last executing test programs: 3m49.389910917s ago: executing program 2 (id=8): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @rr={0x7, 0x3, 0xff}]}}}], 0x18}, 0x200040c4) (fail_nth: 3) 3m49.108580919s ago: executing program 2 (id=9): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) 3m48.8808443s ago: executing program 2 (id=10): r0 = getpid() syz_clone(0x18000800, &(0x7f0000000240)="25c169271135f675b58e1d3a41bdd9aa60bb6191f1469bacf6c54735c61de522adbc081ce2b1132f784d177374268ab729b7543b9baf33fd2d362863e01b8f8822569b41158fa30b1ec14e9c51d57c09348653c7428912930e36aac58c0502c49ae95183f1655ef5dfc48c30efe9049e8030d43a2e4613564044be969cc9016d50a7707e5f48885a43f13ba74db0b0a2eaff61c20d31407a303115f1f752f7c5a70ac162b9a7ad9352c0ddeba033656582f0f992ca449e9991b0e797782958fd42b0330c3b2c684e061b8f397e41d40b855a9512498fdcd911b878fa18ee8fdb4d33bbb0ea807b05579f3269ff00073ccbc845", 0xf3, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="93a103ac0fb2d20ef2d1375c389caccdd929ec4ab56d562c0fafe0f7ecd7dacbe9cdf8d5e5a86485c04e288c36b376becf30") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x2) r2 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRESOCT=r1], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x88, 0x3, &(0x7f00000000c0)="02c0e5") 3m43.032708495s ago: executing program 2 (id=16): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000884, &(0x7f0000000240)=ANY=[@ANYBLOB='codepage=1251,nonumtail=0,shortname=win95,shortname=win95,shortname=lower,utf8=0,shortname=winnt,uni_xlate=0,iocharset=macceltic,nonumtail=0,iocharset=iso8859-5,nonumtail=0,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x28d, &(0x7f0000000e40)="$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") r0 = syz_open_dev$vcsa(&(0x7f0000000440), 0x2b06, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44891}, 0x44080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x50) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000640)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e20, @local}, 0x301, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0)='veth0_vlan\x00', 0x2, 0x8001, 0x2dc3}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@gettclass={0x24, 0x28, 0x1, 0x70bdaa, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xe}, {0x9}, {0x6, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x240410d0}, 0x0) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc038563c, &(0x7f0000000340)={0x0, 0x1, "119f04499489f733dcaa932034d61433a5ba43d2103eb3221503dc2984dea6e2", 0x0, 0xfffffffffffffffc, 0x4, 0x8, 0x9, 0x0, 0x7e, 0x0, [0x10000009, 0x800000, 0x0, 0x2]}) epoll_create1(0x8de494ba95477107) write(r5, &(0x7f0000000400)='common_pid > \"\"', 0xf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0) dup(r5) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f00000000c0)={0x7, 0xc, 0x3, '\x00', 0x2}, 0x1) 3m41.586664902s ago: executing program 2 (id=21): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl711\x00', [0x140, 0xfffffffc, 0x1000c, 0xdddc, 0x0, 0xbd, 0x7fff, 0x6, 0x7, 0xc72c, 0x2000004, 0xf, 0xc000, 0x8, 0x4ce, 0x8e99, 0x80000001, 0xed, 0x5, 0x8, 0x4, 0x0, 0x800000a, 0x9, 0xffd, 0x9, 0xaf, 0x9, 0x283, 0x8001, 0xe43f]}) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1}}, 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000080)={[{@cruft}, {@map_normal}, {@session={'session', 0x3d, 0x16}}, {@check_relaxed}, {@dmode={'dmode', 0x3d, 0x3}}]}, 0x1, 0x534, &(0x7f0000000580)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x600061, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20080, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 3m39.86720139s ago: executing program 2 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a, 0x60}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 3m38.769657232s ago: executing program 32 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a, 0x60}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 13.688484483s ago: executing program 4 (id=489): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x3, 0x17, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x5, @local, 0x4}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0xb8}, 0x1, 0x7}, 0x0) r1 = socket(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001f40), 0x2248, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c250000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r5, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 11.429633562s ago: executing program 0 (id=493): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)={0x48, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x44000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) unshare(0x8040480) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffceb}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r6, r6, 0x2f}, 0x20) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@fallback=r6, r7, 0x2f, 0x18, 0x4, @void, @value=r6}, 0x20) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r5, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000080)={0x28, 0x0, r8, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000100)={0x18, r5}) fallocate(r0, 0xc, 0x1, 0x8) 10.388145414s ago: executing program 4 (id=498): ptrace$setregset(0x4205, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000180)='\x00', 0x1}, {&(0x7f000001a540)="39c553be65", 0x5}], 0x2, 0x0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r1, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r1, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r1, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r1, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r1, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r1, &(0x7f0000000100)='\x00', 0x1, 0x1e8133) pwrite64(r1, &(0x7f0000000100)='TOCBLOCK', 0x8, 0x100200) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00', [0x0, 0x400]}) 8.861305076s ago: executing program 3 (id=501): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x12, 0x0, &(0x7f00000005c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x1, 0x6, 0x8, 0x0, 0x2010000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r8 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x200) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="000327bd7000fcdbdf25090000000800030004000000180001801400040000000000000000d0760000000000000101000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4042005) 8.62580224s ago: executing program 0 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() ioprio_get$pid(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000002340)="b1edb1c99132aed45b703949c57765ad64f63631338ad02ad3eba004a37b9a4922c9a8fcd5d1f6d70a21ede78ea836eb0bb1563ba5a8d81595b6404ec75ea4368b583e600887055dfb676b82bb657ba0d14a83c3d6d9b30d9ef36137") connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103000, 0x51) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000023c0)='./file1\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) clock_gettime(0x0, &(0x7f0000002400)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_mmap={0x5, 0x2, 0x4, 0x0, 0x80, {r5, r6/1000+60000}, {0x3, 0x2, 0x3, 0x44, 0x2, 0xa, "48d5a7e1"}, 0x5, 0x1, {&(0x7f0000002440)=[{0x6, 0xf, {0x2}, 0xa7fb}, {0x3, 0x5, {0x5}, 0x2}]}, 0x7, 0x0, r4}) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) r7 = open(&(0x7f0000006080)='.\x00', 0x8000, 0x112) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f00000022c0)={0x50, 0xfffffffffffffff5, r8, {0x7, 0x2d, 0x400, 0x1020, 0x400, 0x8, 0x4f, 0xffff7fff, 0x0, 0x0, 0x100, 0x1}}, 0x50) 8.622326717s ago: executing program 4 (id=503): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8000000000000000, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x1677}, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r0, 0xc0106440, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000180)}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0xb, 0x20, "a0e0161b1216acc6bf584c71af9cb429f1d40007499dcb43c4bdf45200", 0x32315559}) r2 = getpid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) readv(r5, &(0x7f0000003a00)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1) r6 = dup(r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x4000009f, 0x0, 0x8fca}]}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000002e80)=[{{&(0x7f0000000580)=@file={0x1}, 0x6e, &(0x7f0000002880)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="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", 0x1000}], 0x2, &(0x7f0000002b00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x1c, 0x1, 0x1, [r9, r4, r7]}}, @rights={{0x28, 0x1, 0x1, [r1, r4, 0xffffffffffffffff, r6, r4, r8]}}], 0x68, 0x4000800}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000100)="210ae1a6ed1f8460bf5e", 0xa}, {&(0x7f0000002bc0)="6d7d8e6273e33cbfb6bc630c275fd425edbb672a63301b2be1f9307ea80fd043ee3867318f2033db458e8b2e499285ae9c872c639542a14c3f17e09cb43f3d2da6909d84631f7d6453", 0x49}, {&(0x7f0000002c40)="82275b4ff148cb560a6f789753c45ca7a4bbea802e215f380df121ba68b4b977ffb1e72ecf4d5416a14c2801d13d7f8659cfb5f21436388333399de033a46bef189e61ecf17e30603c761b6dcd541a75fdfab31d895ccf11", 0x58}, {&(0x7f0000002cc0)="63bb56bde65d9b2b07c46a5e79532b21e99275af725d57c7a561697fa685135fba933eb49af087cb8875dda083ee6bfd7618298872a85566cc70c89c00ff2909007bac471f25874ad6213ed2137e4c81844e45b0fcba3365b088476bcc558f21ef1d07b2111660226ce1767da0fcef70f5ec715847c9ef331f128cc0d1d4865dae67c415ae67ab1e23f968a344320a5baf51358f9e4114f229632e306a8c60b4ebd57e8772a92c821201fd117cb8efa98ccb339df8482b0878c8c9efe11ac22aa0baf960f858d717", 0xc8}], 0x4, &(0x7f0000002e00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, r0]}}, @rights={{0x18, 0x1, 0x1, [r4, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x50, 0x4840}}], 0x2, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r10, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x8, 0x7, 0x94, "ef1a0807", "dbcf5e6a"}}, 0x0}, 0x0) syz_usb_control_io$rtl8150(r10, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0005040000020c8ac47a8e51"], 0x0, 0x0, 0x0, 0x0}) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x14, 0x18, 0x1, 0x70bd2c, 0x24dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") mprotect(&(0x7f0000a38000/0x3000)=nil, 0x3000, 0xa) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 8.155158923s ago: executing program 0 (id=504): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x4aa42, 0x51) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ad57cded491a622235c00", 0x0, 0x87a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x3, 0x10) write(r0, &(0x7f0000000080)='4', 0x1) 7.623706199s ago: executing program 3 (id=505): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r0, 0xffffffffffffffff, 0x0) 7.490486665s ago: executing program 1 (id=506): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x1063) 7.219140382s ago: executing program 1 (id=509): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="900000001000030500000000fcffffff00000300", @ANYRES32=0x0, @ANYBLOB="0815010021100000680012800b000100697036746e6c000058000280140003000000000000000000000000000000000114000200ff"], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 6.972376906s ago: executing program 1 (id=510): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = io_uring_setup(0x2a66, &(0x7f0000000080)={0x0, 0xd610, 0x0, 0x1, 0x1de}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)=0x0) prlimit64(r2, 0xa, &(0x7f00000004c0)={0x400, 0x9}, &(0x7f0000000500)) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, 0x0, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) tee(r4, r5, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) fcntl$setstatus(r1, 0x4, 0x2000) sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x28000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$tipc(r8, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x4, 0x4}}, 0x10) setsockopt$inet6_int(r6, 0x29, 0x31, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x490a40, 0x1a8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 6.97177924s ago: executing program 3 (id=511): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r0, &(0x7f0000000000)="2400fe001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) 5.238882634s ago: executing program 3 (id=513): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) (async) 4.744519755s ago: executing program 1 (id=514): ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r0 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='W\x00\x00\x00'], 0x50) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002480)={[0x8000000000000001, 0x9, 0xffffffff, 0x85, 0x2, 0x0, 0xf98, 0x1004, 0x45c5, 0x5, 0x14000000000, 0xffffffffffffffff, 0x5, 0x8000000000000000, 0x80000004000020, 0x80000000000004], 0xeeee0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.599155766s ago: executing program 5 (id=515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x334, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x666, 0xb}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040004}, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0xf}}, 0x14}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0x52b, 0x8, {{0x10, 0x4, 0x1, 0x14, 0x40, 0x68, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0x2c, 0x52, 0x1, 0xa, [{@multicast1, 0x7}, {@loopback, 0xffffffc0}, {@broadcast, 0x6}, {@broadcast, 0xa9}, {@dev={0xac, 0x14, 0x14, 0x14}}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000540)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x4, '\x00', r2, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 4.323359792s ago: executing program 0 (id=516): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="dc0a"], 0x0}, 0x94) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfe63, 0xe7c) 4.273307389s ago: executing program 5 (id=517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x8004) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.116227942s ago: executing program 4 (id=518): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x207, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xffffffffffffffc7, 0x12, r1, 0x9a4c7000) 3.965763297s ago: executing program 0 (id=519): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x804) mkdirat(0xffffffffffffff9c, 0x0, 0x1c5) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$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") r3 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./bus\x00', 0x160005, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknodat$null(r3, &(0x7f0000000040)='./file0\x00', 0x2, 0x103) 3.828860322s ago: executing program 5 (id=520): r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000048000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000115000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000742000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480), 0x4d}], 0x1) io_uring_enter(r1, 0x2219, 0xcf71, 0x16, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/pm_trace_dev_match', 0x200, 0x32) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r3, r2, &(0x7f0000002700)=0x23, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000180)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x1400c006) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000004fdfcaa16225593e9b7fa1b4732ac268bc67d8c1517d54765eacdedb89a184dd89b3e57ed778d620f5600f5148c07c12bb159c914550334fdabe3344d794549729e30cb622462829f9726e4055863236542ffea6c67139c2ed30bef37358814f4a680489a1434d0acab1c59ad50e52709e413a1623acf467ac209d8060fb7680b0c5acda437a507bd27e4e8f38819aa55410107d528b", @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf250c00000008000300", @ANYRES32=r10, @ANYBLOB="0a000600080211000000000004000a0004000b000500080000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20048090}, 0x489c) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f00000001c0), 0x4) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0x8, 0x2, 0x2011, 0x2, 0x8, 0x8}}) sendmsg$tipc(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) sendmsg(r6, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) 3.813625836s ago: executing program 4 (id=521): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000360013012abd700000408100067c0000"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000004) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x16}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="3eaa0000000000007a103f000900004018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000185800000f0000000000000000000000184500000000000000000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff3f}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='10000', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SG_IO(r4, 0x2285, &(0x7f00000007c0)={0x53, 0xfffffffffffffffd, 0x87, 0xb, @buffer={0x0, 0xcf, &(0x7f0000000480)=""/207}, &(0x7f0000000600)="3e0ca58df9c979c50ac236d424236cae3181794d61f844c5582f87c6b7632bbce8ce33b6f18471b8d34c03664396a3e302b25c3c92ad7f2d18fc37531dc5368ee9bf057a61c00a908be3d3892e34045fd1892b781a8c57524be378f8bfaf373717f7ed0f55b99ada99b7b60034a6a92787a29316fdaba3f2dc2cceab2eba7c6612f801050fb0d0", &(0x7f00000006c0)=""/168, 0x8, 0x4, 0x1, &(0x7f0000000780)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0xfffffff0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0xffff750c, 0x9946, 0x34325258, 0x6, 0xc, [{0x9, 0x100}, {0x3ff, 0xc4}, {0x1000, 0x8}, {0xd814, 0x4d}, {0x63, 0x8000}, {0x0, 0xf}, {0x5, 0x8001}, {0x3, 0x4}], 0x60, 0xf, 0x4, 0x0, 0x6}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x26b25}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f80)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x12, r9, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff3, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x944d}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9668}, @TCA_RATE={0x5, 0x5, {0x6, 0x10}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x800c0b1}, 0x0) 2.794178559s ago: executing program 1 (id=522): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) select(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 2.052494837s ago: executing program 5 (id=523): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000140)={0x4, @raw_data="dea792b0f4b5675fb613195c15aa52b3ab493286eff6ae999f71ff6ed436893192a5f30767c65368a67812d42855c6be874c90347c100f8c8f0fb32dbd72b465f7f77902b18c3a8abec6f3a85b45cd44c3cd424a0b2513b8a03bb3dfe249e68563c86428607d1870d9c70de906001a3f52bd979fd29f67b535b72194959957348f42437b3d2f3b347f601f316d2aa1391bd8f1234c16b956314c5f306a08c29fdae87c9c95603031c15d77c616b059d48b86a4378c4ee19ce5731554ba298d672ee4f5d230d983ac"}) unshare(0x22020600) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) r4 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000000)) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) read(r3, &(0x7f0000000080)=""/167, 0xa7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 1.851813175s ago: executing program 1 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) getpid() syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") inotify_init1(0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x0) getresuid(0x0, 0x0, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f00000004c0)) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x2, 0x8000000200007, 0x100000000, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x0, 0xffffffffe, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x0, 0xa}}}, 0xa0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 1.791479075s ago: executing program 3 (id=525): add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x154, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f0000000100)=""/66, 0x42, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 1.732054956s ago: executing program 5 (id=526): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000140)={0x101, 0x3ff, 0x1, 0x2, 0x1000, 0xfffffff9}) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x244000, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000001c0)=0x7) fsync(r1) read$usbfs(r1, &(0x7f0000000200)=""/101, 0x65) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000280)=0x8) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000002c0)={'veth1_to_team\x00', {0x2, 0x4e20, @multicast2}}) timer_create(0x7, &(0x7f0000000300)={0x0, 0x23, 0x4}, &(0x7f0000000340)=0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f00000003c0)={{r4, r5+10000000}, {0x0, 0x989680}}, &(0x7f0000000400)) r6 = accept$inet6(r0, 0x0, &(0x7f0000000440)) r7 = signalfd(r6, &(0x7f0000000480)={[0x7f]}, 0x8) write$nbd(r7, &(0x7f00000004c0)={0x67446698, 0x0, 0x0, 0x4, 0x4, "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"}, 0x1010) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)="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", 0x1000) pwrite64(r2, &(0x7f0000002500)="27746cbb8acec3b4936e8773ddb477490c4c65225b3079f1c885dbcce10f6949e7b1ae57d95577c0447be74732475f90c392984c8d8923a88b3e8cf17431018da52b817820b0df95d44f2a119ce53bf62b677c1d0945186268f4c34e2f693e4c875c14e73f3522642960183bb088fec86b276979aed5a02e929f1959ba1d0bd38346dc2433b4661e02b5a9436492b6c80fbbfed7f14e6a4832a49908f4eccb0b6c7812cb6778468e9ed3dc548d32655ed38894979b29067e95bf7418fc6ce4eae40d9570bdbbefe56c2b8f838c58e41c23072e86f98c17a03a4c50d32386370e4cf7f1f67d72c94686", 0xe9, 0x7c41) close_range(r0, r7, 0x2) rmdir(&(0x7f0000002600)='./file0\x00') r8 = accept$inet6(r6, 0x0, &(0x7f0000002640)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f0000002680)={0xc, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x9, 0x5, [0x2, 0x2, 0x3, 0x9, 0x8]}}, @pad1, @ra={0x5, 0x2, 0xa5ac}, @enc_lim={0x4, 0x1, 0x3}]}, 0x58) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000002840)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0xc8260}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8001}, @CTA_STATUS={0x8}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x14}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x9]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x4, 0x6]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfff}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000002880)={0x7, 0x0, 0x80, 0xf038, 'syz0\x00', 0xffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000002900), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x38, r10, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044000}, 0x4010) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000002a00)=0x100, 0x4) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000002a40)={0x1, 0x6}) 1.351526309s ago: executing program 5 (id=527): socket$nl_netfilter(0x10, 0x3, 0xc) openat$autofs(0xffffffffffffff9c, 0x0, 0x40002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x4008000) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@nobarrier}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c0001042cbd70000000000002000000", @ANYRES32, @ANYBLOB="080000070a000100aaaaaaaaaaaa000008000f80"], 0x30}}, 0x0) 434.064522ms ago: executing program 3 (id=528): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001003019500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6d}, 0x94) syz_ublk_setup_io_uring(0x31d7, &(0x7f0000000100)={0x0, 0x65e4, 0x8000, 0x3, 0x33f}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f00000002c0)) syz_io_uring_setup(0x313a, &(0x7f0000000440)={0x0, 0x22a1, 0x0, 0x3, 0x24d, 0x0, r0}, &(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) r6 = gettid() r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000440)={0x0, @bt={0x2d0, 0x190, 0x0, 0x0, 0xdd9f87, 0x200040, 0x44, 0x4, 0x9, 0x19, 0x8, 0x2, 0x5, 0x0, 0x3b, 0x12, {0xe82f, 0xfffffffc}, 0x5, 0xed}}) r11 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND_TUNE_MODE(r11, 0x6f51, 0x0) syz_ublk_add_dev(r0, r1, r2, r5, &(0x7f00000005c0)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@new_dev={0x3, 0xb8a, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x61}}}, &(0x7f0000000640)) 328.379592ms ago: executing program 4 (id=529): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001003019500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6d}, 0x94) syz_ublk_setup_io_uring(0x31d7, &(0x7f0000000100)={0x0, 0x65e4, 0x8000, 0x3, 0x33f}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f00000002c0)) syz_io_uring_setup(0x313a, &(0x7f0000000440)={0x0, 0x22a1, 0x0, 0x3, 0x24d, 0x0, r0}, &(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) r6 = gettid() r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000100)={0x980000, 0x5, 0x4, r8, 0x0, &(0x7f00000000c0)={0x9a0904, 0x8000, '\x00', @string=&(0x7f0000000040)=0x8}}) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000440)={0x0, @bt={0x2d0, 0x190, 0x0, 0x0, 0xdd9f87, 0x200040, 0x44, 0x4, 0x9, 0x19, 0x8, 0x2, 0x5, 0x0, 0x3b, 0x12, {0xe82f, 0xfffffffc}, 0x5, 0xed}}) r12 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND_TUNE_MODE(r12, 0x6f51, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000680)="cc5fa69bd43b3109edc467c802096060c18ed9710a2c07ffb9a86a9575940f023c9d640475b4ef862a830d96f765a9ca98ffb2167c0314c298326deade4d08a6e7bdc4ce8c8b8af1b974a0ae45701d31c19505cf00aedde7bf20a3f8e20b4c8bd6917e6feeba5c2f6867d48c99ca879002eb3ccfcbf70385055cc8ebba53fe38bc08ced9f3fae527683e0a609adc99c58bcfbf6e7ce593a36c3120be4475439723d32c30c6d3411175a34d06f6c40f456f61", &(0x7f0000000740)="5f42d07417fd50b8cd23d5e37e93c382daf4d99e333f86150103168d2d5d6fc98afacda603802eb72f791421754441fd7a5a1bcd903f4dd3568d5ff5c14bb70de063c73fcb24cfaf52a2bdd3985c0d39f78c6f3e3e43bcddeb54151bdefd7f0d301926c07873594316461aa17c9ed41e32f9f68e1de86a2f9e67634667d26756751994f0fc2f7ad142738d5a439f0e8f89fd4bd8eb6b6689d4f4b393c6d7aad3549bf87f3025c995e8a1c77f9a20bc5ebb78c8e9e63105a59ea77b829af486a6eac33c66f1dbbfe0d54947a8324364ef095d"}}, &(0x7f0000bbdffc)) syz_ublk_add_dev(r0, r1, r2, r5, &(0x7f00000005c0)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@new_dev={0x3, 0xb8a, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x61}}}, &(0x7f0000000640)) 0s ago: executing program 0 (id=530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x8004) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): copy_process+0x820/0x43e0 [ 112.683006][ T6037] dup_task_struct+0x2c6/0xa00 [ 112.683030][ T6037] copy_process+0x820/0x43e0 [ 112.683050][ T6037] ? _parse_integer_limit+0x18f/0x1e0 [ 112.683081][ T6037] ? kstrtouint+0x6e/0xe0 [ 112.683106][ T6037] ? lock_acquire+0x115/0x350 [ 112.683122][ T6037] ? get_pid_task+0x20/0x1f0 [ 112.683139][ T6037] ? __pfx_copy_process+0x10/0x10 [ 112.683160][ T6037] ? get_pid_task+0x20/0x1f0 [ 112.683173][ T6037] ? get_pid_task+0x20/0x1f0 [ 112.683198][ T6037] kernel_clone+0x2d7/0x940 [ 112.683223][ T6037] ? __pfx_kernel_clone+0x10/0x10 [ 112.683258][ T6037] __x64_sys_clone+0x1b6/0x230 [ 112.683282][ T6037] ? __pfx___x64_sys_clone+0x10/0x10 [ 112.683315][ T6037] ? __pfx_ksys_write+0x10/0x10 [ 112.683362][ T6037] do_syscall_64+0x166/0x520 [ 112.683393][ T6037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.683409][ T6037] ? clear_bhb_loop+0x70/0xc0 [ 112.683427][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.683442][ T6037] RIP: 0033:0x7f7eda19e159 [ 112.683455][ T6037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.683468][ T6037] RSP: 002b:00007f7ed83f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 112.683485][ T6037] RAX: ffffffffffffffda RBX: 00007f7eda426090 RCX: 00007f7eda19e159 [ 112.683496][ T6037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020040000 [ 112.683506][ T6037] RBP: 00007f7ed83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 112.683515][ T6037] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 112.683524][ T6037] R13: 00007f7eda426128 R14: 00007f7eda426090 R15: 00007ffe6fe915a8 [ 112.683546][ T6037] [ 113.290930][ T6037] syz.0.50: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 113.291229][ T6037] CPU: 1 UID: 0 PID: 6037 Comm: syz.0.50 Not tainted syzkaller #0 PREEMPT(full) [ 113.291255][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.291272][ T6037] Call Trace: [ 113.291280][ T6037] [ 113.291289][ T6037] dump_stack_lvl+0xe8/0x150 [ 113.291326][ T6037] warn_alloc+0x24d/0x270 [ 113.291350][ T6037] ? lockdep_hardirqs_on+0x7b/0x110 [ 113.291380][ T6037] ? __pfx_warn_alloc+0x10/0x10 [ 113.291401][ T6037] ? kfree+0x1c5/0x650 [ 113.291438][ T6037] ? __get_vm_area_node+0x219/0x2f0 [ 113.291489][ T6037] __vmalloc_node_range_noprof+0x36b/0x1540 [ 113.291528][ T6037] ? irqentry_exit+0x218/0x910 [ 113.291553][ T6037] ? lockdep_hardirqs_on+0x7b/0x110 [ 113.291578][ T6037] ? irqentry_exit+0x218/0x910 [ 113.291622][ T6037] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 113.291656][ T6037] ? kasan_check_range+0x183/0x2c0 [ 113.291686][ T6037] ? memcpy_and_pad+0x48/0x80 [ 113.291721][ T6037] __vmalloc_node_noprof+0xc2/0x100 [ 113.291754][ T6037] ? copy_process+0x820/0x43e0 [ 113.291782][ T6037] ? copy_process+0x820/0x43e0 [ 113.291813][ T6037] dup_task_struct+0x2c6/0xa00 [ 113.291849][ T6037] copy_process+0x820/0x43e0 [ 113.291877][ T6037] ? _parse_integer_limit+0x18f/0x1e0 [ 113.291924][ T6037] ? kstrtouint+0x6e/0xe0 [ 113.291960][ T6037] ? lock_acquire+0x115/0x350 [ 113.291983][ T6037] ? get_pid_task+0x20/0x1f0 [ 113.292009][ T6037] ? __pfx_copy_process+0x10/0x10 [ 113.292040][ T6037] ? get_pid_task+0x20/0x1f0 [ 113.292059][ T6037] ? get_pid_task+0x20/0x1f0 [ 113.292087][ T6037] kernel_clone+0x2d7/0x940 [ 113.292126][ T6037] ? __pfx_kernel_clone+0x10/0x10 [ 113.292178][ T6037] __x64_sys_clone+0x1b6/0x230 [ 113.292212][ T6037] ? __pfx___x64_sys_clone+0x10/0x10 [ 113.292260][ T6037] ? __pfx_ksys_write+0x10/0x10 [ 113.292306][ T6037] do_syscall_64+0x166/0x520 [ 113.292332][ T6037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.292355][ T6037] ? clear_bhb_loop+0x70/0xc0 [ 113.292383][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.292406][ T6037] RIP: 0033:0x7f7eda19e159 [ 113.292435][ T6037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.292454][ T6037] RSP: 002b:00007f7ed83f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 113.292486][ T6037] RAX: ffffffffffffffda RBX: 00007f7eda426090 RCX: 00007f7eda19e159 [ 113.292502][ T6037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020040000 [ 113.292516][ T6037] RBP: 00007f7ed83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.292530][ T6037] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 113.292543][ T6037] R13: 00007f7eda426128 R14: 00007f7eda426090 R15: 00007ffe6fe915a8 [ 113.292576][ T6037] [ 113.478377][ T6037] Mem-Info: [ 113.478415][ T6037] active_anon:7957 inactive_anon:6 isolated_anon:0 [ 113.478415][ T6037] active_file:2 inactive_file:43311 isolated_file:0 [ 113.478415][ T6037] unevictable:0 dirty:212 writeback:0 [ 113.478415][ T6037] slab_reclaimable:10146 slab_unreclaimable:91645 [ 113.478415][ T6037] mapped:31785 shmem:2767 pagetables:1195 [ 113.478415][ T6037] sec_pagetables:0 bounce:0 [ 113.478415][ T6037] kernel_misc_reclaimable:0 [ 113.478415][ T6037] free:1333938 free_pcp:8285 free_cma:0 [ 113.478617][ T6037] Node 0 active_anon:31828kB inactive_anon:24kB active_file:8kB inactive_file:173048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127140kB dirty:844kB writeback:0kB shmem:11068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12120kB pagetables:4636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 113.478774][ T6037] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 113.478931][ T6037] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.479103][ T6037] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 113.479211][ T6037] Node 0 DMA32 free:1375704kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31828kB inactive_anon:24kB active_file:8kB inactive_file:173048kB unevictable:0kB writepending:844kB zspages:4kB present:3129332kB managed:2546548kB mlocked:0kB bounce:0kB free_pcp:33140kB local_pcp:17048kB free_cma:0kB [ 113.479373][ T6037] lowmem_reserve[]: 0 0 0 0 0 [ 113.479480][ T6037] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.479639][ T6037] lowmem_reserve[]: 0 0 0 0 0 [ 113.479752][ T6037] Node 1 Normal free:3944688kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.497298][ T6037] lowmem_reserve[]: 0 0 0 0 0 [ 113.497426][ T6037] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.497799][ T6037] Node 0 DMA32: 1294*4kB (UME) 422*8kB (UME) 197*16kB (UM) 89*32kB (UME) 28*64kB (ME) 22*128kB (UME) 9*256kB (ME) 5*512kB (UME) 6*1024kB (UM) 1*2048kB (E) 328*4096kB (M) = 1375704kB [ 113.498270][ T6037] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 113.498563][ T6037] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 9*16kB (UM) 4*32kB (UM) 9*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3944688kB [ 113.511067][ T6037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.511121][ T6037] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 113.511164][ T6037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.511216][ T6037] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 113.511259][ T6037] 46123 total pagecache pages [ 113.511289][ T6037] 0 pages in swap cache [ 113.511309][ T6037] Free swap = 124992kB [ 113.511330][ T6037] Total swap = 124996kB [ 113.511353][ T6037] 2097051 pages RAM [ 113.511374][ T6037] 0 pages HighMem/MovableOnly [ 113.511395][ T6037] 428798 pages reserved [ 113.511416][ T6037] 0 pages cma reserved [ 114.435639][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.435772][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.435932][ T5909] bridge_slave_0: entered allmulticast mode [ 114.437785][ T5909] bridge_slave_0: entered promiscuous mode [ 114.472119][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.477308][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.477738][ T5909] bridge_slave_1: entered allmulticast mode [ 114.499917][ T5909] bridge_slave_1: entered promiscuous mode [ 114.745421][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 114.745520][ T6055] netlink: 1 bytes leftover after parsing attributes in process `syz.4.52'. [ 114.981998][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.53'. [ 115.159172][ T5909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.174704][ T6048] netlink: 256 bytes leftover after parsing attributes in process `syz.0.53'. [ 115.701427][ T5909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.189810][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.561735][ T4934] Bluetooth: hci0: command 0x0401 tx timeout [ 116.562742][ T6049] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 116.891329][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 117.025414][ T5909] team0: Port device team_slave_0 added [ 117.163035][ T5909] team0: Port device team_slave_1 added [ 117.745293][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.762514][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.788828][ T5909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.817957][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.818005][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.818050][ T5909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.880636][ T5909] hsr_slave_0: entered promiscuous mode [ 118.911045][ T5909] hsr_slave_1: entered promiscuous mode [ 118.926340][ T5909] debugfs: 'hsr0' already exists in 'hsr' [ 118.926409][ T5909] Cannot create hsr debugfs directory [ 119.330343][ T6099] fuse: Bad value for 'user_id' [ 119.330386][ T6099] fuse: Bad value for 'user_id' [ 120.065696][ T6109] loop3: detected capacity change from 0 to 1024 [ 120.074242][ T6109] EXT4-fs: Ignoring removed orlov option [ 120.208978][ T6118] Bluetooth: hci5: Frame reassembly failed (-84) [ 120.495394][ T148] Bluetooth: hci5: Frame reassembly failed (-84) [ 120.591312][ T148] Bluetooth: hci5: Frame reassembly failed (-84) [ 120.709579][ T6109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.726840][ T6109] EXT4-fs (loop3): shut down requested (1) [ 120.935081][ T5909] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.950723][ T5909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.960844][ T5909] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.981376][ T5909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.987642][ T5909] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.048596][ T5909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.261583][ T5909] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.280912][ T5909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.299408][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.006087][ T5909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.044254][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 122.104795][ T5909] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.146704][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.147018][ T5903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.252305][ T4934] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 122.264996][ T772] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.265117][ T772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.613014][ T6158] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.157873][ T6181] warning: `syz.0.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 124.328175][ T6190] ip6tnl1: entered allmulticast mode [ 124.381863][ T772] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.439540][ T772] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.441426][ T5627] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.573240][ T6196] netlink: 32 bytes leftover after parsing attributes in process `syz.4.80'. [ 124.573351][ T6196] netlink: 32 bytes leftover after parsing attributes in process `syz.4.80'. [ 125.104674][ T5627] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 125.105094][ T5627] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 125.286568][ T6182] loop3: detected capacity change from 0 to 32768 [ 125.533458][ T6182] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.609307][ T6211] loop1: detected capacity change from 0 to 1024 [ 125.786331][ T6182] XFS (loop3): Ending clean mount [ 126.658469][ T5713] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.678697][ T5624] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.801976][ T5713] usb 2-1: Using ep0 maxpacket: 16 [ 126.802759][ T5713] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 126.809234][ T5713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.809373][ T5713] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.872104][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.876577][ T5713] usb 2-1: Product: syz [ 126.876643][ T5713] usb 2-1: Manufacturer: syz [ 126.876697][ T5713] usb 2-1: SerialNumber: syz [ 126.910901][ T5713] usb 2-1: config 0 descriptor?? [ 127.169317][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.84'. [ 127.207790][ T5909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.288284][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 128.801897][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 129.297253][ T5713] usb 2-1: USB disconnect, device number 2 [ 129.733634][ T6246] loop0: detected capacity change from 0 to 4096 [ 130.085334][ T5909] veth0_vlan: entered promiscuous mode [ 130.104274][ T5909] veth1_vlan: entered promiscuous mode [ 130.217520][ T5909] veth0_macvtap: entered promiscuous mode [ 130.231151][ T5909] veth1_macvtap: entered promiscuous mode [ 130.258531][ T6263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.93'. [ 130.276604][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.296397][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.413738][ T148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.473327][ T27] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.485732][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.485781][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.699638][ T5988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.708955][ T5988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.518247][ T6270] loop1: detected capacity change from 0 to 4096 [ 131.575770][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.598459][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.657293][ T6276] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.709989][ T6246] loop0: detected capacity change from 0 to 32768 [ 132.250489][ T6288] loop9: detected capacity change from 0 to 524287936 [ 132.424655][ T6246] loop0: detected capacity change from 0 to 2048 [ 133.040114][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.040198][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.517328][ T6307] loop5: detected capacity change from 0 to 256 [ 133.807563][ T6312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.927513][ T6311] loop0: detected capacity change from 0 to 512 [ 134.119302][ T6311] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 134.149304][ T6307] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 134.959963][ T32] audit: type=1800 audit(1788263247.235:3): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.101" name="file2" dev="loop5" ino=1048620 res=0 errno=0 [ 135.105238][ T6320] fuse: Bad value for 'fd' [ 135.161185][ T32] audit: type=1804 audit(1788263247.445:4): pid=6319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.101" name="/newroot/2/file2/file2" dev="loop5" ino=1048620 res=1 errno=0 [ 135.172724][ T32] audit: type=1800 audit(1788263247.445:5): pid=6319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.101" name="file2" dev="loop5" ino=1048620 res=0 errno=0 [ 135.263030][ T6324] loop3: detected capacity change from 0 to 1024 [ 135.279007][ T6324] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 135.328964][ T6324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 135.341387][ T6324] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.390991][ T6324] EXT4-fs error (device loop3): ext4_xattr_block_list:777: inode #15: comm syz.3.105: corrupted xattr block 128: bad e_name length [ 135.548389][ T6341] tipc: Enabling of bearer rejected, failed to enable media [ 135.671778][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 136.318116][ T6329] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 136.601814][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.0.111'. [ 136.742760][ T9] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 136.744067][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.744136][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 136.755761][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.755796][ T9] usb 4-1: Product: syz [ 136.755812][ T9] usb 4-1: Manufacturer: syz [ 136.755827][ T9] usb 4-1: SerialNumber: syz [ 137.060328][ T6360] loop5: detected capacity change from 0 to 1024 [ 137.096962][ T6360] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 137.154915][ T6360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.168918][ T6360] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.224672][ T6360] EXT4-fs error (device loop5): ext4_xattr_block_list:777: inode #15: comm syz.5.108: corrupted xattr block 128: bad e_name length [ 137.281794][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 137.379670][ T6324] netlink: 'syz.3.105': attribute type 13 has an invalid length. [ 137.392890][ T6364] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 137.543982][ T5808] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 137.584344][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 137.584533][ T9] gspca_mr97310a: reg write [21] error -8 [ 137.584640][ T9] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -8 [ 137.686498][ T5626] usb 4-1: USB disconnect, device number 2 [ 137.712526][ T5808] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 137.727803][ T5808] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.727874][ T5808] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 137.763619][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.763667][ T5808] usb 6-1: Product: syz [ 137.763701][ T5808] usb 6-1: Manufacturer: syz [ 137.763722][ T5808] usb 6-1: SerialNumber: syz [ 137.799716][ T5808] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 137.806491][ T5808] gspca_mr97310a: reg write [21] error -8 [ 137.818041][ T5808] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -8 [ 138.201953][ T6379] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 138.244043][ T6360] netlink: 'syz.5.108': attribute type 13 has an invalid length. [ 139.113662][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.185845][ T9] usb 6-1: USB disconnect, device number 2 [ 139.429256][ T6384] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.585218][ T6384] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.702502][ T5808] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.702725][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.734910][ T6384] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.771361][ T6401] tipc: Enabling of bearer rejected, failed to enable media [ 139.821484][ T5909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.872286][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 139.895694][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 139.904147][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 139.916185][ T5808] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 139.926889][ T5808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.926958][ T5808] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 139.927017][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.929255][ T9] usb 1-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 139.929330][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.947757][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.947841][ T9] usb 1-1: Product: syz [ 139.947911][ T9] usb 1-1: Manufacturer: syz [ 139.947973][ T9] usb 1-1: SerialNumber: syz [ 140.025626][ T6384] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.068445][ T9] usb 1-1: selecting invalid altsetting 1 [ 140.247587][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 140.426249][ T3334] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.533852][ T5808] usb 2-1: unable to init card! (ret=-110) [ 140.609143][ T6412] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 140.613417][ T6412] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 140.613547][ T6412] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 140.668073][ T5808] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 140.748872][ T6412] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.878738][ T6412] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 141.674642][ T9] usb 1-1: selecting invalid altsetting 1 [ 141.834118][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.547017][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.958736][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.801635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 144.254273][ T9] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 144.278958][ T9] usb 1-1: USB disconnect, device number 3 [ 144.532376][ T10] usb 2-1: USB disconnect, device number 3 [ 144.697377][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.005692][ T6442] netlink: 104 bytes leftover after parsing attributes in process `syz.4.130'. [ 145.040688][ T6442] loop4: detected capacity change from 0 to 128 [ 145.051341][ T6442] EXT4-fs (loop4): Test dummy encryption mode enabled [ 145.102044][ T6442] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.142167][ T6442] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.199158][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 145.494900][ T6451] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 146.166061][ T6451] fscrypt: AES-256-XTS using blk-crypto-fallback [ 146.883057][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 147.021396][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 147.100016][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.100065][ T25] usb 6-1: config 0 has no interfaces? [ 147.100116][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.107759][ T25] usb 6-1: config 0 descriptor?? [ 147.458927][ T6469] tipc: Enabling of bearer rejected, failed to enable media [ 147.490553][ T5623] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.304598][ T6493] loop0: detected capacity change from 0 to 64 [ 148.484455][ T6468] loop1: detected capacity change from 0 to 32768 [ 149.627317][ T6468] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.837169][ T6468] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 149.911141][ T6468] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30 [ 150.026236][ T6468] XFS (loop1): Ending clean mount [ 150.782643][ T6521] loop3: detected capacity change from 0 to 2048 [ 150.830573][ T6521] udf: Unknown parameter 'shortaÆ' [ 151.125417][ T6527] kvm: pic: non byte read [ 151.125713][ T6527] kvm: pic: single mode not supported [ 151.125803][ T6527] kvm: pic: level sensitive irq not supported [ 151.225659][ T6527] kvm: pic: non byte read [ 151.226084][ T6527] kvm: pic: single mode not supported [ 151.226547][ T6527] kvm: pic: non byte read [ 151.229506][ T6527] kvm: pic: non byte read [ 151.230311][ T6527] kvm: pic: non byte read [ 151.231125][ T6527] kvm: pic: non byte read [ 151.329033][ T5634] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 151.759695][ T6541] veth0_to_bond: entered promiscuous mode [ 151.777433][ T6541] macsec1: entered promiscuous mode [ 151.777666][ T6541] macsec1: entered allmulticast mode [ 151.777700][ T6541] veth0_to_bond: entered allmulticast mode [ 153.260653][ T9] usb 6-1: USB disconnect, device number 3 [ 153.468543][ T6521] loop3: detected capacity change from 0 to 32768 [ 153.520403][ T6566] tipc: Enabling of bearer rejected, failed to enable media [ 153.633373][ T6521] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.138 (6521) [ 153.931903][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 154.097185][ T6521] BTRFS error (device loop3): open_ctree failed: -EINTR [ 154.751942][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.904042][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 154.907169][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.929815][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.929892][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.929922][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.930022][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 154.930080][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.942869][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.942948][ T10] usb 4-1: Manufacturer: syz [ 155.055429][ T10] usb 4-1: config 0 descriptor?? [ 155.357026][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 155.357089][ T6590] netlink: 'syz.3.151': attribute type 10 has an invalid length. [ 155.357108][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.151'. [ 155.416849][ T6590] geneve2: entered promiscuous mode [ 155.416898][ T6590] geneve2: entered allmulticast mode [ 155.692039][ T10] rc_core: IR keymap rc-hauppauge not found [ 155.692097][ T10] Registered IR keymap rc-empty [ 155.693204][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.725004][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.756279][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 155.774859][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 155.958146][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 155.991769][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.017738][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.033474][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.056453][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.077476][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.094230][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.111881][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.138362][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.152756][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 156.189735][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 156.189833][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 156.337407][ T6609] loop4: detected capacity change from 0 to 40427 [ 156.360768][ T6609] F2FS-fs (loop4): build fault injection rate: 690 [ 156.360960][ T6590] overlayfs: failed to resolve './file0': -2 [ 156.386042][ T6609] F2FS-fs (loop4): invalid crc value [ 156.445665][ T10] usb 4-1: USB disconnect, device number 3 [ 156.541285][ T6626] loop5: detected capacity change from 0 to 256 [ 156.547751][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.594041][ T6626] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 156.642392][ T6609] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 156.703507][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 156.711755][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 156.725755][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.726386][ T25] usb 2-1: config 0 has no interfaces? [ 156.726440][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.782575][ T6609] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 156.790990][ T25] usb 2-1: config 0 descriptor?? [ 156.928269][ T6638] tipc: Enabling of bearer rejected, failed to enable media [ 157.670943][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 157.671010][ T6652] netlink: 1 bytes leftover after parsing attributes in process `syz.3.163'. [ 159.441792][ T5629] Bluetooth: hci0: command 0x0401 tx timeout [ 159.471778][ T6645] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 160.364228][ T6659] netlink: 'syz.0.165': attribute type 1 has an invalid length. [ 160.412036][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 160.536601][ T6659] process 'syz.0.165' launched './file0' with NULL argv: empty string added [ 164.354691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 164.478733][ T5623] syz-executor: attempt to access beyond end of device [ 164.478733][ T5623] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.517258][ T5623] CPU: 0 UID: 0 PID: 5623 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 164.517291][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.517305][ T5623] Call Trace: [ 164.517314][ T5623] [ 164.517323][ T5623] dump_stack_lvl+0xe8/0x150 [ 164.517362][ T5623] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 164.517400][ T5623] f2fs_write_end_bio+0x1211/0x16e0 [ 164.517427][ T5623] ? blkg_put+0x22/0x240 [ 164.517473][ T5623] __submit_merged_bio+0x258/0x6a0 [ 164.517503][ T5623] ? rcu_is_watching+0x16/0xb0 [ 164.517536][ T5623] __submit_merged_write_cond+0x3c9/0x4e0 [ 164.517572][ T5623] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 164.517616][ T5623] f2fs_write_data_pages+0x2a27/0x36f0 [ 164.517643][ T5623] ? __lock_acquire+0x6df/0x2e50 [ 164.517690][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 164.517716][ T5623] ? is_bpf_text_address+0x26/0x2b0 [ 164.517748][ T5623] ? arch_stack_walk+0xfb/0x150 [ 164.517793][ T5623] ? add_lock_to_list+0xc7/0x100 [ 164.517816][ T5623] ? lockdep_unlock+0x5c/0xd0 [ 164.517830][ T5623] ? __lock_acquire+0x14b9/0x2e50 [ 164.517878][ T5623] ? do_raw_spin_lock+0x12b/0x2f0 [ 164.517912][ T5623] ? do_raw_spin_unlock+0xf5/0x200 [ 164.517938][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 164.517967][ T5623] do_writepages+0x338/0x560 [ 164.517994][ T5623] ? do_raw_spin_unlock+0xf5/0x200 [ 164.518023][ T5623] filemap_fdatawrite+0x1e9/0x2f0 [ 164.518046][ T5623] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 164.518102][ T5623] ? do_raw_spin_unlock+0xf5/0x200 [ 164.518131][ T5623] f2fs_sync_dirty_inodes+0x30e/0x830 [ 164.518162][ T5623] f2fs_write_checkpoint+0xa3d/0x2710 [ 164.518207][ T5623] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 164.518255][ T5623] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 164.518277][ T5623] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 164.518295][ T5623] ? __wake_up_common_lock+0x195/0x1f0 [ 164.518325][ T5623] kill_f2fs_super+0x2dd/0x700 [ 164.518363][ T5623] ? __pfx_kill_f2fs_super+0x10/0x10 [ 164.518401][ T5623] ? call_rcu+0x64d/0x8b0 [ 164.518422][ T5623] ? lockdep_hardirqs_on+0x7b/0x110 [ 164.518454][ T5623] deactivate_locked_super+0xbc/0x110 [ 164.518482][ T5623] cleanup_mnt+0x3d3/0x460 [ 164.518504][ T5623] task_work_run+0x1d9/0x270 [ 164.518527][ T5623] ? __pfx_task_work_run+0x10/0x10 [ 164.518554][ T5623] exit_to_user_mode_loop+0x204/0x770 [ 164.518573][ T5623] ? rcu_is_watching+0x16/0xb0 [ 164.518599][ T5623] do_syscall_64+0x328/0x520 [ 164.518619][ T5623] ? trace_irq_disable+0x3b/0x140 [ 164.518637][ T5623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.518655][ T5623] ? clear_bhb_loop+0x70/0xc0 [ 164.518677][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.518695][ T5623] RIP: 0033:0x7f02b659f397 [ 164.518711][ T5623] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 164.518726][ T5623] RSP: 002b:00007ffdb5926c88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 164.518746][ T5623] RAX: 0000000000000000 RBX: 00007f02b6634474 RCX: 00007f02b659f397 [ 164.518763][ T5623] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb5926d40 [ 164.518774][ T5623] RBP: 00007ffdb5926d40 R08: 00007ffdb5927d40 R09: 00000000ffffffff [ 164.518786][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb5927dd0 [ 164.518797][ T5623] R13: 00007f02b6634474 R14: 00000000000267c7 R15: 00007ffdb5927e10 [ 164.518824][ T5623] [ 164.627150][ T5623] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 165.138328][ T6695] loop0: detected capacity change from 0 to 1024 [ 165.139322][ T6695] EXT4-fs: Ignoring removed oldalloc option [ 165.139715][ T6695] EXT4-fs: Ignoring removed orlov option [ 165.211897][ T6698] loop5: detected capacity change from 0 to 1764 [ 165.284187][ T6695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.284315][ T6695] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.319641][ T6700] capability: warning: `syz.3.171' uses 32-bit capabilities (legacy support in use) [ 165.341812][ T6704] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 165.380774][ T6700] program syz.3.171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.436474][ T6700] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.509615][ T6698] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 166.114810][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 166.210974][ T10] usb 2-1: USB disconnect, device number 4 [ 166.308686][ T6725] tipc: Enabling of bearer rejected, failed to enable media [ 166.667694][ T6736] gadgetfs: bound to dummy_udc driver [ 166.992004][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 166.992318][ C0] gadgetfs: connected [ 166.993568][ T10] gadgetfs: disconnected [ 167.209695][ T6753] netlink: 56 bytes leftover after parsing attributes in process `syz.5.178'. [ 167.292164][ C0] gadgetfs: connected [ 167.293213][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 167.293656][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 167.293704][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.436027][ T6754] sctp: [Deprecated]: syz.5.178 (pid 6754) Use of int in max_burst socket option deprecated. [ 167.436027][ T6754] Use struct sctp_assoc_value instead [ 168.485371][ C0] gadgetfs: configuration #1 [ 168.690028][ T6757] loop3: detected capacity change from 0 to 1024 [ 168.706219][ T6757] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 168.752107][ T6757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 168.757612][ T6757] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.789670][ T6757] EXT4-fs error (device loop3): ext4_xattr_block_list:777: inode #15: comm syz.3.179: corrupted xattr block 128: bad e_name length [ 169.092388][ T5627] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 169.153528][ T6731] loop0: detected capacity change from 0 to 32768 [ 169.253514][ T5627] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 169.267417][ T5627] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.267487][ T5627] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 169.285553][ T6731] ERROR: (device loop0): diRead: i_ino != di_number [ 169.285553][ T6731] [ 169.287274][ T6731] ERROR: (device loop0): remounting filesystem as read-only [ 169.317577][ T5627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.317624][ T5627] usb 4-1: Product: syz [ 169.317657][ T5627] usb 4-1: Manufacturer: syz [ 169.317677][ T5627] usb 4-1: SerialNumber: syz [ 169.360188][ T5627] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 169.370109][ T5627] gspca_mr97310a: reg write [21] error -8 [ 169.376664][ T5627] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -8 [ 169.514080][ T6734] gadgetfs: suspended from state 3 [ 169.521818][ T6734] gadgetfs: disconnected [ 169.528379][ T5627] usb 1-1: USB disconnect, device number 4 [ 169.721051][ T6757] netlink: 'syz.3.179': attribute type 13 has an invalid length. [ 169.885237][ T5627] usb 4-1: USB disconnect, device number 4 [ 169.950316][ T6788] FAULT_INJECTION: forcing a failure. [ 169.950316][ T6788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.964401][ T6788] CPU: 1 UID: 0 PID: 6788 Comm: syz.0.184 Not tainted syzkaller #0 PREEMPT(full) [ 169.964432][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.964446][ T6788] Call Trace: [ 169.964455][ T6788] [ 169.964463][ T6788] dump_stack_lvl+0xe8/0x150 [ 169.964503][ T6788] should_fail_ex+0x3eb/0x540 [ 169.964533][ T6788] _copy_to_user+0x31/0xb0 [ 169.964565][ T6788] simple_read_from_buffer+0xe1/0x170 [ 169.964602][ T6788] proc_fail_nth_read+0x1bb/0x230 [ 169.964623][ T6788] ? common_file_perm+0x20e/0x2b0 [ 169.964653][ T6788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.964679][ T6788] ? rw_verify_area+0x24a/0x4c0 [ 169.964714][ T6788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.964736][ T6788] vfs_read+0x213/0xa80 [ 169.964782][ T6788] ? __pfx___mutex_lock+0x10/0x10 [ 169.964811][ T6788] ? __pfx_vfs_read+0x10/0x10 [ 169.964846][ T6788] ? __fget_files+0x2a/0x420 [ 169.964882][ T6788] ? __fget_files+0x3a2/0x420 [ 169.964911][ T6788] ? __fget_files+0x2a/0x420 [ 169.964952][ T6788] ksys_read+0x150/0x270 [ 169.964988][ T6788] ? __pfx_ksys_read+0x10/0x10 [ 169.965035][ T6788] do_syscall_64+0x166/0x520 [ 169.965061][ T6788] ? trace_irq_disable+0x3b/0x140 [ 169.965084][ T6788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.965107][ T6788] ? clear_bhb_loop+0x70/0xc0 [ 169.965134][ T6788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.965157][ T6788] RIP: 0033:0x7f7eda15e98e [ 169.965178][ T6788] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.965196][ T6788] RSP: 002b:00007f7ed83f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.965221][ T6788] RAX: ffffffffffffffda RBX: 00007f7ed83f66c0 RCX: 00007f7eda15e98e [ 169.965237][ T6788] RDX: 000000000000000f RSI: 00007f7ed83f60a0 RDI: 0000000000000005 [ 169.965251][ T6788] RBP: 00007f7ed83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 169.965265][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.965278][ T6788] R13: 00007f7eda426128 R14: 00007f7eda426090 R15: 00007ffe6fe915a8 [ 169.965310][ T6788] [ 170.542092][ T5744] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 170.628981][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 170.703978][ T5744] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 170.715046][ T5744] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 170.715097][ T5744] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 170.715121][ T5744] usb 5-1: config 150 has no interface number 0 [ 170.715257][ T5744] usb 5-1: config 150 interface 204 has no altsetting 0 [ 170.774660][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.774707][ T5744] usb 5-1: Product: syz [ 170.774743][ T5744] usb 5-1: Manufacturer: syz [ 170.774763][ T5744] usb 5-1: SerialNumber: syz [ 170.851952][ T6799] loop0: detected capacity change from 0 to 256 [ 170.926655][ T6799] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 171.297404][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 171.307681][ T5744] xr_serial 5-1:150.204: skipping garbage [ 171.307761][ T5744] xr_serial 5-1:150.204: xr_serial converter detected [ 171.622571][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 171.630648][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.662616][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.662667][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.662712][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.662742][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.662790][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.103459][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 172.103577][ T9] usbtmc 2-1:16.0: can't read capabilities [ 172.416551][ T5813] usb 2-1: USB disconnect, device number 5 [ 172.545405][ T5744] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 172.569224][ T6813] tipc: Started in network mode [ 172.569292][ T6813] tipc: Node identity 7eb4cac89e17, cluster identity 4711 [ 172.569860][ T6813] tipc: Enabled bearer , priority 0 [ 172.610891][ T6813] tipc: Resetting bearer [ 172.716339][ T6781] loop4: detected capacity change from 0 to 16 [ 172.851734][ T9] usb 5-1: USB disconnect, device number 3 [ 172.979579][ T9] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 173.008127][ T9] xr_serial 5-1:150.204: device disconnected [ 173.124139][ T6811] tipc: Disabling bearer [ 174.954431][ T6835] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 174.954568][ T6835] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 174.954735][ T6835] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 175.126122][ T6835] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 177.435023][ T6837] loop4: detected capacity change from 0 to 1764 [ 177.606236][ T6837] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 177.715366][ T6842] loop1: detected capacity change from 0 to 512 [ 177.727155][ T6842] EXT4-fs: Ignoring removed nobh option [ 177.751161][ T6842] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 177.769338][ T6842] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 177.787446][ T6842] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.195: inode has both inline data and extents flags [ 177.787715][ T6842] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 177.802606][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 177.802631][ C1] EXT4-fs (loop1): initial error at time 1788263290: ext4_orphan_get:1403: inode 13 [ 177.802681][ C1] EXT4-fs (loop1): last error at time 1788263290: ext4_orphan_get:1403: inode 13 [ 177.846593][ T6842] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.195: couldn't read orphan inode 13 (err -117) [ 177.846643][ T6842] loop1: lost filesystem error report for type 5 error -117 [ 177.866162][ T6842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.205012][ T6846] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 178.212828][ T6846] FAULT_INJECTION: forcing a failure. [ 178.212828][ T6846] name failslab, interval 1, probability 0, space 0, times 0 [ 178.212919][ T6846] CPU: 1 UID: 0 PID: 6846 Comm: syz.1.195 Not tainted syzkaller #0 PREEMPT(full) [ 178.212945][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.212959][ T6846] Call Trace: [ 178.212967][ T6846] [ 178.212977][ T6846] dump_stack_lvl+0xe8/0x150 [ 178.213034][ T6846] should_fail_ex+0x3eb/0x540 [ 178.213065][ T6846] should_failslab+0xa8/0x100 [ 178.213093][ T6846] ? alloc_empty_file+0x5b/0x1d0 [ 178.213121][ T6846] kmem_cache_alloc_noprof+0xa1/0x600 [ 178.213159][ T6846] ? alloc_empty_file+0x5b/0x1d0 [ 178.213193][ T6846] alloc_empty_file+0x5b/0x1d0 [ 178.213222][ T6846] path_openat+0xa2/0x1e50 [ 178.213243][ T6846] ? preempt_schedule_thunk+0x16/0x40 [ 178.213271][ T6846] ? preempt_schedule_common+0x7f/0xd0 [ 178.213297][ T6846] ? preempt_schedule_thunk+0x16/0x40 [ 178.213333][ T6846] do_file_open+0x23e/0x4a0 [ 178.213355][ T6846] ? do_getname+0x2e/0x250 [ 178.213386][ T6846] ? __pfx_do_file_open+0x10/0x10 [ 178.213406][ T6846] ? do_getname+0x2e/0x250 [ 178.213463][ T6846] ? do_open_execat+0xad/0x590 [ 178.213500][ T6846] do_open_execat+0x12b/0x590 [ 178.213536][ T6846] ? __pfx_do_open_execat+0x10/0x10 [ 178.213581][ T6846] alloc_bprm+0x24/0x640 [ 178.213606][ T6846] do_execveat_common+0x172/0x670 [ 178.213636][ T6846] __x64_sys_execveat+0xc7/0xf0 [ 178.213661][ T6846] do_syscall_64+0x166/0x520 [ 178.213688][ T6846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.213711][ T6846] ? clear_bhb_loop+0x70/0xc0 [ 178.213738][ T6846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.213761][ T6846] RIP: 0033:0x7fb77bd9e159 [ 178.213786][ T6846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.213804][ T6846] RSP: 002b:00007fb77cbe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 178.213828][ T6846] RAX: ffffffffffffffda RBX: 00007fb77c026180 RCX: 00007fb77bd9e159 [ 178.213845][ T6846] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 178.213860][ T6846] RBP: 00007fb77cbe9090 R08: 0000000000000000 R09: 0000000000000000 [ 178.213874][ T6846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.213887][ T6846] R13: 00007fb77c026218 R14: 00007fb77c026180 R15: 00007ffec754df08 [ 178.213921][ T6846] [ 178.217834][ T6846] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 178.219001][ T6846] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 178.225694][ T6846] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 178.722334][ T6844] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 178.869924][ T5634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.374506][ T6856] loop1: detected capacity change from 0 to 2048 [ 179.733296][ T6856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.657486][ T6864] loop4: detected capacity change from 0 to 2048 [ 180.665004][ T6864] udf: Bad value for 'partition' [ 180.748262][ T6866] tipc: Started in network mode [ 180.748322][ T6866] tipc: Node identity 0ad1a97370c2, cluster identity 4711 [ 180.748814][ T6866] tipc: Enabled bearer , priority 0 [ 180.797592][ T6866] tipc: Resetting bearer [ 180.982033][ T6865] tipc: Disabling bearer [ 181.405624][ T6887] syzkaller0: entered promiscuous mode [ 181.412721][ T6887] syzkaller0: entered allmulticast mode [ 181.455594][ T6887] tipc: Enabled bearer , priority 0 [ 181.534667][ T6886] tipc: Resetting bearer [ 181.617715][ T6886] tipc: Disabling bearer [ 181.955942][ T6877] loop5: detected capacity change from 0 to 32768 [ 182.377181][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 182.377294][ T6900] netlink: 1 bytes leftover after parsing attributes in process `syz.1.207'. [ 184.082092][ T5629] Bluetooth: hci0: command 0x0401 tx timeout [ 184.088366][ T6893] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 185.361158][ T6903] netlink: 'syz.3.208': attribute type 12 has an invalid length. [ 185.371159][ T6903] netlink: 132 bytes leftover after parsing attributes in process `syz.3.208'. [ 186.562151][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 190.449225][ T6928] loop3: detected capacity change from 0 to 32768 [ 190.528704][ T6928] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 190.654040][ T6928] XFS (loop3): Ending clean mount [ 190.756571][ T6963] loop0: detected capacity change from 0 to 24 [ 190.767919][ T6963] romfs: Unknown parameter '' [ 190.770241][ T6928] XFS (loop3): Quotacheck needed: Please wait. [ 193.457418][ T6928] XFS (loop3): Quotacheck: Done. [ 193.523038][ T5624] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 193.589842][ T6977] loop1: detected capacity change from 0 to 4096 [ 193.777116][ T6977] EXT4-fs (loop1): Test dummy encryption mode enabled [ 193.944114][ T6977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.245446][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.245528][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.417450][ T6988] loop5: detected capacity change from 0 to 256 [ 194.540170][ T6982] loop0: detected capacity change from 0 to 1764 [ 194.846616][ T6991] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 195.518910][ T7005] syzkaller0: entered promiscuous mode [ 195.518953][ T7005] syzkaller0: entered allmulticast mode [ 195.570852][ T7005] tipc: Started in network mode [ 195.570910][ T7005] tipc: Node identity 42651bcdd8db, cluster identity 4711 [ 195.582511][ T7005] tipc: Enabled bearer , priority 0 [ 195.626084][ T7005] tipc: Resetting bearer [ 195.645105][ T7004] tipc: Resetting bearer [ 195.678408][ T5634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.729615][ T7004] tipc: Disabling bearer [ 195.956433][ T7011] loop3: detected capacity change from 0 to 256 [ 196.003488][ T7011] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 196.232956][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 196.556009][ T7020] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.574532][ T9] usb 2-1: device descriptor read/64, error -71 [ 196.777166][ T7025] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.304795][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 197.431766][ T9] usb 2-1: device descriptor read/64, error -71 [ 197.542817][ T9] usb usb2-port1: attempt power cycle [ 197.778987][ T7040] FAULT_INJECTION: forcing a failure. [ 197.778987][ T7040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.804369][ T7040] CPU: 1 UID: 0 PID: 7040 Comm: syz.5.236 Not tainted syzkaller #0 PREEMPT(full) [ 197.804403][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.804417][ T7040] Call Trace: [ 197.804427][ T7040] [ 197.804437][ T7040] dump_stack_lvl+0xe8/0x150 [ 197.804476][ T7040] should_fail_ex+0x3eb/0x540 [ 197.804507][ T7040] prepare_alloc_pages+0x223/0x600 [ 197.804540][ T7040] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 197.804572][ T7040] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 197.804604][ T7040] ? __pfx_policy_nodemask+0x10/0x10 [ 197.804640][ T7040] ? rcu_is_watching+0x16/0xb0 [ 197.804672][ T7040] alloc_pages_mpol+0x21e/0x390 [ 197.804708][ T7040] ___kmalloc_large_node+0x4f/0x120 [ 197.804734][ T7040] __kmalloc_large_noprof+0x1a/0x90 [ 197.804758][ T7040] vhost_dev_set_owner+0x1c7/0xb00 [ 197.804803][ T7040] vhost_dev_ioctl+0xcf/0x11f0 [ 197.804836][ T7040] ? vhost_vsock_dev_ioctl+0x245/0xfb0 [ 197.804872][ T7040] ? __pfx___mutex_lock+0x10/0x10 [ 197.804904][ T7040] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 197.804962][ T7040] vhost_vsock_dev_ioctl+0x253/0xfb0 [ 197.805003][ T7040] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 197.805039][ T7040] ? __fget_files+0x2a/0x420 [ 197.805070][ T7040] ? __fget_files+0x3a2/0x420 [ 197.805101][ T7040] ? __fget_files+0x2a/0x420 [ 197.805135][ T7040] ? bpf_lsm_file_ioctl+0x9/0x20 [ 197.805162][ T7040] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 197.805189][ T7040] __se_sys_ioctl+0xfc/0x170 [ 197.805211][ T7040] do_syscall_64+0x166/0x520 [ 197.805233][ T7040] ? trace_irq_disable+0x3b/0x140 [ 197.805251][ T7040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.805270][ T7040] ? clear_bhb_loop+0x70/0xc0 [ 197.805292][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.805310][ T7040] RIP: 0033:0x7f8fffb9e159 [ 197.805328][ T7040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.805343][ T7040] RSP: 002b:00007f9000a63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.805364][ T7040] RAX: ffffffffffffffda RBX: 00007f8fffe25fa0 RCX: 00007f8fffb9e159 [ 197.805378][ T7040] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 197.805388][ T7040] RBP: 00007f8fffc35024 R08: 0000000000000000 R09: 0000000000000000 [ 197.805400][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.805410][ T7040] R13: 00007f8fffe26038 R14: 00007f8fffe25fa0 R15: 00007ffde74a92d8 [ 197.805437][ T7040] [ 198.090031][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 198.163823][ T9] usb 2-1: device descriptor read/8, error -71 [ 198.503644][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 198.607039][ T9] usb 2-1: device descriptor read/8, error -71 [ 198.741710][ T9] usb usb2-port1: unable to enumerate USB device [ 199.161540][ T7048] loop0: detected capacity change from 0 to 4096 [ 199.335813][ T7055] loop1: detected capacity change from 0 to 1024 [ 199.366770][ T7055] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 199.429198][ T7058] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.439836][ T7055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 199.440101][ T7055] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.514281][ T7055] EXT4-fs error (device loop1): ext4_xattr_block_list:777: inode #15: comm syz.1.240: corrupted xattr block 128: bad e_name length [ 199.579442][ T7056] loop4: detected capacity change from 0 to 4096 [ 199.693025][ T7064] loop3: detected capacity change from 0 to 64 [ 199.792064][ T5744] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 199.955126][ T5744] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 199.969072][ T5744] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.969148][ T5744] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 200.032518][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.032574][ T5744] usb 2-1: Product: syz [ 200.032591][ T5744] usb 2-1: Manufacturer: syz [ 200.032607][ T5744] usb 2-1: SerialNumber: syz [ 200.101623][ T5744] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 200.104476][ T5744] gspca_mr97310a: reg write [21] error -8 [ 200.104722][ T5744] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -8 [ 200.222821][ T7069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.333487][ T7055] netlink: 'syz.1.240': attribute type 13 has an invalid length. [ 201.576940][ T32] audit: type=1800 audit(1788263313.865:6): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.239" name="file1" dev="loop4" ino=34 res=0 errno=0 [ 201.612274][ T25] usb 2-1: USB disconnect, device number 10 [ 201.679752][ T7076] loop3: detected capacity change from 0 to 2048 [ 201.724966][ T7052] loop5: detected capacity change from 0 to 32768 [ 201.745774][ T7052] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.238 (7052) [ 201.823256][ T7084] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.835266][ T7052] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.835339][ T7052] BTRFS info (device loop5): using sha256 checksum algorithm [ 202.060097][ T7052] BTRFS info (device loop5): rebuilding free space tree [ 202.115023][ T7084] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 202.138626][ T7084] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 202.180537][ T7084] Remounting filesystem read-only [ 202.503722][ T5624] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 203.035761][ T7060] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 203.303931][ T5634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.444059][ T7052] BTRFS warning (device loop5): discard failed for extent [5332992, 5345279]: errno=-512 unknown [ 203.464413][ T7052] BTRFS info (device loop5): disabling free space tree [ 203.473046][ T7052] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 203.483514][ T7052] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 203.530622][ T7052] BTRFS warning (device loop5): discard failed for extent [5345280, 5357567]: errno=-512 unknown [ 203.545493][ T7052] BTRFS info (device loop5): setting nodatasum [ 203.552049][ T7052] BTRFS info (device loop5): setting nodatacow [ 203.558458][ T7052] BTRFS info (device loop5): enabling ssd optimizations [ 203.565542][ T7052] BTRFS info (device loop5): using spread ssd allocation scheme [ 203.573473][ T7052] BTRFS info (device loop5): turning off barriers [ 203.580071][ T7052] BTRFS info (device loop5): turning on flush-on-commit [ 203.587249][ T7052] BTRFS info (device loop5): turning on sync discard [ 203.604800][ T7052] BTRFS info (device loop5): force clearing of disk cache [ 203.804610][ T7115] tipc: Enabling of bearer rejected, failed to enable media [ 203.925292][ T7112] loop0: detected capacity change from 0 to 4096 [ 203.966588][ T7125] loop1: detected capacity change from 0 to 764 [ 203.983063][ T5909] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 204.006241][ T7125] rock: directory entry would overflow storage [ 204.014111][ T7125] rock: sig=0x5850, size=36, remaining=22 [ 205.182173][ T7112] ntfs3(loop0): Failed to load $Extend (-22). [ 205.182214][ T7112] ntfs3(loop0): Failed to initialize $Extend. [ 205.386420][ T7112] Illegal XDP return value 7112 on prog (id 31) dev N/A, expect packet loss! [ 206.972259][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 206.974253][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 206.974335][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 206.974513][ T7131] Bluetooth: hci0: command 0x0401 tx timeout [ 207.592131][ T7147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.893370][ T7146] netlink: 732 bytes leftover after parsing attributes in process `syz.5.251'. [ 207.905430][ T7146] netlink: 732 bytes leftover after parsing attributes in process `syz.5.251'. [ 208.383862][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.256'. [ 208.439922][ T7162] netlink: 80 bytes leftover after parsing attributes in process `syz.0.255'. [ 210.365486][ T7175] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 210.643403][ T7179] loop0: detected capacity change from 0 to 512 [ 210.783534][ T7179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.174074][ T7186] syzkaller0: entered promiscuous mode [ 211.174120][ T7186] syzkaller0: entered allmulticast mode [ 211.891923][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 212.100893][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 212.126206][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.126308][ T10] usb 1-1: Product: syz [ 212.126341][ T10] usb 1-1: Manufacturer: syz [ 212.126362][ T10] usb 1-1: SerialNumber: syz [ 212.603660][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 212.631692][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 213.212040][ T7206] loop3: detected capacity change from 0 to 4096 [ 213.224087][ T7206] ntfs3(loop3): ino=0, mi_enum_attr [ 213.234058][ T7207] loop5: detected capacity change from 0 to 256 [ 213.264362][ T7206] ntfs3(loop3): ino=0, mi_enum_attr [ 213.266442][ T7206] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 213.282896][ T7206] ntfs3(loop3): ino=0, mi_enum_attr [ 213.306696][ T7207] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.360516][ T7206] bonding: no command found in bonding_masters - use +ifname or -ifname [ 213.769123][ T7196] loop1: detected capacity change from 0 to 32768 [ 213.789238][ T7196] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.266 (7196) [ 213.850286][ T7196] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 213.850367][ T7196] BTRFS info (device loop1): using blake2b checksum algorithm [ 213.934325][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 213.949778][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 214.059441][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 214.074625][ T7223] netlink: 'syz.3.270': attribute type 2 has an invalid length. [ 214.146341][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 214.167393][ T7223] loop3: detected capacity change from 0 to 128 [ 214.201210][ T7223] FAT-fs (loop3): bogus sectors per cluster 7 [ 214.201260][ T7223] FAT-fs (loop3): Can't find a valid FAT filesystem [ 214.262819][ T10] usb 1-1: USB disconnect, device number 5 [ 214.287598][ T7196] BTRFS info (device loop1): enabling ssd optimizations [ 214.287664][ T7196] BTRFS info (device loop1): turning on async discard [ 214.293173][ T7196] BTRFS info (device loop1): enabling free space tree [ 214.479049][ T32] audit: type=1107 audit(1788263326.755:7): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 214.595873][ T32] audit: type=1800 audit(1788263326.885:8): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.266" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 214.745730][ T5634] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 215.646330][ T7203] loop4: detected capacity change from 0 to 32768 [ 215.834971][ T7203] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 215.838404][ T7203] (syz.4.267,7203,1):ocfs2_initialize_super:2247 ERROR: status = -12 [ 215.860952][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.880685][ T7203] (syz.4.267,7203,1):ocfs2_fill_super:1185 ERROR: status = -12 [ 217.428496][ T7254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.580443][ T7249] syzkaller0: entered promiscuous mode [ 217.580629][ T7249] syzkaller0: entered allmulticast mode [ 219.038463][ T7263] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 219.111777][ T5813] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 219.312180][ T7265] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.728837][ T5813] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 219.822914][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.822951][ T5813] usb 1-1: Product: syz [ 219.822974][ T5813] usb 1-1: Manufacturer: syz [ 219.822987][ T5813] usb 1-1: SerialNumber: syz [ 219.862953][ T5813] usb 1-1: config 0 descriptor?? [ 220.318631][ T5813] usb 1-1: Firmware: major: 29, minor: 42, hardware type: UNKNOWN (179) [ 220.363037][ T5744] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 220.522343][ T5744] usb 4-1: Using ep0 maxpacket: 16 [ 220.528179][ T5744] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 220.544089][ T5744] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.544159][ T5744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.545426][ T5744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 220.545490][ T5744] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 220.545564][ T5744] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.554788][ T5813] usb 1-1: Read permanent extended address 00:00:00:00:00:00:00:cf from device [ 220.554813][ T5813] usb 1-1: atusb_probe: initialization failed, error = -524 [ 220.583223][ T5744] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 220.583302][ T5744] usb 4-1: Manufacturer: syz [ 220.633289][ T5813] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 220.647981][ T5744] usb 4-1: config 0 descriptor?? [ 220.801022][ T5813] usb 1-1: USB disconnect, device number 6 [ 220.886235][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 220.886292][ T7273] netlink: 'syz.3.282': attribute type 10 has an invalid length. [ 220.886332][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 221.093975][ T5744] rc_core: IR keymap rc-hauppauge not found [ 221.094019][ T5744] Registered IR keymap rc-empty [ 221.094477][ T5744] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 221.122425][ T5744] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 221.617094][ T5744] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 221.673845][ T5744] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 221.862476][ T7289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 222.098048][ T7291] overlayfs: failed to resolve './file0': -2 [ 222.423008][ T5744] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.451981][ T5744] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.471755][ T5744] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.491849][ T5744] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.513682][ T5744] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.532363][ T5744] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.567710][ T5744] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.581847][ T5744] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.591065][ T7295] loop4: detected capacity change from 0 to 512 [ 222.605462][ T5744] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.621855][ T5744] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 222.727806][ T5744] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 222.729033][ T5744] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 222.775368][ T5744] usb 4-1: USB disconnect, device number 5 [ 223.429346][ T7302] loop0: detected capacity change from 0 to 1764 [ 223.624936][ T7303] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 224.238011][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.289'. [ 224.484288][ T7311] fuse: Unknown parameter 'group_iT&ømµæ·4d' [ 224.536910][ T7311] loop4: detected capacity change from 0 to 1024 [ 224.603868][ T7311] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20002 [ 224.628372][ T7311] netlink: 'syz.4.291': attribute type 13 has an invalid length. [ 224.644492][ T7315] syzkaller0: entered promiscuous mode [ 224.651773][ T5808] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 224.661896][ T7315] syzkaller0: entered allmulticast mode [ 224.684915][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.292'. [ 224.684984][ T7313] netlink: 'syz.5.292': attribute type 10 has an invalid length. [ 224.685020][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.292'. [ 224.714903][ T7315] tipc: Enabled bearer , priority 0 [ 224.738985][ T7316] overlayfs: failed to resolve './file0': -2 [ 224.804695][ T5808] usb 4-1: device descriptor read/64, error -71 [ 224.831518][ T7313] geneve2: entered promiscuous mode [ 224.836658][ T7313] geneve2: entered allmulticast mode [ 224.886341][ T7315] tipc: Resetting bearer [ 224.893728][ T7321] loop1: detected capacity change from 0 to 128 [ 224.910518][ T7314] tipc: Resetting bearer [ 225.128148][ T7314] tipc: Disabling bearer [ 225.565034][ T5808] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 225.711748][ T5808] usb 4-1: device descriptor read/64, error -71 [ 225.896251][ T5808] usb usb4-port1: attempt power cycle [ 227.143997][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 227.175097][ T5808] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 227.672684][ T7332] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 228.227764][ T5808] usb 4-1: device descriptor read/8, error -71 [ 229.014415][ T7353] loop3: detected capacity change from 0 to 4096 [ 229.025603][ T7353] ext4: Unknown parameter 'nouser_xattr' [ 229.167044][ T7353] loop3: detected capacity change from 0 to 4096 [ 229.176737][ T7353] ext4: Unknown parameter 'nouser_xattr' [ 231.189812][ T7373] loop4: detected capacity change from 0 to 256 [ 231.396173][ T7373] exfat: Deprecated parameter 'namecase' [ 231.396237][ T7373] exfat: Deprecated parameter 'namecase' [ 231.451691][ T7373] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 231.824417][ T7384] netlink: 32 bytes leftover after parsing attributes in process `syz.5.313'. [ 231.837989][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.5.313'. [ 231.890701][ T7384] tipc: Enabling of bearer rejected, failed to enable media [ 231.922870][ T7383] netlink: 32 bytes leftover after parsing attributes in process `syz.5.313'. [ 231.934896][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.5.313'. [ 231.992231][ T7383] tipc: Enabling of bearer rejected, failed to enable media [ 232.221505][ T32] audit: type=1800 audit(1788263344.505:9): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.311" name="file1" dev="loop4" ino=1048636 res=0 errno=0 [ 232.503219][ T7392] No fuse device found [ 232.503309][ T7392] No fuse device found [ 232.503361][ T7392] No fuse device found [ 232.503398][ T7392] No fuse device found [ 232.503434][ T7392] No fuse device found [ 232.503479][ T7392] No fuse device found [ 232.503516][ T7392] No fuse device found [ 232.503552][ T7392] No fuse device found [ 232.503588][ T7392] No fuse device found [ 232.503624][ T7392] No fuse device found [ 232.696390][ T7393] loop3: detected capacity change from 0 to 512 [ 232.734605][ T7393] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 232.734647][ T7393] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 232.778098][ T7393] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 232.778264][ T7393] System zones: 1-12 [ 232.934817][ T7393] EXT4-fs (loop3): 1 truncate cleaned up [ 232.946330][ T7393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.005889][ T7392] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 233.025230][ T7396] syzkaller0: entered promiscuous mode [ 233.025279][ T7396] syzkaller0: entered allmulticast mode [ 233.309796][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.411123][ T7403] xt_hashlimit: size too large, truncated to 1048576 [ 233.553681][ T7408] loop3: detected capacity change from 0 to 1024 [ 233.555222][ T7408] hfsplus: Unknown parameter 'sid' [ 233.689262][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'. [ 234.781718][ T32] audit: type=1326 audit(1788263347.055:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda19e159 code=0x7ffc0000 [ 234.792603][ T32] audit: type=1326 audit(1788263347.085:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda19e159 code=0x7ffc0000 [ 234.809413][ T32] audit: type=1326 audit(1788263347.095:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda19e159 code=0x7ffc0000 [ 234.815677][ T32] audit: type=1326 audit(1788263347.105:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f7eda19e159 code=0x7ffc0000 [ 234.815819][ T32] audit: type=1326 audit(1788263347.105:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda19e159 code=0x7ffc0000 [ 234.815982][ T32] audit: type=1326 audit(1788263347.105:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda19e159 code=0x7ffc0000 [ 234.825483][ T32] audit: type=1326 audit(1788263347.095:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda19e159 code=0x7ffc0000 [ 234.825651][ T32] audit: type=1326 audit(1788263347.115:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda19e159 code=0x7ffc0000 [ 234.825781][ T32] audit: type=1326 audit(1788263347.115:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.0.323" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda19e159 code=0x7ffc0000 [ 234.942959][ T7428] ucma_write: process 212 (syz.3.322) changed security contexts after opening file descriptor, this is not allowed. [ 235.076180][ T7427] loop0: detected capacity change from 0 to 512 [ 235.107421][ T7427] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 235.156353][ T7427] EXT4-fs (loop0): 1 truncate cleaned up [ 235.176207][ T7427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.304643][ T7436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.325'. [ 235.402411][ T7436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.325'. [ 235.402645][ T7436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.325'. [ 235.402872][ T7436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.325'. [ 235.403069][ T7436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.325'. [ 235.518763][ T7437] loop4: detected capacity change from 0 to 4096 [ 235.532164][ T7437] nilfs2: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 235.660073][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.829902][ T7446] raw_sendmsg: syz.3.327 forgot to set AF_INET. Fix it! [ 235.869379][ T7452] dummy0: entered allmulticast mode [ 235.885164][ T7452] dummy0: left allmulticast mode [ 236.261389][ T7435] loop1: detected capacity change from 0 to 32768 [ 236.278505][ T7435] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.326 (7435) [ 236.360673][ T7435] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 236.360746][ T7435] BTRFS info (device loop1): using sha256 checksum algorithm [ 236.545456][ T7435] BTRFS info (device loop1): enabling ssd optimizations [ 236.545521][ T7435] BTRFS info (device loop1): turning on sync discard [ 236.548861][ T7435] BTRFS info (device loop1): enabling free space tree [ 236.548945][ T7435] BTRFS info (device loop1): use zlib compression, level 3 [ 237.162942][ T7486] loop0: detected capacity change from 0 to 40427 [ 237.310892][ T7486] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 237.310954][ T7486] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 237.476737][ T7486] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 237.499012][ T7486] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 237.499061][ T7486] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 237.527754][ T7452] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 237.860326][ T32] kauditd_printk_skb: 118 callbacks suppressed [ 237.860387][ T32] audit: type=1800 audit(1788263350.145:137): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.326" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 237.893261][ T5626] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 237.984354][ T7496] loop3: detected capacity change from 0 to 512 [ 238.074311][ T5626] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.087094][ T5626] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.088312][ T5626] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 238.088363][ T5626] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 238.088414][ T5626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.193193][ T5626] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.409135][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.409762][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.445720][ T7485] syz_tun: entered promiscuous mode [ 238.446593][ T7485] macvtap1: entered promiscuous mode [ 238.447185][ T7485] macvtap1: entered allmulticast mode [ 238.447210][ T7485] syz_tun: entered allmulticast mode [ 238.869646][ T7432] syz.1.326 (7432) used greatest stack depth: 18848 bytes left [ 239.832200][ T5634] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.864282][ T5626] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 239.969012][ T5626] usb 1-1: USB disconnect, device number 7 [ 242.567103][ T7537] loop1: detected capacity change from 0 to 1764 [ 242.751419][ T7542] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 244.805672][ T7557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.146744][ T7561] netlink: 'syz.5.355': attribute type 13 has an invalid length. [ 246.611697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 247.021998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 247.947162][ T7577] loop1: detected capacity change from 0 to 131072 [ 248.094854][ T7577] F2FS-fs (loop1): invalid crc value [ 248.149126][ T7577] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 248.162437][ T7577] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 249.128189][ T7590] loop0: detected capacity change from 0 to 1764 [ 249.293932][ T7593] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 250.562387][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 252.974594][ T7622] loop4: detected capacity change from 0 to 2048 [ 253.195130][ T7622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.197198][ T7633] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 254.451773][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 254.602290][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 254.605533][ T10] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 254.631368][ T10] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.631436][ T10] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.631482][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.632223][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.676582][ T10] usb 5-1: config 0 descriptor?? [ 254.999451][ T7639] loop0: detected capacity change from 0 to 32768 [ 255.000527][ T7639] xfs: Unknown parameter 'nobarrier' [ 255.204306][ T10] elan 0003:04F3:074D.0001: failed to start in urb: -90 [ 255.237971][ T10] input: HID 04f3:074d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04F3:074D.0001/input/input7 [ 255.348474][ T7630] loop3: detected capacity change from 0 to 4096 [ 255.412041][ T7630] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 255.412089][ T7630] ntfs3(loop3): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only. [ 255.802504][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.802607][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.410771][ T10] elan 0003:04F3:074D.0001: input,hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.4-1/input0 [ 256.415021][ T10] usb 5-1: USB disconnect, device number 4 [ 257.450996][ T7653] fido_id[7653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 258.325140][ T7630] ntfs3(loop3): Failed to read $UpCase (-4). [ 258.510052][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 259.411828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 259.538961][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 259.612288][ T31] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=8c.00 [ 259.723150][ T31] usb 1-1: config index 0 descriptor too short (expected 20, got 18) [ 259.723242][ T31] usb 1-1: config 169 has an invalid interface number: 39 but max is 0 [ 259.723328][ T31] usb 1-1: config 169 has no interface number 0 [ 259.889261][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.889311][ T31] usb 1-1: Product: syz [ 259.889348][ T31] usb 1-1: Manufacturer: syz [ 259.889368][ T31] usb 1-1: SerialNumber: syz [ 259.979760][ T31] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 259.979872][ T31] command write [95] error -22 [ 260.186150][ T5744] usb 1-1: USB disconnect, device number 8 [ 261.928425][ T7700] loop1: detected capacity change from 0 to 128 [ 262.015754][ T7700] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.032707][ T7700] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.151706][ T5744] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 262.291891][ T10] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 262.302708][ T5744] usb 4-1: Using ep0 maxpacket: 8 [ 262.308910][ T5744] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 262.327916][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.327963][ T5744] usb 4-1: Product: syz [ 262.327996][ T5744] usb 4-1: Manufacturer: syz [ 262.328017][ T5744] usb 4-1: SerialNumber: syz [ 262.362017][ T5744] usb 4-1: config 0 descriptor?? [ 262.376573][ T5744] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 262.388350][ T5744] pctv452e: pctv452e_power_ctrl: 1 [ 262.388350][ T5744] [ 262.389200][ T5744] usb 4-1: selecting invalid altsetting 3 [ 262.389223][ T5744] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 262.389223][ T5744] [ 262.389584][ T5744] dvb-usb: bulk message failed: -22 (5/0) [ 262.452513][ T10] usb 2-1: New USB device found, idVendor=0130, idProduct=0901, bcdDevice= 3.70 [ 262.452578][ T10] usb 2-1: no configurations [ 262.452608][ T10] usb 2-1: can't read configurations, error -22 [ 262.522641][ T5744] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.535174][ T5744] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 262.535267][ T5744] usb 4-1: media controller created [ 262.536010][ T5744] dvb-usb: bulk message failed: -22 (8/0) [ 262.569820][ T5744] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 262.569937][ T5744] dvb-usb: MAC address reading failed. [ 262.604818][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.615914][ T10] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 262.627142][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.712483][ T5744] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.795356][ T10] usb 2-1: New USB device found, idVendor=0130, idProduct=0901, bcdDevice= 3.70 [ 262.795418][ T10] usb 2-1: no configurations [ 262.795451][ T10] usb 2-1: can't read configurations, error -22 [ 262.810129][ T10] usb usb2-port1: attempt power cycle [ 262.923768][ T5744] DVB: Unable to find symbol stb0899_attach() [ 262.923813][ T5744] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 263.261753][ T10] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 263.281684][ T5744] rc_core: IR keymap rc-tt-1500 not found [ 263.281721][ T5744] Registered IR keymap rc-empty [ 263.283059][ T5744] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 263.306400][ T10] usb 2-1: New USB device found, idVendor=0130, idProduct=0901, bcdDevice= 3.70 [ 263.306460][ T10] usb 2-1: no configurations [ 263.306477][ T10] usb 2-1: can't read configurations, error -22 [ 263.342411][ T5744] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8 [ 263.392420][ T5744] dvb-usb: schedule remote query interval to 100 msecs. [ 263.399599][ T5744] pctv452e: pctv452e_power_ctrl: 0 [ 263.399599][ T5744] [ 263.408066][ T5744] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 263.427466][ T5744] usb 4-1: USB disconnect, device number 10 [ 263.472032][ T10] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 263.503287][ T10] usb 2-1: New USB device found, idVendor=0130, idProduct=0901, bcdDevice= 3.70 [ 263.503353][ T10] usb 2-1: no configurations [ 263.503386][ T10] usb 2-1: can't read configurations, error -22 [ 263.514001][ T10] usb usb2-port1: unable to enumerate USB device [ 263.563323][ T7711] __nla_validate_parse: 60 callbacks suppressed [ 263.563378][ T7711] netlink: 84 bytes leftover after parsing attributes in process `syz.0.394'. [ 263.863075][ T5744] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 265.170082][ T5634] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.234446][ T7732] loop0: detected capacity change from 0 to 128 [ 265.525594][ T7732] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 265.662086][ T7732] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 266.405513][ T7732] trusted_key: syz.0.402 sent an empty control message without MSG_MORE. [ 266.453407][ T7732] fscrypt (loop0, inode 12): Unsupported encryption flags (0x10) [ 266.652414][ T5616] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.649225][ T32] audit: type=1800 audit(1788263381.935:138): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.410" name="zone_nr_conv" dev="configfs" ino=15346 res=0 errno=0 [ 269.689913][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 271.483075][ T7788] mmap: syz.5.417 (7788): VmData 175874048 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 273.339744][ T7799] loop0: detected capacity change from 0 to 128 [ 273.377995][ T7799] EXT4-fs: Ignoring removed i_version option [ 273.417435][ T7799] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.438250][ T7799] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 273.884320][ T7803] loop3: detected capacity change from 0 to 4096 [ 274.072616][ T5616] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.175470][ T32] audit: type=1800 audit(1788263386.465:139): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.422" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 278.072408][ T7816] loop4: detected capacity change from 0 to 32768 [ 278.073208][ T7816] xfs: Unknown parameter 'nobarrier' [ 279.017726][ T7832] netlink: 'syz.4.430': attribute type 2 has an invalid length. [ 279.049633][ T7833] loop1: detected capacity change from 0 to 4096 [ 279.671011][ T32] audit: type=1800 audit(1788263391.955:140): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.421" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 279.692891][ T5627] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 279.726397][ T7833] FAULT_INJECTION: forcing a failure. [ 279.726397][ T7833] name failslab, interval 1, probability 0, space 0, times 0 [ 279.740080][ T7833] CPU: 1 UID: 0 PID: 7833 Comm: syz.1.421 Not tainted syzkaller #0 PREEMPT(full) [ 279.740111][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.740125][ T7833] Call Trace: [ 279.740134][ T7833] [ 279.740143][ T7833] dump_stack_lvl+0xe8/0x150 [ 279.740180][ T7833] should_fail_ex+0x3eb/0x540 [ 279.740209][ T7833] should_failslab+0xa8/0x100 [ 279.740239][ T7833] __kmalloc_cache_noprof+0xa3/0x600 [ 279.740263][ T7833] ? alloc_pipe_info+0xe8/0x4c0 [ 279.740285][ T7833] ? alloc_pipe_info+0xe8/0x4c0 [ 279.740315][ T7833] alloc_pipe_info+0xe8/0x4c0 [ 279.740341][ T7833] splice_direct_to_actor+0xa41/0xcb0 [ 279.740387][ T7833] ? lock_acquire+0x115/0x350 [ 279.740411][ T7833] ? __pfx_aa_file_perm+0x10/0x10 [ 279.740443][ T7833] ? __pfx_direct_splice_actor+0x10/0x10 [ 279.740476][ T7833] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 279.740529][ T7833] do_splice_direct+0x195/0x290 [ 279.740564][ T7833] ? __pfx_do_splice_direct+0x10/0x10 [ 279.740595][ T7833] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 279.740622][ T7833] ? rw_verify_area+0x203/0x4c0 [ 279.740657][ T7833] do_sendfile+0x52e/0x7c0 [ 279.740696][ T7833] ? __pfx_do_sendfile+0x10/0x10 [ 279.740721][ T7833] ? __fget_files+0x3a2/0x420 [ 279.740758][ T7833] __se_sys_sendfile64+0x144/0x1a0 [ 279.740786][ T7833] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 279.740818][ T7833] do_syscall_64+0x166/0x520 [ 279.740843][ T7833] ? trace_irq_disable+0x3b/0x140 [ 279.740864][ T7833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.740886][ T7833] ? clear_bhb_loop+0x70/0xc0 [ 279.740912][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.740933][ T7833] RIP: 0033:0x7fb77bd9e159 [ 279.740953][ T7833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.740970][ T7833] RSP: 002b:00007fb77cc2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 279.741004][ T7833] RAX: ffffffffffffffda RBX: 00007fb77c025fa0 RCX: 00007fb77bd9e159 [ 279.741019][ T7833] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 279.741031][ T7833] RBP: 00007fb77cc2b090 R08: 0000000000000000 R09: 0000000000000000 [ 279.741043][ T7833] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000001 [ 279.741055][ T7833] R13: 00007fb77c026038 R14: 00007fb77c025fa0 R15: 00007ffec754df08 [ 279.741087][ T7833] [ 280.272428][ T5627] usb 4-1: Using ep0 maxpacket: 16 [ 280.291524][ T5627] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 280.306104][ T5627] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 280.316070][ T5627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 280.335934][ T5627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.344416][ T5627] usb 4-1: Product: syz [ 280.349659][ T5627] usb 4-1: Manufacturer: syz [ 280.349682][ T5627] usb 4-1: SerialNumber: syz [ 280.372327][ T5627] usb 4-1: config 0 descriptor?? [ 280.379350][ T7827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 280.651225][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 281.503886][ T7847] syzkaller0: entered promiscuous mode [ 281.503947][ T7847] syzkaller0: entered allmulticast mode [ 281.535483][ T5808] usb 4-1: USB disconnect, device number 11 [ 281.567101][ T7847] tipc: Enabled bearer , priority 0 [ 281.595892][ T7847] tipc: Resetting bearer [ 281.624522][ T7845] tipc: Resetting bearer [ 281.716924][ T7845] tipc: Disabling bearer [ 282.451765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 282.862033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 283.271585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 284.602221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 285.389849][ T7866] loop4: detected capacity change from 0 to 32768 [ 285.392978][ T7866] xfs: Unknown parameter 'nobarrier' [ 286.698357][ T7882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.658788][ T5713] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 287.845823][ T5713] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 287.873517][ T5713] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 287.873584][ T5713] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 287.873631][ T5713] usb 2-1: config 1 interface 0 has no altsetting 0 [ 287.933656][ T5713] usb 2-1: string descriptor 0 read error: -22 [ 287.933844][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.659994][ T7894] netlink: 14 bytes leftover after parsing attributes in process `syz.4.449'. [ 290.113263][ T7886] input: syz1 as /devices/virtual/input/input9 [ 290.151589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 291.919604][ T5713] usbhid 2-1:1.0: can't add hid device: -71 [ 291.919735][ T5713] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 292.003444][ T5713] usb 2-1: USB disconnect, device number 15 [ 292.062550][ T7907] syzkaller0: entered promiscuous mode [ 292.068173][ T7907] syzkaller0: entered allmulticast mode [ 292.088027][ T7907] tipc: Enabled bearer , priority 0 [ 292.117949][ T7907] tipc: Resetting bearer [ 292.328454][ T7906] tipc: Resetting bearer [ 292.445793][ T7906] tipc: Disabling bearer [ 292.895495][ T7909] loop1: detected capacity change from 0 to 32768 [ 292.962395][ T7909] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 293.013933][ T7909] XFS (loop1): Ending clean mount [ 293.221251][ T7925] netlink: 'syz.0.457': attribute type 4 has an invalid length. [ 294.285301][ T7936] 9p: Unknown access argument 18446744073709551615: -34 [ 294.380478][ T7932] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 294.500652][ T7941] loop4: detected capacity change from 0 to 512 [ 294.509619][ T7941] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 294.934935][ T7948] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 295.649995][ T7951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.751966][ T5626] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 297.561267][ T5634] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 297.578223][ T7961] loop3: detected capacity change from 0 to 256 [ 297.612752][ T5626] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 297.615946][ T5626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.616070][ T5626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.634355][ T5626] usb 1-1: config 0 descriptor?? [ 297.695645][ T7961] gadgetfs: bound to dummy_udc driver [ 298.254873][ T7963] loop4: detected capacity change from 0 to 32768 [ 298.269166][ T5626] usbhid 1-1:0.0: can't add hid device: -71 [ 298.269418][ T5626] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 298.282965][ T5626] usb 1-1: USB disconnect, device number 9 [ 298.316563][ T7963] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 298.316607][ T7963] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 298.390012][ T7963] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 298.469151][ T5627] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 298.469213][ T5627] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 298.814360][ T7976] loop1: detected capacity change from 0 to 1024 [ 298.820182][ T7976] ext4: Unknown parameter 'smackfstransmute' [ 298.885751][ T7976] netlink: 628 bytes leftover after parsing attributes in process `syz.1.466'. [ 299.311729][ T5626] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 299.506807][ T5626] usb 1-1: Using ep0 maxpacket: 32 [ 299.642687][ T5626] usb 1-1: device descriptor read/all, error -71 [ 299.773812][ T5627] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1304ms [ 299.822825][ T5627] gfs2: fsid=syz:syz.0: jid=0: Done [ 299.823993][ T7963] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 299.850077][ T7989] futex_wake_op: syz.3.470 tries to shift op by 144; fix this program [ 300.594000][ T7996] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 302.839972][ T8004] netlink: 'syz.1.475': attribute type 2 has an invalid length. [ 302.840017][ T8004] netlink: 40 bytes leftover after parsing attributes in process `syz.1.475'. [ 303.007545][ T8013] loop3: detected capacity change from 0 to 128 [ 303.023501][ T8004] : entered promiscuous mode [ 303.038905][ T8013] msdos: Unknown parameter ')ÒBxÇß±„‰Z8íDõi#šÉröþLEp' [ 303.524958][ T8027] loop1: detected capacity change from 0 to 1024 [ 306.750281][ T8041] loop0: detected capacity change from 0 to 32768 [ 306.769384][ T8041] ocfs2: Unknown parameter 'dev/iommu' [ 308.287471][ T8043] FAULT_INJECTION: forcing a failure. [ 308.287471][ T8043] name failslab, interval 1, probability 0, space 0, times 0 [ 308.301148][ T8043] CPU: 1 UID: 0 PID: 8043 Comm: syz.4.489 Not tainted syzkaller #0 PREEMPT(full) [ 308.301183][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.301199][ T8043] Call Trace: [ 308.301210][ T8043] [ 308.301219][ T8043] dump_stack_lvl+0xe8/0x150 [ 308.301260][ T8043] should_fail_ex+0x3eb/0x540 [ 308.301292][ T8043] should_failslab+0xa8/0x100 [ 308.301325][ T8043] __kmalloc_cache_noprof+0xa3/0x600 [ 308.301352][ T8043] ? madvise_collapse+0x15a/0x790 [ 308.301379][ T8043] ? madvise_collapse+0x15a/0x790 [ 308.301415][ T8043] madvise_collapse+0x15a/0x790 [ 308.301454][ T8043] madvise_vma_behavior+0x1174/0x41d0 [ 308.301493][ T8043] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 308.301520][ T8043] ? __lock_acquire+0x6df/0x2e50 [ 308.301563][ T8043] ? do_raw_spin_lock+0x12b/0x2f0 [ 308.301615][ T8043] ? rcu_is_watching+0x16/0xb0 [ 308.301644][ T8043] ? trace_hrtimer_start+0x82/0x200 [ 308.301688][ T8043] ? __lock_acquire+0x6df/0x2e50 [ 308.301722][ T8043] ? finish_task_switch+0x40e/0xc60 [ 308.301752][ T8043] ? lockdep_hardirqs_on+0x7b/0x110 [ 308.301782][ T8043] ? rcu_is_watching+0x16/0xb0 [ 308.301817][ T8043] ? mtree_range_walk+0x707/0x8b0 [ 308.301861][ T8043] ? mt_find+0x186/0x630 [ 308.301894][ T8043] ? mt_find+0x481/0x630 [ 308.301927][ T8043] ? mt_find+0x186/0x630 [ 308.301957][ T8043] ? __pfx_mt_find+0x10/0x10 [ 308.301995][ T8043] ? find_vma_prev+0x123/0x1b0 [ 308.302037][ T8043] ? find_vma+0xed/0x160 [ 308.302069][ T8043] ? __futex_wait+0x3c7/0x470 [ 308.302105][ T8043] ? update_protect_slice+0x128/0x210 [ 308.302150][ T8043] madvise_walk_vmas+0x576/0xb00 [ 308.302190][ T8043] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 308.302223][ T8043] ? blk_start_plug+0x6e/0x1b0 [ 308.302251][ T8043] madvise_do_behavior+0x385/0x540 [ 308.302284][ T8043] ? __pfx_madvise_do_behavior+0x10/0x10 [ 308.302319][ T8043] ? down_read+0x2be/0x330 [ 308.302359][ T8043] do_madvise+0x327/0x3a0 [ 308.302388][ T8043] ? __pfx_do_madvise+0x10/0x10 [ 308.302427][ T8043] ? __se_sys_futex+0x3a8/0x450 [ 308.302479][ T8043] __x64_sys_madvise+0xa6/0xc0 [ 308.302508][ T8043] do_syscall_64+0x166/0x520 [ 308.302535][ T8043] ? trace_irq_disable+0x3b/0x140 [ 308.302559][ T8043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.302584][ T8043] ? clear_bhb_loop+0x70/0xc0 [ 308.302650][ T8043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.302675][ T8043] RIP: 0033:0x7f02b659e159 [ 308.302697][ T8043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.302718][ T8043] RSP: 002b:00007f02b7438028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 308.302743][ T8043] RAX: ffffffffffffffda RBX: 00007f02b6825fa0 RCX: 00007f02b659e159 [ 308.302761][ T8043] RDX: 0000000000000019 RSI: 0000000000c00000 RDI: 0000200000000000 [ 308.302777][ T8043] RBP: 00007f02b6635024 R08: 0000000000000000 R09: 0000000000000000 [ 308.302792][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.302806][ T8043] R13: 00007f02b6826038 R14: 00007f02b6825fa0 R15: 00007ffdb5927a18 [ 308.302843][ T8043] [ 308.992091][ T8074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.380321][ T8077] loop1: detected capacity change from 0 to 4096 [ 309.400824][ T8077] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 310.179434][ T8089] loop0: detected capacity change from 0 to 3904 [ 310.259139][ T8087] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 310.860725][ T8089] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 310.895207][ T8089] ldm_validate_privheads(): Disk read failed. [ 310.909910][ T8089] ldm_parse_tocblock(): TOCBLOCK's first bitmap is 'config', should be ''. [ 310.909976][ T8089] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 310.910012][ T8089] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 310.910121][ T8089] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 310.910192][ T8089] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 310.910366][ T8089] loop0: [ 310.910436][ T8089] loop0: partition table partially beyond EOD, truncated [ 310.934301][ T8077] ntfs3(loop1): ino=19, mi_enum_attr [ 310.934394][ T8077] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 311.901172][ T8076] ntfs3(loop1): failed to convert "c46c" to cp855 [ 311.993688][ T8076] ntfs3(loop1): ino=20, mi_enum_attr [ 312.195360][ T8110] mmap: syz.0.504 (8110) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 312.508440][ T10] kernel write not supported for file /input/mice (pid: 10 comm: kworker/0:1) [ 312.586625][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 312.595792][ T8123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.509'. [ 314.628907][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 314.941623][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 314.950891][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 315.150766][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 315.160030][ T10] usb 5-1: can't read configurations, error -71 [ 315.311331][ T5713] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 315.475555][ T5713] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 315.487399][ T5713] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 315.496306][ T5713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.509326][ T5713] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 315.519155][ T5713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.555449][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 315.565150][ T5713] usb 2-1: Product: syz [ 315.565204][ T5713] usb 2-1: Manufacturer: syz [ 315.587447][ T5713] cdc_wdm 2-1:1.0: skipping garbage [ 315.587486][ T5713] cdc_wdm 2-1:1.0: skipping garbage [ 315.587600][ T5713] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 315.795094][ T5713] usb 2-1: USB disconnect, device number 16 [ 315.903287][ T8158] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 316.053722][ T8158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.076935][ T8162] socket: no more sockets [ 316.113927][ T8162] syz.4.521: vmalloc error: size 4096, failed to allocate pages, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 316.130994][ T8162] CPU: 0 UID: 0 PID: 8162 Comm: syz.4.521 Not tainted syzkaller #0 PREEMPT(full) [ 316.131026][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 316.131041][ T8162] Call Trace: [ 316.131052][ T8162] [ 316.131061][ T8162] dump_stack_lvl+0xe8/0x150 [ 316.131102][ T8162] warn_alloc+0x24d/0x270 [ 316.131134][ T8162] ? __pfx_warn_alloc+0x10/0x10 [ 316.131164][ T8162] ? alloc_pages_mpol+0x256/0x390 [ 316.131205][ T8162] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 316.131270][ T8162] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 316.131305][ T8162] ? futex_unqueue+0x22/0x240 [ 316.131341][ T8162] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 316.131368][ T8162] __vmalloc_noprof+0xd2/0x120 [ 316.131402][ T8162] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 316.131433][ T8162] bpf_prog_alloc_no_stats+0x47/0x560 [ 316.131459][ T8162] ? bpf_prog_alloc+0x2a/0x1a0 [ 316.131488][ T8162] bpf_prog_alloc+0x3c/0x1a0 [ 316.131527][ T8162] bpf_prog_load+0x7f8/0x1c20 [ 316.131569][ T8162] ? __pfx_bpf_prog_load+0x10/0x10 [ 316.131612][ T8162] ? __might_fault+0xaf/0x130 [ 316.131653][ T8162] __sys_bpf+0xd0d/0xd90 [ 316.131688][ T8162] ? __pfx___sys_bpf+0x10/0x10 [ 316.131718][ T8162] ? do_futex+0x3e7/0x4e0 [ 316.131778][ T8162] ? rcu_is_watching+0x16/0xb0 [ 316.131814][ T8162] __x64_sys_bpf+0xba/0xd0 [ 316.131840][ T8162] do_syscall_64+0x166/0x520 [ 316.131868][ T8162] ? trace_irq_disable+0x3b/0x140 [ 316.131891][ T8162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.131915][ T8162] ? clear_bhb_loop+0x70/0xc0 [ 316.131944][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.131967][ T8162] RIP: 0033:0x7f02b659e159 [ 316.131989][ T8162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.132009][ T8162] RSP: 002b:00007f02b7417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 316.132035][ T8162] RAX: ffffffffffffffda RBX: 00007f02b6826090 RCX: 00007f02b659e159 [ 316.132053][ T8162] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 316.132068][ T8162] RBP: 00007f02b6635024 R08: 0000000000000000 R09: 0000000000000000 [ 316.132083][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.132097][ T8162] R13: 00007f02b6826128 R14: 00007f02b6826090 R15: 00007ffdb5927a18 [ 316.132130][ T8162] [ 316.142385][ T8162] Mem-Info: [ 316.142401][ T8162] active_anon:15140 inactive_anon:7 isolated_anon:0 [ 316.142401][ T8162] active_file:147 inactive_file:59355 isolated_file:0 [ 316.142401][ T8162] unevictable:0 dirty:64 writeback:0 [ 316.142401][ T8162] slab_reclaimable:11186 slab_unreclaimable:96088 [ 316.142401][ T8162] mapped:30881 shmem:8125 pagetables:1332 [ 316.142401][ T8162] sec_pagetables:3 bounce:0 [ 316.142401][ T8162] kernel_misc_reclaimable:0 [ 316.142401][ T8162] free:1297696 free_pcp:14815 free_cma:0 [ 316.142463][ T8162] Node 0 active_anon:60560kB inactive_anon:28kB active_file:588kB inactive_file:237224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123524kB dirty:252kB writeback:0kB shmem:32500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12816kB pagetables:5184kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 316.142539][ T8162] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 316.142600][ T8162] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.142667][ T8162] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 316.142710][ T8162] Node 0 DMA32 free:1232340kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:60560kB inactive_anon:28kB active_file:588kB inactive_file:237224kB unevictable:0kB writepending:252kB zspages:0kB present:3129332kB managed:2546548kB mlocked:0kB bounce:0kB free_pcp:57212kB local_pcp:33996kB free_cma:0kB [ 316.142780][ T8162] lowmem_reserve[]: 0 0 0 0 0 [ 316.142820][ T8162] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.142884][ T8162] lowmem_reserve[]: 0 0 0 0 0 [ 316.142924][ T8162] Node 1 Normal free:3943084kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 316.143020][ T8162] lowmem_reserve[]: 0 0 0 0 0 [ 316.143060][ T8162] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 316.143191][ T8162] Node 0 DMA32: 2223*4kB (UME) 1880*8kB (UM) 960*16kB (UM) 396*32kB (UME) 268*64kB (UME) 266*128kB (UM) 61*256kB (UM) 29*512kB (UME) 19*1024kB (UM) 7*2048kB (UME) 260*4096kB (UM) = 1232380kB [ 316.143401][ T8162] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 316.143542][ T8162] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 9*16kB (UM) 2*32kB (UM) 9*64kB (UM) 1*128kB (M) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (M) 961*4096kB (UM) = 3943084kB [ 316.143742][ T8162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.143762][ T8162] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 316.143781][ T8162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.143799][ T8162] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 316.275316][ C1] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 316.323077][ T8162] 67178 total pagecache pages [ 316.323121][ T8162] 2 pages in swap cache [ 316.323152][ T8162] Free swap = 124988kB [ 316.323203][ T8162] Total swap = 124996kB [ 316.323234][ T8162] 2097051 pages RAM [ 316.323255][ T8162] 0 pages HighMem/MovableOnly [ 316.323283][ T8162] 428798 pages reserved [ 316.323305][ T8162] 0 pages cma reserved [ 316.809390][ T8158] socket: no more sockets [ 316.893559][ T32] audit: type=1326 audit(1788263429.186:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.1.522" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bd9e159 code=0x7ffc0000 [ 316.893639][ T32] audit: type=1326 audit(1788263429.186:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.1.522" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bd9e159 code=0x7ffc0000 [ 316.893795][ T32] audit: type=1326 audit(1788263429.186:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.1.522" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bd9e159 code=0x7ffc0000 [ 316.893965][ T32] audit: type=1326 audit(1788263429.186:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.1.522" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77bd9e159 code=0x7ffc0000 [ 316.920760][ T8168] FAULT_INJECTION: forcing a failure. [ 316.920760][ T8168] name failslab, interval 1, probability 0, space 0, times 0 [ 316.920789][ T8168] CPU: 0 UID: 0 PID: 8168 Comm: syz.1.522 Not tainted syzkaller #0 PREEMPT(full) [ 316.920810][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 316.920821][ T8168] Call Trace: [ 316.920828][ T8168] [ 316.920836][ T8168] dump_stack_lvl+0xe8/0x150 [ 316.920868][ T8168] should_fail_ex+0x3eb/0x540 [ 316.920904][ T8168] should_failslab+0xa8/0x100 [ 316.920926][ T8168] ? audit_log_start+0x103/0xa10 [ 316.920952][ T8168] kmem_cache_alloc_noprof+0xa1/0x600 [ 316.920981][ T8168] ? auditd_test_task+0x22/0x280 [ 316.921004][ T8168] ? auditd_test_task+0x22/0x280 [ 316.921029][ T8168] ? audit_log_start+0x103/0xa10 [ 316.921058][ T8168] audit_log_start+0x103/0xa10 [ 316.921087][ T8168] ? __pfx_audit_log_start+0x10/0x10 [ 316.921114][ T8168] ? get_pid_task+0x20/0x1f0 [ 316.921133][ T8168] ? get_pid_task+0x20/0x1f0 [ 316.921148][ T8168] ? get_pid_task+0x20/0x1f0 [ 316.921173][ T8168] audit_seccomp+0x63/0x190 [ 316.921201][ T8168] __seccomp_filter+0xd14/0x1de0 [ 316.921233][ T8168] ? __pfx___seccomp_filter+0x10/0x10 [ 316.921255][ T8168] ? __mutex_unlock_slowpath+0x731/0x900 [ 316.921281][ T8168] ? __fget_files+0x2a/0x420 [ 316.921308][ T8168] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 316.921331][ T8168] ? __fget_files+0x3a2/0x420 [ 316.921362][ T8168] ? fput+0xa0/0xd0 [ 316.921393][ T8168] ? __pfx_ksys_write+0x10/0x10 [ 316.921426][ T8168] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 316.921452][ T8168] do_syscall_64+0x11f/0x520 [ 316.921475][ T8168] ? trace_irq_disable+0x3b/0x140 [ 316.921493][ T8168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.921512][ T8168] ? clear_bhb_loop+0x70/0xc0 [ 316.921535][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.921553][ T8168] RIP: 0033:0x7fb77bd9e159 [ 316.921572][ T8168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.921588][ T8168] RSP: 002b:00007fb77cc2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 316.921609][ T8168] RAX: ffffffffffffffda RBX: 00007fb77c025fa0 RCX: 00007fb77bd9e159 [ 316.921623][ T8168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.921633][ T8168] RBP: 00007fb77cc2b090 R08: 0000000000000000 R09: 0000000000000000 [ 316.921644][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.921656][ T8168] R13: 00007fb77c026038 R14: 00007fb77c025fa0 R15: 00007ffec754df08 [ 316.921685][ T8168] [ 316.928160][ T32] audit: type=1326 audit(1788263429.206:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.1.522" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb77bd5e98e code=0x7ffc0000 [ 316.928320][ T32] audit: type=1326 audit(1788263429.206:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.1.522" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb77bd5e98e code=0x7ffc0000 [ 317.023852][ T32] audit: type=1326 audit(1788263429.306:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.1.522" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb77bd5e98e code=0x7ffc0000 [ 317.023999][ T32] audit: type=1326 audit(1788263429.316:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.1.522" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb77bd5e98e code=0x7ffc0000 [ 317.035980][ T32] audit: type=1326 audit(1788263429.316:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.1.522" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb77bd5e98e code=0x7ffc0000 [ 317.041980][ T32] audit: type=1326 audit(1788263429.326:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.1.522" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb77bd5e98e code=0x7ffc0000 [ 317.139699][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.139853][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.693740][ T8170] sctp: [Deprecated]: syz.5.523 (pid 8170) Use of int in max_burst socket option deprecated. [ 317.693740][ T8170] Use struct sctp_assoc_value instead [ 317.826153][ T8159] loop0: detected capacity change from 0 to 32768 [ 317.852003][ T8159] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.519 (8159) [ 317.890058][ T8159] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 317.890113][ T8159] BTRFS info (device loop0): using crc32c checksum algorithm [ 318.055747][ T8159] BTRFS info (device loop0): enabling ssd optimizations [ 318.055794][ T8159] BTRFS info (device loop0): turning on async discard [ 318.055859][ T8159] BTRFS info (device loop0): enabling free space tree [ 319.645378][ T5616] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 320.209741][ T8205] ================================================================== [ 320.209763][ T8205] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340 [ 320.209807][ T8205] Read of size 8 at addr ffff88802b80bc18 by task syz.3.528/8205 [ 320.209828][ T8205] [ 320.209840][ T8205] CPU: 1 UID: 0 PID: 8205 Comm: syz.3.528 Not tainted syzkaller #0 PREEMPT(full) [ 320.209866][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.209881][ T8205] Call Trace: [ 320.209889][ T8205] [ 320.209899][ T8205] dump_stack_lvl+0xe8/0x150 [ 320.209934][ T8205] print_address_description+0x55/0x1e0 [ 320.209968][ T8205] ? dvb_device_open+0xc4/0x340 [ 320.210000][ T8205] print_report+0x58/0x70 [ 320.210029][ T8205] kasan_report+0x117/0x150 [ 320.210060][ T8205] ? dvb_device_open+0xc4/0x340 [ 320.210099][ T8205] dvb_device_open+0xc4/0x340 [ 320.210132][ T8205] ? do_raw_spin_unlock+0xf5/0x200 [ 320.210168][ T8205] chrdev_open+0x4d9/0x600 [ 320.210200][ T8205] ? __pfx_chrdev_open+0x10/0x10 [ 320.210226][ T8205] ? devcgroup_check_permission+0x31/0x8f0 [ 320.210265][ T8205] ? __pfx_chrdev_open+0x10/0x10 [ 320.210291][ T8205] do_dentry_open+0x80e/0x1360 [ 320.210324][ T8205] vfs_open_consume+0x4a/0x350 [ 320.210351][ T8205] ? path_openat+0x14c0/0x1e50 [ 320.210391][ T8205] path_openat+0x14dc/0x1e50 [ 320.210425][ T8205] do_file_open+0x23e/0x4a0 [ 320.210451][ T8205] ? __pfx_do_file_open+0x10/0x10 [ 320.210486][ T8205] ? _raw_spin_unlock+0x28/0x50 [ 320.210509][ T8205] ? alloc_fd+0x651/0x6c0 [ 320.210545][ T8205] do_sys_openat2+0x115/0x200 [ 320.210573][ T8205] ? __se_sys_futex+0x3a8/0x450 [ 320.210604][ T8205] ? __pfx_do_sys_openat2+0x10/0x10 [ 320.210633][ T8205] ? rcu_is_watching+0x16/0xb0 [ 320.210669][ T8205] __x64_sys_openat+0x138/0x170 [ 320.210702][ T8205] do_syscall_64+0x166/0x520 [ 320.210729][ T8205] ? trace_irq_disable+0x3b/0x140 [ 320.210752][ T8205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.210777][ T8205] ? clear_bhb_loop+0x70/0xc0 [ 320.210803][ T8205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.210826][ T8205] RIP: 0033:0x7ff0aef5e98e [ 320.210847][ T8205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 320.210868][ T8205] RSP: 002b:00007ff0acfbeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.210894][ T8205] RAX: ffffffffffffffda RBX: 00007ff0acfbf6c0 RCX: 00007ff0aef5e98e [ 320.210912][ T8205] RDX: 0000000000000002 RSI: 00007ff0acfbec00 RDI: ffffffffffffff9c [ 320.210929][ T8205] RBP: 00007ff0acfbec00 R08: 0000000000000000 R09: 0000000000000000 [ 320.210944][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 320.210960][ T8205] R13: 00007ff0af226128 R14: 00007ff0af226090 R15: 00007ffc187e1048 [ 320.210989][ T8205] [ 320.210997][ T8205] [ 320.211002][ T8205] Allocated by task 1: [ 320.211013][ T8205] kasan_save_track+0x3e/0x80 [ 320.211035][ T8205] __kasan_kmalloc+0x93/0xb0 [ 320.211058][ T8205] __kmalloc_cache_noprof+0x321/0x600 [ 320.211079][ T8205] dvb_register_device+0x309/0x1dd0 [ 320.211109][ T8205] dvb_register_frontend+0x603/0x900 [ 320.211137][ T8205] vidtv_bridge_probe+0x9d5/0xf60 [ 320.211160][ T8205] platform_probe+0xf9/0x190 [ 320.211182][ T8205] really_probe+0x254/0xae0 [ 320.211207][ T8205] __driver_probe_device+0x1e8/0x360 [ 320.211233][ T8205] driver_probe_device+0x4f/0x240 [ 320.211260][ T8205] __driver_attach+0x339/0x600 [ 320.211284][ T8205] bus_for_each_dev+0x23b/0x2c0 [ 320.211316][ T8205] bus_add_driver+0x345/0x670 [ 320.211348][ T8205] driver_register+0x23a/0x320 [ 320.211377][ T8205] vidtv_bridge_init+0x3d/0x60 [ 320.211396][ T8205] do_one_initcall+0x250/0x870 [ 320.211427][ T8205] do_initcall_level+0x10a/0x1a0 [ 320.211454][ T8205] do_initcalls+0x59/0xa0 [ 320.211479][ T8205] kernel_init_freeable+0x29d/0x3e0 [ 320.211507][ T8205] kernel_init+0x22/0x1d0 [ 320.211536][ T8205] ret_from_fork+0x514/0xb70 [ 320.211555][ T8205] ret_from_fork_asm+0x1a/0x30 [ 320.211588][ T8205] [ 320.211593][ T8205] Freed by task 7996: [ 320.211603][ T8205] kasan_save_track+0x3e/0x80 [ 320.211624][ T8205] kasan_save_free_info+0x40/0x50 [ 320.211661][ T8205] __kasan_slab_free+0x5c/0x80 [ 320.211684][ T8205] kfree+0x1c5/0x650 [ 320.211719][ T8205] dvb_device_open+0x2b8/0x340 [ 320.211750][ T8205] chrdev_open+0x4d9/0x600 [ 320.211772][ T8205] do_dentry_open+0x80e/0x1360 [ 320.211796][ T8205] vfs_open_consume+0x4a/0x350 [ 320.211820][ T8205] path_openat+0x14dc/0x1e50 [ 320.211840][ T8205] do_file_open+0x23e/0x4a0 [ 320.211858][ T8205] do_sys_openat2+0x115/0x200 [ 320.211883][ T8205] __x64_sys_openat+0x138/0x170 [ 320.211909][ T8205] do_syscall_64+0x166/0x520 [ 320.211934][ T8205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.211955][ T8205] [ 320.211960][ T8205] The buggy address belongs to the object at ffff88802b80bc00 [ 320.211960][ T8205] which belongs to the cache kmalloc-256 of size 256 [ 320.211981][ T8205] The buggy address is located 24 bytes inside of [ 320.211981][ T8205] freed 256-byte region [ffff88802b80bc00, ffff88802b80bd00) [ 320.212005][ T8205] [ 320.212011][ T8205] The buggy address belongs to the physical page: [ 320.212022][ T8205] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b80a [ 320.212042][ T8205] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 320.212060][ T8205] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 320.212081][ T8205] page_type: f5(slab) [ 320.212103][ T8205] raw: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122 [ 320.212123][ T8205] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 320.212146][ T8205] head: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122 [ 320.212166][ T8205] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 320.212187][ T8205] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 320.212208][ T8205] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 320.212221][ T8205] page dumped because: kasan: bad access detected [ 320.212241][ T8205] page_owner tracks the page as allocated [ 320.212249][ T8205] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17270548544 [ 320.212286][ T8205] post_alloc_hook+0x1f9/0x250 [ 320.212319][ T8205] get_page_from_freelist+0x2209/0x2280 [ 320.212342][ T8205] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 320.212365][ T8205] allocate_slab+0x7d/0x620 [ 320.212393][ T8205] refill_objects+0x2d5/0x350 [ 320.212420][ T8205] __pcs_replace_empty_main+0x2c8/0x6c0 [ 320.212447][ T8205] __kmalloc_cache_noprof+0x39b/0x600 [ 320.212468][ T8205] bus_add_driver+0x162/0x670 [ 320.212500][ T8205] driver_register+0x23a/0x320 [ 320.212528][ T8205] usb_register_driver+0x1e4/0x390 [ 320.212559][ T8205] do_one_initcall+0x250/0x870 [ 320.212589][ T8205] do_initcall_level+0x10a/0x1a0 [ 320.212616][ T8205] do_initcalls+0x59/0xa0 [ 320.212641][ T8205] kernel_init_freeable+0x29d/0x3e0 [ 320.212674][ T8205] kernel_init+0x22/0x1d0 [ 320.212703][ T8205] ret_from_fork+0x514/0xb70 [ 320.212721][ T8205] page_owner free stack trace missing [ 320.212730][ T8205] [ 320.212735][ T8205] Memory state around the buggy address: [ 320.212747][ T8205] ffff88802b80bb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 320.212764][ T8205] ffff88802b80bb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 320.212779][ T8205] >ffff88802b80bc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 320.212793][ T8205] ^ [ 320.212805][ T8205] ffff88802b80bc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 320.212821][ T8205] ffff88802b80bd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 320.212833][ T8205] ================================================================== [ 320.212943][ T8205] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 320.976240][ T8205] CPU: 1 UID: 0 PID: 8205 Comm: syz.3.528 Not tainted syzkaller #0 PREEMPT(full) [ 320.985475][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.995560][ T8205] Call Trace: [ 320.998872][ T8205] [ 321.001832][ T8205] vpanic+0x56d/0xa60 [ 321.005861][ T8205] ? __pfx_vpanic+0x10/0x10 [ 321.010407][ T8205] panic+0xc5/0xd0 [ 321.014169][ T8205] ? __pfx_panic+0x10/0x10 [ 321.018646][ T8205] ? dvb_device_open+0xc4/0x340 [ 321.023543][ T8205] ? dvb_device_open+0xc4/0x340 [ 321.028479][ T8205] check_panic_on_warn+0x89/0xb0 [ 321.033453][ T8205] ? dvb_device_open+0xc4/0x340 [ 321.038342][ T8205] end_report+0x73/0x170 [ 321.042629][ T8205] ? dvb_device_open+0xc4/0x340 [ 321.047545][ T8205] kasan_report+0x128/0x150 [ 321.052099][ T8205] ? dvb_device_open+0xc4/0x340 [ 321.057025][ T8205] dvb_device_open+0xc4/0x340 [ 321.061809][ T8205] ? do_raw_spin_unlock+0xf5/0x200 [ 321.066992][ T8205] chrdev_open+0x4d9/0x600 [ 321.071561][ T8205] ? __pfx_chrdev_open+0x10/0x10 [ 321.076746][ T8205] ? devcgroup_check_permission+0x31/0x8f0 [ 321.082614][ T8205] ? __pfx_chrdev_open+0x10/0x10 [ 321.087603][ T8205] do_dentry_open+0x80e/0x1360 [ 321.092412][ T8205] vfs_open_consume+0x4a/0x350 [ 321.097210][ T8205] ? path_openat+0x14c0/0x1e50 [ 321.102039][ T8205] path_openat+0x14dc/0x1e50 [ 321.106697][ T8205] do_file_open+0x23e/0x4a0 [ 321.111242][ T8205] ? __pfx_do_file_open+0x10/0x10 [ 321.116307][ T8205] ? _raw_spin_unlock+0x28/0x50 [ 321.121247][ T8205] ? alloc_fd+0x651/0x6c0 [ 321.125648][ T8205] do_sys_openat2+0x115/0x200 [ 321.130380][ T8205] ? __se_sys_futex+0x3a8/0x450 [ 321.135313][ T8205] ? __pfx_do_sys_openat2+0x10/0x10 [ 321.140554][ T8205] ? rcu_is_watching+0x16/0xb0 [ 321.145383][ T8205] __x64_sys_openat+0x138/0x170 [ 321.150360][ T8205] do_syscall_64+0x166/0x520 [ 321.155027][ T8205] ? trace_irq_disable+0x3b/0x140 [ 321.160115][ T8205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.166220][ T8205] ? clear_bhb_loop+0x70/0xc0 [ 321.170932][ T8205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.176854][ T8205] RIP: 0033:0x7ff0aef5e98e [ 321.181302][ T8205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 321.200947][ T8205] RSP: 002b:00007ff0acfbeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 321.209414][ T8205] RAX: ffffffffffffffda RBX: 00007ff0acfbf6c0 RCX: 00007ff0aef5e98e [ 321.217419][ T8205] RDX: 0000000000000002 RSI: 00007ff0acfbec00 RDI: ffffffffffffff9c [ 321.225425][ T8205] RBP: 00007ff0acfbec00 R08: 0000000000000000 R09: 0000000000000000 [ 321.233429][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 321.241435][ T8205] R13: 00007ff0af226128 R14: 00007ff0af226090 R15: 00007ffc187e1048 [ 321.249443][ T8205] [ 321.253092][ T8205] Kernel Offset: disabled [ 321.257441][ T8205] Rebooting in 86400 seconds..