T7655] ? __pfx_ksys_unshare+0x10/0x10 [ 279.182901][ T7655] ? rcu_is_watching+0x16/0xb0 [ 279.182946][ T7655] __x64_sys_unshare+0x38/0x50 [ 279.182979][ T7655] do_syscall_64+0x166/0x520 [ 279.183003][ T7655] ? trace_irq_disable+0x3b/0x140 [ 279.183032][ T7655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.183055][ T7655] ? clear_bhb_loop+0x70/0xc0 [ 279.183083][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.183105][ T7655] RIP: 0033:0x7f6398d9e159 [ 279.183125][ T7655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.183146][ T7655] RSP: 002b:00007f6399c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 279.183169][ T7655] RAX: ffffffffffffffda RBX: 00007f6399025fa0 RCX: 00007f6398d9e159 [ 279.183186][ T7655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 279.183201][ T7655] RBP: 00007f6398e3506b R08: 0000000000000000 R09: 0000000000000000 [ 279.183216][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.183229][ T7655] R13: 00007f6399026038 R14: 00007f6399025fa0 R15: 00007ffe185b6808 [ 279.183265][ T7655] [ 279.472520][ T7657] netlink: 36 bytes leftover after parsing attributes in process `syz.3.405'. [ 279.762198][ T7663] netlink: 'syz.2.409': attribute type 12 has an invalid length. [ 280.471275][ T850] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 280.690107][ T7677] loop5: detected capacity change from 0 to 256 [ 281.039494][ T7657] loop3: detected capacity change from 0 to 32768 [ 281.201624][ T7657] Bad next:5 of the last slot in dtroot [ 281.201624][ T7657] [ 281.201651][ T7657] ERROR: (device loop3): copy_from_dinode: Corrupt dtroot [ 281.201651][ T7657] [ 281.203377][ T7657] ERROR: (device loop3): remounting filesystem as read-only [ 281.306303][ T7688] FAULT_INJECTION: forcing a failure. [ 281.306303][ T7688] name failslab, interval 1, probability 0, space 0, times 0 [ 281.306328][ T7688] CPU: 0 UID: 0 PID: 7688 Comm: syz.2.416 Not tainted syzkaller #0 PREEMPT(full) [ 281.306345][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 281.306355][ T7688] Call Trace: [ 281.306361][ T7688] [ 281.306367][ T7688] dump_stack_lvl+0xe8/0x150 [ 281.306396][ T7688] should_fail_ex+0x3eb/0x540 [ 281.306423][ T7688] should_failslab+0xa8/0x100 [ 281.306446][ T7688] __kmalloc_cache_node_noprof+0xa5/0x620 [ 281.306466][ T7688] ? blk_mq_init_tags+0x83/0x2d0 [ 281.306486][ T7688] ? blk_mq_init_tags+0x83/0x2d0 [ 281.306520][ T7688] blk_mq_init_tags+0x83/0x2d0 [ 281.306543][ T7688] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 281.306559][ T7688] ? kfree+0x1c5/0x650 [ 281.306582][ T7688] ? blk_mq_map_queues+0x3ea/0x490 [ 281.306610][ T7688] ? blk_mq_map_queues+0x3ea/0x490 [ 281.306637][ T7688] blk_mq_alloc_set_map_and_rqs+0x1a0/0x810 [ 281.306664][ T7688] blk_mq_alloc_tag_set+0x8e5/0x1000 [ 281.306690][ T7688] loop_add+0x436/0xb40 [ 281.306711][ T7688] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 281.306734][ T7688] ? __pfx_loop_add+0x10/0x10 [ 281.306797][ T7688] loop_control_ioctl+0x12b/0x5a0 [ 281.306820][ T7688] ? __fget_files+0x2a/0x420 [ 281.306837][ T7688] ? __pfx_loop_control_ioctl+0x10/0x10 [ 281.306862][ T7688] ? bpf_lsm_file_ioctl+0x9/0x20 [ 281.306883][ T7688] ? __pfx_loop_control_ioctl+0x10/0x10 [ 281.306905][ T7688] __se_sys_ioctl+0xfc/0x170 [ 281.306928][ T7688] do_syscall_64+0x166/0x520 [ 281.306945][ T7688] ? trace_irq_disable+0x3b/0x140 [ 281.306966][ T7688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.306983][ T7688] ? clear_bhb_loop+0x70/0xc0 [ 281.307004][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.307021][ T7688] RIP: 0033:0x7f6398d9e159 [ 281.307036][ T7688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.307049][ T7688] RSP: 002b:00007f6399c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.307090][ T7688] RAX: ffffffffffffffda RBX: 00007f6399025fa0 RCX: 00007f6398d9e159 [ 281.307108][ T7688] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000005 [ 281.307128][ T7688] RBP: 00007f6398e3506b R08: 0000000000000000 R09: 0000000000000000 [ 281.307139][ T7688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.307163][ T7688] R13: 00007f6399026038 R14: 00007f6399025fa0 R15: 00007ffe185b6808 [ 281.307199][ T7688] [ 281.307361][ T7688] blk-mq: reduced tag depth (128 -> 64) [ 281.576646][ T850] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 281.686468][ T5617] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 281.715857][ T850] usb 6-1: device descriptor read/64, error -71 [ 281.959661][ T850] usb usb6-port1: attempt power cycle [ 282.944680][ T850] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 282.967115][ T850] usb 6-1: device descriptor read/8, error -71 [ 283.450397][ T850] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 283.488961][ T850] usb 6-1: device descriptor read/8, error -71 [ 283.641477][ T850] usb usb6-port1: unable to enumerate USB device [ 287.713854][ T7739] tipc: Started in network mode [ 287.713971][ T7739] tipc: Node identity 4, cluster identity 4711 [ 287.714007][ T7739] tipc: Node number set to 4 [ 287.879545][ T33] kauditd_printk_skb: 43 callbacks suppressed [ 287.879568][ T33] audit: type=1800 audit(1790286550.648:292): pid=7728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.426" name="/" dev="sockfs" ino=16163 res=0 errno=0 [ 287.879652][ T269] IPVS: starting estimator thread 0... [ 288.024465][ T7740] IPVS: using max 28 ests per chain, 67200 per kthread [ 288.295723][ T7745] loop5: detected capacity change from 0 to 16 [ 288.973914][ T7745] erofs (device loop5): mounted with root inode @ nid 36. [ 289.898609][ T7748] loop6: detected capacity change from 0 to 32768 [ 289.998280][ T7748] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 290.147719][ T7748] XFS (loop6): Ending clean mount [ 290.342375][ T6895] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 290.874719][ T5617] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 290.924254][ T7777] loop3: detected capacity change from 0 to 128 [ 291.069734][ T5617] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 291.075951][ T5617] usb 7-1: config 1 has an invalid interface number: 128 but max is 1 [ 291.076018][ T5617] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.076079][ T5617] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 291.076133][ T5617] usb 7-1: config 1 has no interface number 0 [ 291.076242][ T5617] usb 7-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.134776][ T5617] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.134808][ T5617] usb 7-1: Product: syz [ 291.134825][ T5617] usb 7-1: Manufacturer: syz [ 291.134840][ T5617] usb 7-1: SerialNumber: syz [ 291.214564][ T7777] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 291.217745][ T7777] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 291.265610][ T5617] cdc_wdm 7-1:1.128: skipping garbage [ 291.265649][ T5617] cdc_wdm 7-1:1.128: probe with driver cdc_wdm failed with error -22 [ 291.442248][ T7783] loop5: detected capacity change from 0 to 1764 [ 291.698542][ T5802] usb 7-1: USB disconnect, device number 3 [ 292.608183][ T7793] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 292.610939][ T7797] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 293.179081][ T7803] netlink: 'syz.1.440': attribute type 6 has an invalid length. [ 293.179113][ T7803] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.283068][ T7812] loop2: detected capacity change from 0 to 24 [ 293.634121][ T5612] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.756195][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.445'. [ 293.843453][ T5748] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 294.005973][ T5748] usb 6-1: Using ep0 maxpacket: 8 [ 294.007040][ T5748] usb 6-1: New USB device found: idVendor=0e41, idProduct=534d, bcdDevice=0.40 [ 294.008292][ T5748] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.008318][ T5748] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.015710][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.015729][ T5748] usb 6-1: Product: syz [ 294.015740][ T5748] usb 6-1: Manufacturer: syz [ 294.015750][ T5748] usb 6-1: SerialNumber: syz [ 294.912444][ T7839] loop2: detected capacity change from 0 to 256 [ 294.966297][ T7839] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 295.077066][ T7811] loop5: detected capacity change from 0 to 164 [ 295.104347][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 295.311693][ T7845] loop3: detected capacity change from 0 to 1764 [ 295.948032][ T7851] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 295.963070][ T7851] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 297.607340][ T7856] syzkaller0: entered promiscuous mode [ 297.607366][ T7856] syzkaller0: entered allmulticast mode [ 297.809976][ T33] audit: type=1800 audit(1790286559.782:293): pid=7858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.455" name="/" dev="sockfs" ino=16829 res=0 errno=0 [ 297.959539][ T7841] loop6: detected capacity change from 0 to 262144 [ 297.970684][ T7841] F2FS-fs (loop6): invalid crc value [ 298.071871][ T7841] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 298.087986][ T7841] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 298.108396][ T5748] usb 6-1: unit 0 not found! [ 298.179267][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.451'. [ 298.193293][ T850] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 298.320756][ T5748] usb 6-1: USB disconnect, device number 13 [ 298.358816][ T850] usb 4-1: unable to get BOS descriptor or descriptor too short [ 298.358869][ T850] usb 4-1: New USB device found: idVendor=1a0a, idProduct=0101, bcdDevice=1.2e [ 298.360230][ T850] usb 4-1: config 254 has an invalid interface number: 205 but max is 0 [ 298.360255][ T850] usb 4-1: config 254 has no interface number 0 [ 298.360285][ T850] usb 4-1: config 254 interface 205 has no altsetting 0 [ 298.424720][ T850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.424753][ T850] usb 4-1: Product: syz [ 298.424770][ T850] usb 4-1: Manufacturer: syz [ 298.424785][ T850] usb 4-1: SerialNumber: syz [ 298.609368][ T7880] netlink: 'syz.5.456': attribute type 1 has an invalid length. [ 298.609443][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.456'. [ 300.241740][ T5635] udevd[5635]: setting mode of /dev/bus/usb/006/013 to 020664 failed: No such file or directory [ 300.241866][ T5635] udevd[5635]: setting owner of /dev/bus/usb/006/013 to uid=0, gid=0 failed: No such file or directory [ 300.352750][ T850] usb_ehset_test 4-1:254.205: probe with driver usb_ehset_test failed with error -32 [ 300.386252][ T850] usb 4-1: USB disconnect, device number 14 [ 300.430531][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.472829][ T7891] capability: warning: `syz.2.459' uses 32-bit capabilities (legacy support in use) [ 300.554097][ T7891] loop2: detected capacity change from 0 to 16 [ 300.943146][ T850] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 301.127668][ T850] usb 3-1: New USB device found: idVendor=1235, idProduct=800c, bcdDevice=0.40 [ 301.128760][ T850] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 301.128791][ T850] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 301.130655][ T850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.130672][ T850] usb 3-1: Product: syz [ 301.130683][ T850] usb 3-1: Manufacturer: syz [ 301.130693][ T850] usb 3-1: SerialNumber: syz [ 302.689268][ T850] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 302.940096][ T850] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 302.984123][ T850] usb 3-1: USB disconnect, device number 25 [ 303.064544][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.819298][ T7914] fuse: fd is not a fuse device [ 305.126563][ T7921] loop2: detected capacity change from 0 to 1024 [ 305.127396][ T7921] hfsplus: Unknown parameter '' [ 305.526535][ T7923] FAULT_INJECTION: forcing a failure. [ 305.526535][ T7923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.526560][ T7923] CPU: 0 UID: 0 PID: 7923 Comm: syz.5.470 Not tainted syzkaller #0 PREEMPT(full) [ 305.526578][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 305.526588][ T7923] Call Trace: [ 305.526594][ T7923] [ 305.526600][ T7923] dump_stack_lvl+0xe8/0x150 [ 305.526628][ T7923] should_fail_ex+0x3eb/0x540 [ 305.526657][ T7923] _copy_to_user+0x31/0xb0 [ 305.526675][ T7923] simple_read_from_buffer+0xe1/0x170 [ 305.526696][ T7923] proc_fail_nth_read+0x1bb/0x230 [ 305.526717][ T7923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.526739][ T7923] ? rw_verify_area+0x24a/0x4c0 [ 305.526757][ T7923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.526775][ T7923] vfs_read+0x213/0xa80 [ 305.526796][ T7923] ? __pfx___mutex_lock+0x10/0x10 [ 305.526813][ T7923] ? __pfx_vfs_read+0x10/0x10 [ 305.526831][ T7923] ? __fget_files+0x2a/0x420 [ 305.526845][ T7923] ? __fget_files+0x3a2/0x420 [ 305.526859][ T7923] ? __fget_files+0x2a/0x420 [ 305.526877][ T7923] ? fdget+0x1ac/0x250 [ 305.526897][ T7923] ksys_read+0x150/0x270 [ 305.526916][ T7923] ? __pfx_ksys_read+0x10/0x10 [ 305.526940][ T7923] do_syscall_64+0x166/0x520 [ 305.526956][ T7923] ? trace_irq_disable+0x3b/0x140 [ 305.526976][ T7923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.526991][ T7923] ? clear_bhb_loop+0x70/0xc0 [ 305.527009][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.527024][ T7923] RIP: 0033:0x7f03a9f5e98e [ 305.527038][ T7923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 305.527051][ T7923] RSP: 002b:00007f03aae80fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 305.527068][ T7923] RAX: ffffffffffffffda RBX: 00007f03aae816c0 RCX: 00007f03a9f5e98e [ 305.527079][ T7923] RDX: 000000000000000f RSI: 00007f03aae810a0 RDI: 0000000000000004 [ 305.527089][ T7923] RBP: 00007f03aae81090 R08: 0000000000000000 R09: 0000000000000000 [ 305.527099][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.527107][ T7923] R13: 00007f03aa226038 R14: 00007f03aa225fa0 R15: 00007fff3abdaae8 [ 305.527137][ T7923] [ 306.877693][ T7945] sctp: [Deprecated]: syz.2.474 (pid 7945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.877693][ T7945] Use struct sctp_sack_info instead [ 306.877721][ T7945] FAULT_INJECTION: forcing a failure. [ 306.877721][ T7945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.877747][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.2.474 Not tainted syzkaller #0 PREEMPT(full) [ 306.877771][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 306.877784][ T7945] Call Trace: [ 306.877792][ T7945] [ 306.877802][ T7945] dump_stack_lvl+0xe8/0x150 [ 306.877857][ T7945] should_fail_ex+0x3eb/0x540 [ 306.877897][ T7945] _copy_to_user+0x31/0xb0 [ 306.877923][ T7945] sctp_getsockopt_delayed_ack+0x5a7/0x7b0 [ 306.877955][ T7945] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 306.877983][ T7945] ? __pfx_sctp_getsockopt_delayed_ack+0x10/0x10 [ 306.878012][ T7945] ? sctp_getsockopt+0x12f/0xb90 [ 306.878049][ T7945] ? __local_bh_enable_ip+0xd6/0x140 [ 306.878085][ T7945] sctp_getsockopt+0x7ad/0xb90 [ 306.878119][ T7945] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 306.878152][ T7945] do_sock_getsockopt+0x4aa/0x640 [ 306.878191][ T7945] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 306.878232][ T7945] ? __fget_files+0x3a2/0x420 [ 306.878255][ T7945] ? __fget_files+0x2a/0x420 [ 306.878286][ T7945] __x64_sys_getsockopt+0x1a4/0x240 [ 306.878321][ T7945] do_syscall_64+0x166/0x520 [ 306.878344][ T7945] ? trace_irq_disable+0x3b/0x140 [ 306.878373][ T7945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.878395][ T7945] ? clear_bhb_loop+0x70/0xc0 [ 306.878426][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.878448][ T7945] RIP: 0033:0x7f6398d9e159 [ 306.878469][ T7945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.878488][ T7945] RSP: 002b:00007f6399c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 306.878512][ T7945] RAX: ffffffffffffffda RBX: 00007f6399025fa0 RCX: 00007f6398d9e159 [ 306.878528][ T7945] RDX: 0000000000000010 RSI: 0000000000000084 RDI: 0000000000000003 [ 306.878542][ T7945] RBP: 00007f6399c55090 R08: 0000200000000280 R09: 0000000000000000 [ 306.878557][ T7945] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 306.878572][ T7945] R13: 00007f6399026038 R14: 00007f6399025fa0 R15: 00007ffe185b6808 [ 306.878608][ T7945] [ 307.337575][ T7947] loop5: detected capacity change from 0 to 128 [ 307.352529][ T7947] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 307.385840][ T7947] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 307.538790][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.476'. [ 307.575761][ T7949] loop2: detected capacity change from 0 to 1764 [ 308.429176][ T7955] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 308.429429][ T7958] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 308.562795][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 308.562819][ T7962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.479'. [ 309.647663][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 309.684846][ T7969] netlink: 'syz.1.482': attribute type 11 has an invalid length. [ 309.784488][ T7975] sctp: [Deprecated]: syz.1.484 (pid 7975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.784488][ T7975] Use struct sctp_sack_info instead [ 309.917716][ T5802] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 309.954050][ T7979] netlink: 'syz.1.485': attribute type 10 has an invalid length. [ 309.963538][ T7979] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 310.079853][ T32] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 310.087832][ T5802] usb 3-1: unable to get BOS descriptor or descriptor too short [ 310.087885][ T5802] usb 3-1: New USB device found: idVendor=1235, idProduct=8207, bcdDevice=0.40 [ 310.112373][ T5802] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.112447][ T5802] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 310.140915][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.140936][ T5802] usb 3-1: Product: syz [ 310.140948][ T5802] usb 3-1: Manufacturer: syz [ 310.140958][ T5802] usb 3-1: SerialNumber: syz [ 310.245679][ T32] usb 7-1: New USB device found: idVendor=0e8d, idProduct=0608, bcdDevice=1.00 [ 310.247628][ T32] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.247653][ T32] usb 7-1: config 0 has no interfaces? [ 310.247681][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.330775][ T32] usb 7-1: config 0 descriptor?? [ 310.481410][ T7988] netlink: 44 bytes leftover after parsing attributes in process `syz.2.480'. [ 311.963073][ T7996] loop3: detected capacity change from 0 to 1764 [ 313.067387][ T7999] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 313.067900][ T8002] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 313.272117][ T32] usb 7-1: USB disconnect, device number 4 [ 313.511141][ T5802] usb 3-1: Focusrite Clarett USB Mixer Driver enabled (pid=0x8207); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 313.511221][ T5802] usb 3-1: Error initialising Clarett USB Mixer Driver: -22 [ 313.728165][ T4929] Bluetooth: hci2: unexpected event 0x36 length: 6 < 7 [ 313.780819][ T8007] loop1: detected capacity change from 0 to 8 [ 313.794962][ T5802] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 313.833997][ T5802] usb 3-1: USB disconnect, device number 26 [ 313.968727][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.153386][ T5726] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 314.242341][ T5802] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 314.289758][ T8007] Dev loop1: unable to read RDB block 8 [ 314.289809][ T8007] loop1: unable to read partition table [ 314.290026][ T8007] loop1: partition table beyond EOD, truncated [ 314.290061][ T8007] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 314.337840][ T5726] usb 4-1: Using ep0 maxpacket: 8 [ 314.338696][ T5726] usb 4-1: New USB device found: idVendor=0e41, idProduct=534d, bcdDevice=0.40 [ 314.341306][ T5726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.341324][ T5726] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.347216][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.347234][ T5726] usb 4-1: Product: syz [ 314.347245][ T5726] usb 4-1: Manufacturer: syz [ 314.347255][ T5726] usb 4-1: SerialNumber: syz [ 314.435257][ T5802] usb 3-1: Using ep0 maxpacket: 8 [ 314.439011][ T5802] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.441693][ T5802] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 314.441742][ T5802] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 314.441791][ T5802] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 314.441810][ T5802] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 314.441829][ T5802] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 314.441847][ T5802] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.441877][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.659270][ T7995] loop5: detected capacity change from 0 to 256 [ 314.695618][ T8007] loop3: detected capacity change from 0 to 164 [ 314.819223][ T7995] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 314.950155][ T5802] usb 3-1: GET_CAPABILITIES returned 0 [ 314.950210][ T5802] usbtmc 3-1:16.0: can't read capabilities [ 314.969240][ T5726] usb 4-1: unit 0 not found! [ 315.120090][ T7993] netlink: 32 bytes leftover after parsing attributes in process `syz.5.489'. [ 315.412588][ T5748] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 316.195174][ T5726] usb 4-1: USB disconnect, device number 15 [ 316.214808][ T5748] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 316.216586][ T5748] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.216637][ T5748] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 316.216662][ T5748] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 316.216687][ T5748] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 316.216731][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.487943][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.600886][ T8027] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.600987][ T8027] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.600996][ T8027] IPv6: NLM_F_CREATE should be set when creating new route [ 316.601059][ T8027] IPv6: NLM_F_CREATE should be set when creating new route [ 316.601122][ T8027] IPv6: NLM_F_CREATE should be set when creating new route [ 316.644834][ T8027] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.497'. [ 316.884041][ T8031] jffs2: notice: (8031) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 317.031899][ T5748] gud 7-1:1.0: Failed to get connectors (error=-5) [ 317.031939][ T5748] gud 7-1:1.0: probe with driver gud failed with error -5 [ 317.151162][ T8035] jffs2: notice: (8035) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 317.333888][ T5748] usb 7-1: USB disconnect, device number 5 [ 318.137549][ T1579] usb 3-1: USB disconnect, device number 27 [ 318.717239][ T8057] syzkaller0: entered promiscuous mode [ 318.717265][ T8057] syzkaller0: entered allmulticast mode [ 318.748497][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 318.911705][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 318.912928][ T9] usb 6-1: New USB device found: idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 318.915328][ T9] usb 6-1: config 3 has an invalid interface number: 45 but max is 0 [ 318.915355][ T9] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 318.915376][ T9] usb 6-1: config 3 has no interface number 0 [ 318.915417][ T9] usb 6-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.915447][ T9] usb 6-1: config 3 interface 45 has no altsetting 0 [ 318.982064][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.982095][ T9] usb 6-1: Product: syz [ 318.982113][ T9] usb 6-1: Manufacturer: syz [ 318.982130][ T9] usb 6-1: SerialNumber: syz [ 321.017935][ T8069] loop5: detected capacity change from 0 to 1024 [ 321.435231][ T8069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.665793][ T33] audit: type=1804 audit(1790286581.789:294): pid=8069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.503" name="/newroot/71/file1/bus" dev="loop5" ino=18 res=1 errno=0 [ 323.993898][ T8080] jffs2: notice: (8080) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 324.043648][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.162334][ T6333] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.444979][ T9] usb 6-1: USB disconnect, device number 14 [ 325.415757][ T8090] loop5: detected capacity change from 0 to 4096 [ 325.518781][ T8099] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.564044][ T33] audit: type=1800 audit(1790286585.415:295): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.513" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 325.749829][ T33] audit: type=1800 audit(1790286585.535:296): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.513" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 325.928781][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.483229][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.483304][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.123342][ T8113] loop2: detected capacity change from 0 to 2048 [ 328.162764][ T8113] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.186968][ T33] audit: type=1400 audit(1790286587.832:297): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name=223A6F pid=8111 comm="syz.2.518" name=223A6F offset=55 [ 328.373075][ T5622] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 328.373758][ T5622] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 330.539415][ T3366] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.030742][ T3366] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.527776][ T8140] loop6: detected capacity change from 0 to 128 [ 331.571133][ T8142] jffs2: notice: (8142) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 331.810164][ T8137] netlink: 32 bytes leftover after parsing attributes in process `syz.5.526'. [ 332.140199][ T3366] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.171445][ T8147] loop6: detected capacity change from 0 to 512 [ 332.251955][ T8147] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 332.252422][ T8147] EXT4-fs (loop6): orphan cleanup on readonly fs [ 332.276331][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.282398][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.293118][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.322054][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.323688][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.394839][ T8147] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 332.399211][ T8147] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 332.399240][ T8147] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.529: Failed to acquire dquot type 1 [ 332.399263][ T8147] loop6: lost filesystem error report for type 5 error -5 [ 332.404006][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 332.404029][ C0] EXT4-fs (loop6): initial error at time 1790286591: ext4_acquire_dquot:7069 [ 332.404054][ C0] EXT4-fs (loop6): last error at time 1790286591: ext4_acquire_dquot:7069 [ 332.522728][ T8147] EXT4-fs (loop6): Remounting filesystem read-only [ 332.535302][ T8151] loop5: detected capacity change from 0 to 512 [ 332.641345][ T8147] EXT4-fs (loop6): 1 truncate cleaned up [ 332.695824][ T8147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 332.855744][ T3366] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.148975][ T6895] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.683442][ T5802] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 333.915238][ T5802] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 333.949197][ T5802] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.949360][ T5802] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 333.949442][ T5802] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 333.949489][ T5802] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 333.949716][ T5802] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.107041][ T8166] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 334.157839][ T8166] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 334.284682][ T5802] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 334.407794][ T5802] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 334.408366][ T5802] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 334.599693][ T5624] Bluetooth: hci3: command tx timeout [ 334.744071][ T5802] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 334.770355][ T5802] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 334.776514][ T5802] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 334.798961][ T8171] loop5: detected capacity change from 0 to 256 [ 334.806754][ T8171] exfat: Unknown parameter ' [ 362.797915][ T8493] dump_stack_lvl+0xe8/0x150 [ 362.797954][ T8493] should_fail_ex+0x3eb/0x540 [ 362.797983][ T8493] _copy_to_user+0x31/0xb0 [ 362.798001][ T8493] simple_read_from_buffer+0xe1/0x170 [ 362.798022][ T8493] proc_fail_nth_read+0x1bb/0x230 [ 362.798068][ T8493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.798100][ T8493] ? rw_verify_area+0x24a/0x4c0 [ 362.798126][ T8493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.798156][ T8493] vfs_read+0x213/0xa80 [ 362.798177][ T8493] ? __pfx___mutex_lock+0x10/0x10 [ 362.798196][ T8493] ? __pfx_vfs_read+0x10/0x10 [ 362.798214][ T8493] ? __fget_files+0x2a/0x420 [ 362.798229][ T8493] ? __fget_files+0x3a2/0x420 [ 362.798243][ T8493] ? __fget_files+0x2a/0x420 [ 362.798262][ T8493] ? fdget+0x1ac/0x250 [ 362.798283][ T8493] ksys_read+0x150/0x270 [ 362.798302][ T8493] ? __pfx_ksys_read+0x10/0x10 [ 362.798334][ T8493] do_syscall_64+0x166/0x520 [ 362.798351][ T8493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.798368][ T8493] ? clear_bhb_loop+0x70/0xc0 [ 362.798387][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.798402][ T8493] RIP: 0033:0x7fc74135e98e [ 362.798417][ T8493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 362.798431][ T8493] RSP: 002b:00007fc74227afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 362.798447][ T8493] RAX: ffffffffffffffda RBX: 00007fc74227b6c0 RCX: 00007fc74135e98e [ 362.798459][ T8493] RDX: 000000000000000f RSI: 00007fc74227b0a0 RDI: 0000000000000003 [ 362.798469][ T8493] RBP: 00007fc74227b090 R08: 0000000000000000 R09: 0000000000000000 [ 362.798478][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.798488][ T8493] R13: 00007fc741626038 R14: 00007fc741625fa0 R15: 00007fff33713ee8 [ 362.798513][ T8493] [ 365.953490][ T8478] netlink: 104 bytes leftover after parsing attributes in process `syz.1.596'. [ 366.050185][ T8149] veth0_vlan: entered promiscuous mode [ 366.139134][ T8149] veth1_vlan: entered promiscuous mode [ 366.281265][ T8149] veth0_macvtap: entered promiscuous mode [ 366.320306][ T8149] veth1_macvtap: entered promiscuous mode [ 366.368972][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.431570][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.231717][ T8518] mmap: syz.3.607 (8518) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 367.380542][ T161] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.380596][ T161] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.380634][ T161] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.380671][ T161] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.563541][ T7673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.563565][ T7673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.636320][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.636343][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.615840][ T8544] loop1: detected capacity change from 0 to 8 [ 369.707607][ T5726] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 369.889332][ T5726] usb 4-1: unable to get BOS descriptor or descriptor too short [ 369.889879][ T5726] usb 4-1: not running at top speed; connect to a high speed hub [ 369.889930][ T5726] usb 4-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 369.900458][ T5726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.900483][ T5726] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.956980][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 369.988231][ T5726] usb 4-1: language id specifier not provided by device, defaulting to English [ 370.058816][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.130678][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 370.132690][ T10] usb 8-1: New USB device found: idVendor=0e41, idProduct=534d, bcdDevice=0.40 [ 370.138007][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.138030][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.181942][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.181971][ T10] usb 8-1: Product: syz [ 370.181987][ T10] usb 8-1: Manufacturer: syz [ 370.182021][ T10] usb 8-1: SerialNumber: syz [ 370.330430][ T5726] usb 4-1: 0:1 : does not exist [ 370.512174][ T8549] loop7: detected capacity change from 0 to 164 [ 370.720368][ T5726] usb 4-1: USB disconnect, device number 16 [ 370.888028][ T4929] Bluetooth: hci4: unexpected event for opcode 0x041b [ 370.945447][ T8555] Bluetooth: MGMT ver 1.23 [ 371.072855][ T8544] Dev loop1: unable to read RDB block 8 [ 371.072905][ T8544] loop1: unable to read partition table [ 371.073193][ T8544] loop1: partition table beyond EOD, truncated [ 371.073214][ T8544] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 371.211507][ T10] usb 8-1: unit 0 not found! [ 371.482975][ T10] usb 8-1: USB disconnect, device number 2 [ 371.823254][ T8562] loop3: detected capacity change from 0 to 32768 [ 371.845049][ T8562] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 371.845066][ T8562] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 371.893413][ T8562] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 371.905363][ T5726] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 371.905382][ T5726] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 372.206689][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.271757][ T5726] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 338ms [ 372.272102][ T5726] gfs2: fsid=syz:syz.0: jid=0: Done [ 372.272153][ T8562] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 372.599448][ T8573] loop6: detected capacity change from 0 to 32768 [ 372.641408][ T8573] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 372.641429][ T8573] CPU: 0 UID: 0 PID: 8573 Comm: syz.6.619 Not tainted syzkaller #0 PREEMPT(full) [ 372.641450][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 372.641460][ T8573] Call Trace: [ 372.641467][ T8573] [ 372.641474][ T8573] dump_stack_lvl+0xe8/0x150 [ 372.641504][ T8573] sysfs_create_dir_ns+0x271/0x2a0 [ 372.641526][ T8573] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 372.641549][ T8573] ? do_raw_spin_unlock+0xf5/0x200 [ 372.641569][ T8573] kobject_add_internal+0x622/0xcd0 [ 372.641597][ T8573] kobject_init_and_add+0x12b/0x1a0 [ 372.641623][ T8573] ? __pfx_kobject_init_and_add+0x10/0x10 [ 372.641647][ T8573] ? __raw_spin_lock_init+0x45/0x100 [ 372.641664][ T8573] ? __init_swait_queue_head+0xa8/0x150 [ 372.641692][ T8573] gfs2_sys_fs_add+0x257/0x480 [ 372.641708][ T8573] ? is_dynamic_key+0x1aa/0x1c0 [ 372.641729][ T8573] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 372.641752][ T8573] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 372.641782][ T8573] gfs2_fill_super+0x132d/0x20b0 [ 372.641814][ T8573] ? __pfx_gfs2_fill_super+0x10/0x10 [ 372.641867][ T8573] ? sb_set_blocksize+0x155/0x240 [ 372.641901][ T8573] ? setup_bdev_super+0x586/0x680 [ 372.641940][ T8573] get_tree_bdev_flags+0x430/0x4f0 [ 372.641971][ T8573] ? __pfx_gfs2_fill_super+0x10/0x10 [ 372.642002][ T8573] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 372.642043][ T8573] gfs2_get_tree+0x51/0x1e0 [ 372.642078][ T8573] vfs_get_tree+0x92/0x2a0 [ 372.642110][ T8573] do_new_mount+0x319/0xdc0 [ 372.642140][ T8573] ? __pfx_do_new_mount+0x10/0x10 [ 372.642166][ T8573] ? ns_capable+0x84/0xe0 [ 372.642200][ T8573] ? path_mount+0x647/0x1050 [ 372.642233][ T8573] ? user_path_at+0xd4/0x160 [ 372.642263][ T8573] __se_sys_mount+0x31d/0x420 [ 372.642299][ T8573] ? __pfx___se_sys_mount+0x10/0x10 [ 372.642330][ T8573] ? __x64_sys_mount+0x20/0xc0 [ 372.642356][ T8573] do_syscall_64+0x166/0x520 [ 372.642382][ T8573] ? trace_irq_disable+0x3b/0x140 [ 372.642412][ T8573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.642436][ T8573] ? clear_bhb_loop+0x70/0xc0 [ 372.642464][ T8573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.642488][ T8573] RIP: 0033:0x7f5bd6f9f3ca [ 372.642510][ T8573] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.642530][ T8573] RSP: 002b:00007f5bd7ebbe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 372.642555][ T8573] RAX: ffffffffffffffda RBX: 00007f5bd7ebbee0 RCX: 00007f5bd6f9f3ca [ 372.642572][ T8573] RDX: 0000200000000100 RSI: 0000200000001c00 RDI: 00007f5bd7ebbea0 [ 372.642590][ T8573] RBP: 0000200000000100 R08: 00007f5bd7ebbee0 R09: 0000000000000000 [ 372.642606][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000001c00 [ 372.642621][ T8573] R13: 00007f5bd7ebbea0 R14: 00000000000125b0 R15: 00002000000003c0 [ 372.642658][ T8573] [ 372.642687][ T8573] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 372.642706][ T8573] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 372.777319][ T8562] gfs2: fsid=syz:syz.0: found 1 quota changes [ 373.114620][ T8583] netlink: 76 bytes leftover after parsing attributes in process `syz.7.621'. [ 373.114645][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.7.621'. [ 375.239555][ T8596] tipc: Started in network mode [ 375.239588][ T8596] tipc: Node identity 9251d4774f7f, cluster identity 4711 [ 375.239748][ T8596] tipc: Enabled bearer , priority 0 [ 376.455486][ T8567] tipc: Node number set to 3710833783 [ 376.469375][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.625'. [ 376.582008][ T8592] tipc: Disabling bearer [ 377.010026][ T8616] FAULT_INJECTION: forcing a failure. [ 377.010026][ T8616] name failslab, interval 1, probability 0, space 0, times 0 [ 377.010059][ T8616] CPU: 0 UID: 0 PID: 8616 Comm: syz.5.630 Not tainted syzkaller #0 PREEMPT(full) [ 377.010084][ T8616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 377.010107][ T8616] Call Trace: [ 377.010116][ T8616] [ 377.010126][ T8616] dump_stack_lvl+0xe8/0x150 [ 377.010165][ T8616] should_fail_ex+0x3eb/0x540 [ 377.010205][ T8616] should_failslab+0xa8/0x100 [ 377.010239][ T8616] __kmalloc_noprof+0xf9/0x710 [ 377.010262][ T8616] ? rcu_is_watching+0x16/0xb0 [ 377.010296][ T8616] ? tomoyo_realpath_from_path+0xef/0x640 [ 377.010321][ T8616] ? tomoyo_realpath_from_path+0xef/0x640 [ 377.010354][ T8616] tomoyo_realpath_from_path+0xef/0x640 [ 377.010422][ T8616] ? tomoyo_path_number_perm+0x219/0x5f0 [ 377.010469][ T8616] tomoyo_path_number_perm+0x246/0x5f0 [ 377.010513][ T8616] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 377.010544][ T8616] ? __lock_acquire+0x747/0x2de0 [ 377.010615][ T8616] ? __fget_files+0x2a/0x420 [ 377.010643][ T8616] ? __fget_files+0x2a/0x420 [ 377.010667][ T8616] ? __fget_files+0x2a/0x420 [ 377.010695][ T8616] security_file_ioctl+0xc3/0x2a0 [ 377.010736][ T8616] __se_sys_ioctl+0x47/0x170 [ 377.010769][ T8616] do_syscall_64+0x166/0x520 [ 377.010794][ T8616] ? trace_irq_disable+0x3b/0x140 [ 377.010824][ T8616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.010848][ T8616] ? clear_bhb_loop+0x70/0xc0 [ 377.010876][ T8616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.010898][ T8616] RIP: 0033:0x7f03a9f9e159 [ 377.010919][ T8616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.010939][ T8616] RSP: 002b:00007f03aae81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.010964][ T8616] RAX: ffffffffffffffda RBX: 00007f03aa225fa0 RCX: 00007f03a9f9e159 [ 377.010981][ T8616] RDX: 0000200000002f00 RSI: 00000000c0487c04 RDI: 0000000000000003 [ 377.010996][ T8616] RBP: 00007f03aae81090 R08: 0000000000000000 R09: 0000000000000000 [ 377.011010][ T8616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.011024][ T8616] R13: 00007f03aa226038 R14: 00007f03aa225fa0 R15: 00007fff3abdaae8 [ 377.011064][ T8616] [ 377.011086][ T8616] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.472499][ T8619] usb usb8: usbfs: process 8619 (syz.6.628) did not claim interface 6 before use [ 378.048073][ T8619] loop6: detected capacity change from 0 to 512 [ 378.084601][ T8619] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.628: bg 0: block 184: padding at end of block bitmap is not set [ 378.084639][ T8619] loop6: lost filesystem error report for type 5 error -117 [ 378.085419][ C1] EXT4-fs (loop6): initial error at time 1790286633: ext4_validate_block_bitmap:445 [ 378.085451][ C1] EXT4-fs (loop6): last error at time 1790286633: ext4_validate_block_bitmap:445 [ 378.118169][ T8619] EXT4-fs (loop6): Remounting filesystem read-only [ 378.140539][ T8619] EXT4-fs (loop6): 1 truncate cleaned up [ 378.142544][ T8619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.142645][ T8619] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.203851][ T161] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 378.203898][ T161] Quota error (device loop6): write_blk: dquota write failed [ 378.203925][ T161] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 378.203956][ T161] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 378.203996][ T161] Quota error (device loop6): write_blk: dquota write failed [ 378.204025][ T161] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 378.234230][ T8619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.277594][ T8625] Bluetooth: MGMT ver 1.23 [ 378.321818][ T161] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 378.321863][ T161] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 378.322164][ T161] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 379.494473][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 379.657028][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 379.660242][ T9] usb 6-1: New USB device found: idVendor=0e41, idProduct=534d, bcdDevice=0.40 [ 379.662451][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.662478][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.685541][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.685625][ T9] usb 6-1: Product: syz [ 379.685668][ T9] usb 6-1: Manufacturer: syz [ 379.685713][ T9] usb 6-1: SerialNumber: syz [ 379.769970][ T8638] loop6: detected capacity change from 0 to 8 [ 379.950463][ T8638] unable to read inode lookup table [ 380.044816][ T8627] loop5: detected capacity change from 0 to 164 [ 380.177262][ T8649] FAULT_INJECTION: forcing a failure. [ 380.177262][ T8649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.177297][ T8649] CPU: 1 UID: 0 PID: 8649 Comm: syz.7.634 Not tainted syzkaller #0 PREEMPT(full) [ 380.177322][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 380.177339][ T8649] Call Trace: [ 380.177347][ T8649] [ 380.177357][ T8649] dump_stack_lvl+0xe8/0x150 [ 380.177395][ T8649] should_fail_ex+0x3eb/0x540 [ 380.177436][ T8649] _copy_from_iter+0x1d3/0x1660 [ 380.177470][ T8649] ? __alloc_skb+0x27a/0x7a0 [ 380.177492][ T8649] ? __alloc_skb+0x27a/0x7a0 [ 380.177514][ T8649] ? __alloc_skb+0x27a/0x7a0 [ 380.177534][ T8649] ? __pfx__copy_from_iter+0x10/0x10 [ 380.177566][ T8649] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 380.177588][ T8649] ? __alloc_skb+0x27a/0x7a0 [ 380.177606][ T8649] ? __alloc_skb+0x27a/0x7a0 [ 380.177632][ T8649] ? netlink_sendmsg+0x5fa/0xae0 [ 380.177660][ T8649] ? skb_put+0x112/0x210 [ 380.177684][ T8649] netlink_sendmsg+0x667/0xae0 [ 380.177719][ T8649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.177756][ T8649] ? apparmor_socket_sendmsg+0x98/0x360 [ 380.177793][ T8649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.177819][ T8649] sock_sendmsg_nosec+0x13a/0x180 [ 380.177860][ T8649] ____sys_sendmsg+0x54e/0x850 [ 380.177890][ T8649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.177924][ T8649] ? import_iovec+0x73/0xa0 [ 380.177952][ T8649] ___sys_sendmsg+0x2a5/0x360 [ 380.177974][ T8649] ? __lock_acquire+0x747/0x2de0 [ 380.178008][ T8649] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.178073][ T8649] ? __fget_files+0x3a2/0x420 [ 380.178096][ T8649] ? __fget_files+0x2a/0x420 [ 380.178129][ T8649] __x64_sys_sendmsg+0x1b1/0x290 [ 380.178157][ T8649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.178205][ T8649] do_syscall_64+0x166/0x520 [ 380.178229][ T8649] ? trace_irq_disable+0x3b/0x140 [ 380.178259][ T8649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.178282][ T8649] ? clear_bhb_loop+0x70/0xc0 [ 380.178309][ T8649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.178331][ T8649] RIP: 0033:0x7f42bb99e159 [ 380.178352][ T8649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.178371][ T8649] RSP: 002b:00007f42bc7d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.178395][ T8649] RAX: ffffffffffffffda RBX: 00007f42bbc25fa0 RCX: 00007f42bb99e159 [ 380.178412][ T8649] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 380.178427][ T8649] RBP: 00007f42bc7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 380.178441][ T8649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.178455][ T8649] R13: 00007f42bbc26038 R14: 00007f42bbc25fa0 R15: 00007fff84b0e4d8 [ 380.178491][ T8649] [ 380.819744][ T9] usb 6-1: unit 0 not found! [ 380.954939][ T9] usb 6-1: USB disconnect, device number 15 [ 381.090103][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.6.637'. [ 381.115211][ T8667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.222080][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.281359][ T8667] netlink: 28 bytes leftover after parsing attributes in process `syz.6.637'. [ 381.299781][ T8667] bond1: entered promiscuous mode [ 381.299809][ T8667] bond1: entered allmulticast mode [ 381.322607][ T8667] dummy0: entered promiscuous mode [ 381.323143][ T8667] dummy0: entered allmulticast mode [ 381.323572][ T8667] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 381.703230][ T8679] syz.1.640(8679): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 381.721360][ T8661] loop7: detected capacity change from 0 to 32768 [ 381.750038][ T5726] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 381.922952][ T5726] usb 6-1: Using ep0 maxpacket: 16 [ 381.923118][ T8661] read_mapping_page failed! [ 381.923595][ T8661] ERROR: (device loop7): txCommit: [ 381.923595][ T8661] [ 381.924431][ T5726] usb 6-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 381.925882][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.925915][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.925939][ T5726] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 381.925983][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.047046][ T5726] usb 6-1: config 0 descriptor?? [ 382.120048][ T8685] read_mapping_page failed! [ 382.120067][ T8685] ERROR: (device loop7): txCommit: [ 382.120067][ T8685] [ 382.198018][ T8684] read_mapping_page failed! [ 382.198047][ T8684] ERROR: (device loop7): txCommit: [ 382.198047][ T8684] [ 382.760085][ T5726] usbhid 6-1:0.0: can't add hid device: -71 [ 382.760165][ T5726] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 382.765909][ T5726] usb 6-1: USB disconnect, device number 16 [ 384.902224][ T5726] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 386.755353][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 386.808601][ T5726] usb 4-1: device descriptor read/all, error -71 [ 387.295128][ T8728] loop3: detected capacity change from 0 to 128 [ 387.348379][ T8728] loop3: detected capacity change from 0 to 256 [ 388.095614][ T8722] : renamed from vlan0 [ 389.471286][ T8736] FAULT_INJECTION: forcing a failure. [ 389.471286][ T8736] name failslab, interval 1, probability 0, space 0, times 0 [ 389.471322][ T8736] CPU: 0 UID: 0 PID: 8736 Comm: syz.5.652 Not tainted syzkaller #0 PREEMPT(full) [ 389.471349][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 389.471363][ T8736] Call Trace: [ 389.471372][ T8736] [ 389.471382][ T8736] dump_stack_lvl+0xe8/0x150 [ 389.471422][ T8736] should_fail_ex+0x3eb/0x540 [ 389.471463][ T8736] should_failslab+0xa8/0x100 [ 389.471498][ T8736] __kmalloc_cache_noprof+0x9e/0x600 [ 389.471525][ T8736] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 389.471551][ T8736] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 389.471580][ T8736] ? __se_sys_fanotify_init+0x40c/0x870 [ 389.471609][ T8736] fanotify_alloc_overflow_event+0x4a/0x140 [ 389.471639][ T8736] __se_sys_fanotify_init+0x450/0x870 [ 389.471671][ T8736] do_syscall_64+0x166/0x520 [ 389.471696][ T8736] ? trace_irq_disable+0x3b/0x140 [ 389.471727][ T8736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.471751][ T8736] ? clear_bhb_loop+0x70/0xc0 [ 389.471780][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.471803][ T8736] RIP: 0033:0x7f03a9f9e159 [ 389.471824][ T8736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.471844][ T8736] RSP: 002b:00007f03aae60028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 389.471869][ T8736] RAX: ffffffffffffffda RBX: 00007f03aa226090 RCX: 00007f03a9f9e159 [ 389.471886][ T8736] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000040 [ 389.471900][ T8736] RBP: 00007f03aa03506b R08: 0000000000000000 R09: 0000000000000000 [ 389.471915][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.471929][ T8736] R13: 00007f03aa226128 R14: 00007f03aa226090 R15: 00007fff3abdaae8 [ 389.471966][ T8736] [ 390.061662][ T5741] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 390.224516][ T5741] usb 4-1: New USB device found: idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 390.226006][ T5741] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 390.226031][ T5741] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 391.792531][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.792565][ T5741] usb 4-1: Product: syz [ 391.792581][ T5741] usb 4-1: Manufacturer: syz [ 391.792597][ T5741] usb 4-1: SerialNumber: syz [ 393.324670][ T5741] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 393.352141][ T5741] dvb_usb_af9015 4-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 393.371844][ T5741] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 393.371938][ T5741] dvb_usb_af9035 4-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 393.399690][ T5741] usb 4-1: USB disconnect, device number 19 [ 393.980176][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.980241][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.565191][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.565237][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 468.363768][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 527.150410][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 527.150464][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.603390][ T34] INFO: task kworker/u8:3:51 blocked in I/O wait for more than 143 seconds. [ 564.603421][ T34] Not tainted syzkaller #0 [ 564.603434][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.603444][ T34] task:kworker/u8:3 state:D stack:21544 pid:51 tgid:51 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 564.603505][ T34] Workqueue: writeback wb_workfn (flush-8:0) [ 564.603548][ T34] Call Trace: [ 564.603555][ T34] [ 564.603569][ T34] __schedule+0x1b47/0x5c60 [ 564.603622][ T34] ? __blk_flush_plug+0x416/0x4d0 [ 564.603655][ T34] ? __pfx___schedule+0x10/0x10 [ 564.603689][ T34] ? schedule+0x90/0x2b0 [ 564.603715][ T34] schedule+0x164/0x2b0 [ 564.603738][ T34] io_schedule+0x7f/0xd0 [ 564.603763][ T34] bit_wait_io+0x13/0x110 [ 564.603789][ T34] __wait_on_bit+0xac/0x300 [ 564.603812][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 564.603840][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 564.603865][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 564.603888][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 564.603917][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 564.603963][ T34] do_get_write_access+0x658/0x10c0 [ 564.604012][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 564.604042][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 564.604078][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 564.604143][ T34] ext4_reserve_inode_write+0x294/0x360 [ 564.604178][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 564.604220][ T34] ext4_dirty_inode+0xd0/0x110 [ 564.604246][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 564.604269][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 564.604298][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 564.604327][ T34] ext4_da_update_reserve_space+0x245/0x720 [ 564.604363][ T34] ext4_es_insert_extent+0x2674/0x2f50 [ 564.604416][ T34] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 564.604459][ T34] ? down_write+0x166/0x200 [ 564.604489][ T34] ext4_map_create_blocks+0x321/0x530 [ 564.604523][ T34] ? ext4_fc_track_inode+0xf3/0x3f0 [ 564.604557][ T34] ext4_map_blocks+0x791/0x ** replaying previous printk message ** [ 564.604557][ T34] ext4_map_blocks+0x791/0x12c0 [ 564.604598][ T34] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 564.604624][ T34] ? __pfx_ext4_map_blocks+0x10/0x10 [ 564.604654][ T34] ? kmem_cache_alloc_noprof+0x151/0x600 [ 564.604689][ T34] ? ext4_inode_journal_mode+0x376/0x470 [ 564.604717][ T34] ext4_do_writepages+0x2398/0x4770 [ 564.604785][ T34] ? ieee80211_inform_bss+0xbda/0x10d0 [ 564.604828][ T34] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 564.604854][ T34] ? __pfx_ext4_do_writepages+0x10/0x10 [ 564.607032][ T34] ? __lock_acquire+0x747/0x2de0 [ 564.607065][ T34] ? __lock_acquire+0x747/0x2de0 [ 564.607097][ T34] ? __lock_acquire+0x747/0x2de0 [ 564.607125][ T34] ? lock_acquire+0x115/0x350 [ 564.608899][ T34] ext4_writepages+0x1fe/0x4e0 [ 564.608931][ T34] ? __pfx_ext4_writepages+0x10/0x10 [ 564.608971][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 564.608989][ T34] ? __pfx_ext4_writepages+0x10/0x10 [ 564.609010][ T34] do_writepages+0x338/0x560 [ 564.609036][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.609056][ T34] ? reacquire_held_locks+0x117/0x1a0 [ 564.609079][ T34] ? writeback_sb_inodes+0x450/0x1af0 [ 564.609099][ T34] __writeback_single_inode+0x136/0x1220 [ 564.609118][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 564.609138][ T34] writeback_sb_inodes+0x9de/0x1af0 [ 564.609173][ T34] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 564.609214][ T34] ? __pfx_down_read_trylock+0x10/0x10 [ 564.609251][ T34] __writeback_inodes_wb+0x114/0x240 [ 564.609274][ T34] wb_writeback+0x42f/0xad0 [ 564.609291][ T34] ? queue_io+0x2c1/0x470 [ 564.609310][ T34] ? __pfx_wb_writeback+0x10/0x10 [ 564.609324][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.609352][ T34] wb_workfn+0xc92/0x10f0 [ 564.609387][ T34] ? __pfx_wb_workfn+0x10/0x10 [ 564.609418][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.609441][ T34] ? lock_acquire+0x115/0x350 [ 564.609469][ T34] ? rcu_is_watching+0x16/0xb0 [ 564.609497][ T34] ? process_scheduled_works+0x97a/0x1630 [ 564.609522][ T34] process_scheduled_works+0xc3d/0x1630 [ 564.609569][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 564.609617][ T34] ? assign_work+0x3cf/0x5d0 [ 564.609645][ T34] worker_thread+0xa47/0xfb0 [ 564.609690][ T34] kthread+0x38b/0x480 [ 564.609710][ T34] ? __pfx_worker_thread+0x10/0x10 [ 564.609733][ T34] ? __pfx_kthread+0x10/0x10 [ 564.609752][ T34] ret_from_fork+0x514/0xb70 [ 564.609773][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 564.609790][ T34] ? __switch_to+0xc78/0x1410 [ 564.609815][ T34] ? __pfx_kthread+0x10/0x10 [ 564.609834][ T34] ret_from_fork_asm+0x1a/0x30 [ 564.609861][ T34] [ 564.609922][ T34] INFO: task jbd2/sda1-8:4941 blocked in I/O wait for more than 143 seconds. [ 564.609935][ T34] Not tainted syzkaller #0 [ 564.609943][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.609950][ T34] task:jbd2/sda1-8 state:D stack:24192 pid:4941 tgid:4941 ppid:2 task_flags:0x240040 flags:0x00080000 [ 564.610040][ T34] Call Trace: [ 564.610046][ T34] [ 564.610055][ T34] __schedule+0x1b47/0x5c60 [ 564.610093][ T34] ? __pfx___schedule+0x10/0x10 [ 564.610116][ T34] ? schedule+0x90/0x2b0 [ 564.610133][ T34] schedule+0x164/0x2b0 [ 564.610150][ T34] io_schedule+0x7f/0xd0 [ 564.610167][ T34] bit_wait_io+0x13/0x110 [ 564.610186][ T34] __wait_on_bit+0xac/0x300 [ 564.610202][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 564.610222][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 564.610240][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 564.610257][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 564.610277][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 564.610336][ T34] ? __wait_on_buffer+0xe/0x80 [ 564.610373][ T34] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 564.610446][ T34] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 564.610479][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.610503][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.610527][ T34] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 564.610553][ T34] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 564.610577][ T34] ? __timer_delete_sync+0x4a7/0x520 [ 564.610603][ T34] kjournald2+0x3bc/0x740 [ 564.610630][ T34] ? __pfx_kjournald2+0x10/0x10 [ 564.610645][ T34] ? __pfx_autoremove_wake_function+0x10/0x10 [ 564.610670][ T34] ? __kthread_parkme+0x71/0x1f0 [ 564.610687][ T34] ? __kthread_parkme+0x199/0x1f0 [ 564.610708][ T34] kthread+0x38b/0x480 [ 564.610726][ T34] ? __pfx_kjournald2+0x10/0x10 [ 564.610739][ T34] ? __pfx_kthread+0x10/0x10 [ 564.610759][ T34] ret_from_fork+0x514/0xb70 [ 564.610776][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 564.610791][ T34] ? __switch_to+0xc78/0x1410 [ 564.610814][ T34] ? __pfx_kthread+0x10/0x10 [ 564.610834][ T34] ret_from_fork_asm+0x1a/0x30 [ 564.610860][ T34] [ 564.610872][ T34] INFO: task syz-executor:5600 blocked in I/O wait for more than 143 seconds. [ 564.610884][ T34] Not tainted syzkaller #0 [ 564.610891][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.610899][ T34] task:syz-executor state:D stack:22216 pid:5600 tgid:5600 ppid:5599 task_flags:0x440100 flags:0x00080000 [ 564.610941][ T34] Call Trace: [ 564.610947][ T34] [ 564.610956][ T34] __schedule+0x1b47/0x5c60 [ 564.611064][ T34] ? __pfx___schedule+0x10/0x10 [ 564.611091][ T34] ? schedule+0x90/0x2b0 [ 564.611109][ T34] schedule+0x164/0x2b0 [ 564.611126][ T34] io_schedule+0x7f/0xd0 [ 564.611143][ T34] bit_wait_io+0x13/0x110 [ 564.611162][ T34] __wait_on_bit+0xac/0x300 [ 564.611179][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 564.611198][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 564.611217][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 564.611234][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 564.611254][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 564.611286][ T34] do_get_write_access+0x658/0x10c0 [ 564.611319][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 564.611340][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 564.611383][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 564.611402][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 564.611417][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 564.611441][ T34] ext4_reserve_inode_write+0x294/0x360 [ 564.611466][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 564.611498][ T34] ext4_dirty_inode+0xd0/0x110 [ 564.611520][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 564.611538][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 564.611566][ T34] file_update_time_flags+0x399/0x440 [ 564.611590][ T34] ext4_page_mkwrite+0x21f/0x12c0 [ 564.611621][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 564.611639][ T34] ? __lock_acquire+0x747/0x2de0 [ 564.611666][ T34] do_page_mkwrite+0x147/0x310 [ 564.611687][ T34] do_wp_page+0x1a85/0x4b60 [ 564.611724][ T34] ? __pfx_do_wp_page+0x10/0x10 [ 564.611744][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.611762][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 564.611786][ T34] handle_mm_fault+0x15d7/0x3750 [ 564.611818][ T34] ? handle_mm_fault+0xf1/0x3750 [ 564.611863][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 564.611885][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 564.611908][ T34] ? __pfx_set_user_sigmask+0x10/0x10 [ 564.611948][ T34] do_user_addr_fault+0xb35/0x1480 [ 564.611974][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 564.611993][ T34] exc_page_fault+0x6a/0xc0 [ 564.612040][ T34] asm_exc_page_fault+0x26/0x30 [ 564.612057][ T34] RIP: 0033:0x7f39074701e3 [ 564.612072][ T34] RSP: 002b:00007ffce7792ec0 EFLAGS: 00010202 [ 564.612087][ T34] RAX: 00007f39047f0f60 RBX: 00007ffce7792ff0 RCX: 0000000000000000 [ 564.612098][ T34] RDX: 00007f39047f0f5c RSI: 0000000000000008 RDI: 00007ffce7792ff0 [ 564.612109][ T34] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 564.612119][ T34] R10: 00007ffce7792fd0 R11: 0000000000000000 R12: 0000000000000000 [ 564.612129][ T34] R13: 000000000000f0a0 R14: ffffffffffff0f60 R15: 0000000000000000 [ 564.612164][ T34] [ 564.612201][ T34] INFO: task syz.6.648:8763 blocked in I/O wait for more than 143 seconds. [ 564.612214][ T34] Not tainted syzkaller #0 [ 564.612222][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.612229][ T34] task:syz.6.648 state:D stack:26936 pid:8763 tgid:8763 ppid:6895 task_flags:0x440040 flags:0x00080002 [ 564.612285][ T34] Call Trace: [ 564.612291][ T34] [ 564.612300][ T34] __schedule+0x1b47/0x5c60 [ 564.612333][ T34] ? is_bpf_text_address+0x26/0x2b0 [ 564.612351][ T34] ? __pfx___schedule+0x10/0x10 [ 564.612374][ T34] ? schedule+0x90/0x2b0 [ 564.612392][ T34] schedule+0x164/0x2b0 [ 564.612408][ T34] io_schedule+0x7f/0xd0 [ 564.612425][ T34] bit_wait_io+0x13/0x110 [ 564.612443][ T34] __wait_on_bit+0xac/0x300 [ 564.612460][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 564.612479][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 564.612498][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 564.612516][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 564.612535][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 564.612567][ T34] do_get_write_access+0x658/0x10c0 [ 564.612599][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 564.612621][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 564.612645][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 564.612671][ T34] ext4_reserve_inode_write+0x294/0x360 [ 564.612697][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 564.612728][ T34] ext4_dirty_inode+0xd0/0x110 [ 564.612747][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 564.612765][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 564.612785][ T34] ? mnt_get_write_access+0x216/0x280 [ 564.612806][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 564.612831][ T34] touch_atime+0x568/0x670 [ 564.612849][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 564.612878][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 564.612907][ T34] mmap_region+0xf0b/0x2c60 [ 564.612939][ T34] ? lock_acquire+0x115/0x350 [ 564.613129][ T34] ? __page_table_check_zero+0x6c/0x430 [ 564.613208][ T34] ? __pfx_mmap_region+0x10/0x10 [ 564.613244][ T34] ? __page_table_check_zero+0x6c/0x430 [ 564.613283][ T34] ? __page_table_check_zero+0x6c/0x430 [ 564.613303][ T34] ? __page_table_check_zero+0x3c3/0x430 [ 564.613322][ T34] ? __page_table_check_zero+0x6c/0x430 [ 564.613368][ T34] ? lock_acquire+0x115/0x350 [ 564.613457][ T34] ? mt_find+0x186/0x630 [ 564.613479][ T34] ? mt_find+0x5ff/0x630 [ 564.613499][ T34] ? mt_find+0x186/0x630 [ 564.613520][ T34] ? __pfx_mt_find+0x10/0x10 [ 564.613544][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 564.613563][ T34] ? security_mmap_addr+0x71/0x240 [ 564.613587][ T34] ? shmem_mapping+0xd/0x50 [ 564.613601][ T34] ? memfd_check_seals_mmap+0xc5/0x220 [ 564.613630][ T34] do_mmap+0xe0a/0x1300 [ 564.768594][ T34] ? __pfx_do_mmap+0x10/0x10 [ 564.768646][ T34] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 564.768670][ T34] ? down_write_killable+0x179/0x230 [ 564.768702][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 564.768729][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 564.768766][ T34] vm_mmap_pgoff+0x272/0x4e0 [ 564.768791][ T34] ? lock_acquire+0x115/0x350 [ 564.768825][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 564.768851][ T34] ? __fget_files+0x2a/0x420 [ 564.768879][ T34] ? __fget_files+0x3a2/0x420 [ 564.768900][ T34] ? __fget_files+0x2a/0x420 [ 564.768926][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 564.768965][ T34] do_syscall_64+0x166/0x520 [ 564.768989][ T34] ? trace_irq_disable+0x3b/0x140 [ 564.769019][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.769042][ T34] ? clear_bhb_loop+0x70/0xc0 [ 564.769076][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.769099][ T34] RIP: 0033:0x7f5bd6f9dec2 [ 564.769118][ T34] RSP: 002b:00007ffddcd25698 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 564.769143][ T34] RAX: ffffffffffffffda RBX: 0000001b33964000 RCX: 00007f5bd6f9dec2 [ 564.769160][ T34] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b33964000 [ 564.769175][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 564.769188][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000045 [ 564.769203][ T34] R13: 00000000000927c0 R14: 000000000005a06d R15: 00007ffddcd25970 [ 564.769238][ T34] [ 564.769279][ T34] INFO: task syz.7.654:8768 blocked in I/O wait for more than 143 seconds. [ 564.769298][ T34] Not tainted syzkaller #0 [ 564.769309][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.769319][ T34] task:syz.7.654 state:D stack:28104 pid:8768 tgid:8768 ppid:8149 task_flags:0x440040 flags:0x00080002 [ 564.769385][ T34] Call Trace: [ 564.769394][ T34] [ 564.769407][ T34] __schedule+0x1b47/0x5c60 [ 564.769458][ T34] ? __pfx___schedule+0x10/0x10 [ 564.769491][ T34] ? schedule+0x90/0x2b0 [ 564.769516][ T34] schedule+0x164/0x2b0 [ 564.769539][ T34] io_schedule+0x7f/0xd0 [ 564.769564][ T34] bit_wait_io+0x13/0x110 [ 564.769590][ T34] __wait_on_bit+0xac/0x300 [ 564.769613][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 564.769641][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 564.769668][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 564.769691][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 564.769720][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 564.769764][ T34] do_get_write_access+0x658/0x10c0 [ 564.769811][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 564.769842][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 564.769875][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 564.769901][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 564.769923][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 564.769955][ T34] ext4_reserve_inode_write+0x294/0x360 [ 564.770009][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 564.770061][ T34] ext4_dirty_inode+0xd0/0x110 [ 564.786656][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 564.786754][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 564.786861][ T34] file_update_time_flags+0x399/0x440 [ 564.786969][ T34] ext4_page_mkwrite+0x21f/0x12c0 [ 564.787297][ T34] ? __pfx_filemap_fault+0x10/0x10 [ 564.787407][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 564.787485][ T34] ? lruvec_stat_mod_folio+0x28e/0x3e0 [ 564.787567][ T34] do_page_mkwrite+0x147/0x310 [ 564.787656][ T34] do_pte_missing+0x70f/0x3570 [ 564.787722][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 564.787793][ T34] ? _raw_spin_unlock+0x28/0x50 [ 564.787877][ T34] ? __pmd_alloc+0x40a/0x5c0 [ 564.787962][ T34] handle_mm_fault+0x1a53/0x3750 [ 564.788060][ T34] ? handle_mm_fault+0xf1/0x3750 [ 564.788167][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 564.788429][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 564.788587][ T34] do_user_addr_fault+0xb35/0x1480 [ 564.788681][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 564.788773][ T34] exc_page_fault+0x6a/0xc0 [ 564.788873][ T34] asm_exc_page_fault+0x26/0x30 [ 564.788937][ T34] RIP: 0033:0x7f42bb86baa3 [ 564.788990][ T34] RSP: 002b:00007fff84b0e640 EFLAGS: 00010246 [ 564.789045][ T34] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 564.789072][ T34] RDX: 0000001b31324000 RSI: 0000000000040000 RDI: 00007f42bbbe0708 [ 564.789114][ T34] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.789148][ T34] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 564.789180][ T34] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff84b0e8d0 [ 564.789267][ T34] [ 564.789300][ T34] INFO: task syz.1.660:8770 blocked in I/O wait for more than 143 seconds. [ 564.789350][ T34] Not tainted syzkaller #0 [ 564.789382][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.789405][ T34] task:syz.1.660 state:D stack:26936 pid:8770 tgid:8770 ppid:5611 task_flags:0x440040 flags:0x00080002 [ 564.789583][ T34] Call Trace: [ 564.789603][ T34] [ 564.789636][ T34] __schedule+0x1b47/0x5c60 [ 564.789763][ T34] ? is_bpf_text_address+0x26/0x2b0 [ 564.789830][ T34] ? __pfx___schedule+0x10/0x10 [ 564.789956][ T34] ? schedule+0x90/0x2b0 [ 564.790022][ T34] schedule+0x164/0x2b0 [ 564.790162][ T34] io_schedule+0x7f/0xd0 [ 564.790242][ T34] bit_wait_io+0x13/0x110 [ 564.790309][ T34] __wait_on_bit+0xac/0x300 [ 564.790374][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 564.790448][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 564.790533][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 564.790595][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 564.790667][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 564.790774][ T34] do_get_write_access+0x658/0x10c0 [ 564.790894][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 564.790968][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 564.791057][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 564.791158][ T34] ext4_reserve_inode_write+0x294/0x360 [ 564.791244][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 564.791358][ T34] ext4_dirty_inode+0xd0/0x110 [ 564.791428][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 564.791519][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 564.791605][ T34] ? mnt_get_write_access+0x216/0x280 [ 564.791675][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 564.791749][ T34] touch_atime+0x568/0x670 [ 564.791776][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 564.791897][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 564.792026][ T34] mmap_region+0xf0b/0x2c60 [ 564.792124][ T34] ? lock_acquire+0x115/0x350 [ 564.792207][ T34] ? __page_table_check_zero+0x6c/0x430 [ 564.792290][ T34] ? __pfx_mmap_region+0x10/0x10 [ 564.792366][ T34] ? __page_table_check_zero+0x6c/0x430 [ 564.792450][ T34] ? __page_table_check_zero+0x6c/0x430 [ 564.792516][ T34] ? __page_table_check_zero+0x3c3/0x430 [ 564.792598][ T34] ? __page_table_check_zero+0x6c/0x430 [ 564.792748][ T34] ? lock_acquire+0x115/0x350 [ 564.793041][ T34] ? mt_find+0x186/0x630 [ 564.793129][ T34] ? mt_find+0x5ff/0x630 [ 564.793204][ T34] ? mt_find+0x186/0x630 [ 564.793283][ T34] ? __pfx_mt_find+0x10/0x10 [ 564.793383][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 564.793456][ T34] ? security_mmap_addr+0x71/0x240 [ 564.793559][ T34] ? shmem_mapping+0xd/0x50 [ 564.793614][ T34] ? memfd_check_seals_mmap+0xc5/0x220 [ 564.793709][ T34] do_mmap+0xe0a/0x1300 [ 564.793808][ T34] ? __pfx_do_mmap+0x10/0x10 [ 564.793924][ T34] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 564.793980][ T34] ? down_write_killable+0x179/0x230 [ 564.794082][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 564.794168][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 564.794261][ T34] vm_mmap_pgoff+0x272/0x4e0 [ 564.794326][ T34] ? lock_acquire+0x115/0x350 [ 564.794409][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 564.794475][ T34] ? __fget_files+0x2a/0x420 [ 564.794563][ T34] ? __fget_files+0x3a2/0x420 [ 564.794624][ T34] ? __fget_files+0x2a/0x420 [ 564.794703][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 564.794817][ T34] do_syscall_64+0x166/0x520 [ 564.794869][ T34] ? trace_irq_disable+0x3b/0x140 [ 564.794942][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.795002][ T34] ? clear_bhb_loop+0x70/0xc0 [ 564.795070][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.795124][ T34] RIP: 0033:0x7f7ccf19dec2 [ 564.795193][ T34] RSP: 002b:00007ffe9b051a18 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 564.795242][ T34] RAX: ffffffffffffffda RBX: 0000001b33364000 RCX: 00007f7ccf19dec2 [ 564.795284][ T34] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b33364000 [ 564.795328][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 564.795362][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000a2 [ 564.795403][ T34] R13: 00000000000927c0 R14: 000000000005bdbb R15: 00007ffe9b051cf0 [ 564.795489][ T34] [ 564.800919][ T34] [ 564.800919][ T34] Showing all locks held in the system: [ 564.800947][ T34] locks held by pr/ttyS0/16: 2, last CPU#1: [ 564.801005][ T34] #0: ffffffff8ec35e58 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 564.801178][ T34] #1: ffffffff9ad5bbf8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 564.801360][ T34] locks held by khungtaskd/34: 1, last CPU#0: [ 564.801396][ T34] #0: ffffffff8ed5c260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 564.801583][ T34] locks held by kworker/u8:3/51: 6, on CPU#0: [ 564.801632][ T34] #0: ffff888020aee948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 564.801806][ T34] #1: ffffc90000bb7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 564.801978][ T34] #2: ffff888035eb20e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 564.802140][ T34] #3: ffff888035eb0c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 564.802294][ T34] #4: ffff888035ebe938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 564.802469][ T34] #5: ffff8880765de5c8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0 [ 564.804523][ T34] locks held by klogd/4968: 1, last CPU#0: [ 564.804573][ T34] #0: ffffffff8eeae890 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 564.804723][ T34] locks held by getty/5369: 2, on CPU#1: [ 564.804766][ T34] #0: ffff888035e630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 564.804934][ T34] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 564.805077][ T34] locks held by syz-executor/5600: 3, on CPU#0: [ 564.805112][ T34] #0: ffff88807e61fbc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 564.805281][ T34] #1: ffff888035eb2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 564.805432][ T34] #2: ffff888035ebe938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 564.805648][ T34] locks held by syz.6.648/8763: 3, on CPU#0: [ 564.805690][ T34] #0: ffff88807e6fccc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 564.805854][ T34] #1: ffff888035eb2460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 564.807804][ T34] #2: ffff888035ebe938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 564.807945][ T34] locks held by syz.7.654/8768: 3, on CPU#1: [ 564.807979][ T34] #0: ffff888077000d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 564.808143][ T34] #1: ffff888035eb2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 564.808296][ T34] #2: ffff888035ebe938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 564.808437][ T34] locks held by syz.1.660/8770: 3, on CPU#1: [ 564.808481][ T34] #0: ffff8880290f8340 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 564.808589][ T34] #1: ffff888035eb2460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 564.813774][ T34] #2: ffff888035ebe938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 564.813924][ T34] [ 564.813931][ T34] ============================================= [ 564.813931][ T34] [ 564.813955][ T34] NMI backtrace for cpu 0 [ 564.813971][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 564.813997][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 564.814010][ T34] Call Trace: [ 564.814019][ T34] [ 564.814027][ T34] dump_stack_lvl+0xe8/0x150 [ 564.814071][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 564.814183][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 564.814295][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 564.814390][ T34] sys_info+0x135/0x170 [ 564.814463][ T34] watchdog+0x1058/0x10d0 [ 564.814570][ T34] ? watchdog+0x209/0x10d0 [ 564.814676][ T34] kthread+0x38b/0x480 [ 564.814743][ T34] ? __pfx_watchdog+0x10/0x10 [ 564.814808][ T34] ? __pfx_kthread+0x10/0x10 [ 564.814882][ T34] ret_from_fork+0x514/0xb70 [ 564.814946][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 564.815011][ T34] ? __switch_to+0xc78/0x1410 [ 564.815118][ T34] ? __pfx_kthread+0x10/0x10 [ 564.815195][ T34] ret_from_fork_asm+0x1a/0x30 [ 564.815300][ T34] [ 564.815398][ T34] Sending NMI from CPU 0 to CPUs 1: [ 564.815507][ C1] NMI backtrace for cpu 1 [ 564.815523][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 564.815554][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 564.815565][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 564.815587][ C1] Code: e8 2e c8 50 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 45 c2 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 89 75 06 cc 44 89 f9 80 e1 07 [ 564.815603][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 564.815619][ C1] RAX: 1ffffffff35ab700 RBX: 00000000000003fd RCX: 0000000000000000 [ 564.815632][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 564.815643][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 564.815655][ C1] R10: dffffc0000000000 R11: ffffffff85780ec0 R12: dffffc0000000000 [ 564.815670][ C1] R13: 0000000000000000 R14: ffffffff9ad5bc20 R15: 0000000000000000 [ 564.815682][ C1] FS: 0000000000000000(0000) GS:ffff888124db2000(0000) knlGS:0000000000000000 [ 564.815697][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.815710][ C1] CR2: 0000565459402168 CR3: 000000000eb46000 CR4: 00000000003526f0 [ 564.815726][ C1] Call Trace: [ 564.815733][ C1] [ 564.815741][ C1] wait_for_lsr+0x184/0x2f0 [ 564.815762][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 564.815790][ C1] serial8250_console_write+0xaa1/0x1200 [ 564.815814][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 564.815830][ C1] ? __schedule+0x1b5d/0x5c60 [ 564.815855][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 564.815890][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 564.815917][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 564.815950][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 564.815980][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 564.816006][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 564.816029][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 564.816062][ C1] ? __kthread_parkme+0x71/0x1f0 [ 564.816080][ C1] ? __kthread_parkme+0x199/0x1f0 [ 564.816101][ C1] kthread+0x38b/0x480 [ 564.816122][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 564.816144][ C1] ? __pfx_kthread+0x10/0x10 [ 564.816164][ C1] ret_from_fork+0x514/0xb70 [ 564.816183][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 564.816199][ C1] ? __switch_to+0xc78/0x1410 [ 564.816225][ C1] ? __pfx_kthread+0x10/0x10 [ 564.816246][ C1] ret_from_fork_asm+0x1a/0x30 [ 564.816271][ C1] [ 564.823403][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 567.373479][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 567.382609][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 567.392700][ T34] Call Trace: [ 567.396004][ T34] [ 567.398945][ T34] vpanic+0x26f/0x710 [ 567.403013][ T34] panic+0xc5/0xd0 [ 567.406757][ T34] ? __pfx_panic+0x10/0x10 [ 567.411178][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 567.416640][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 567.422018][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 567.428183][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 567.434369][ T34] watchdog+0x10cc/0x10d0 [ 567.438723][ T34] ? watchdog+0x209/0x10d0 [ 567.443170][ T34] kthread+0x38b/0x480 [ 567.447256][ T34] ? __pfx_watchdog+0x10/0x10 [ 567.451951][ T34] ? __pfx_kthread+0x10/0x10 [ 567.456566][ T34] ret_from_fork+0x514/0xb70 [ 567.461190][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 567.466336][ T34] ? __switch_to+0xc78/0x1410 [ 567.471031][ T34] ? __pfx_kthread+0x10/0x10 [ 567.475640][ T34] ret_from_fork_asm+0x1a/0x30 [ 567.480436][ T34] [ 567.484113][ T34] Kernel Offset: disabled [ 567.488528][ T34] Rebooting in 86400 seconds..