last executing test programs: 30m3.91463937s ago: executing program 32 (id=593): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add', 0x3) 29m2.600038289s ago: executing program 33 (id=960): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) unshare(0x60040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x8400000) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000000)=0x3, 0x4ffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6000000000) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0x853}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3025941ba7fd6104000017998fa5e7338368bbc04933d767e42f001000010029bd7000fd", @ANYRES32=0x0, @ANYBLOB="251400000000010008001e00010000000800040001808000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = fcntl$dupfd(r1, 0x406, r1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) read$nci(r6, &(0x7f0000000280)=""/130, 0x82) r11 = syz_open_dev$vcsn(&(0x7f0000000140), 0x2d, 0xe000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f00000001c0)=0x4, 0x4) r12 = io_uring_setup(0x3005, &(0x7f0000000080)={0x0, 0xdb62, 0x80000, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r12, 0x1e, &(0x7f0000000100)={r5, 0x1, 0x10001, 0x1ff, 0x1}, 0x1) setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) 28m4.16371152s ago: executing program 34 (id=1124): socket(0xa, 0x3, 0xff) personality(0x5400004) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync_file_range(r0, 0xc, 0x2000000006, 0x6) 27m49.044870003s ago: executing program 35 (id=1174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x117b00, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdb, 0x0, 0x100000000}) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) r6 = syz_usb_connect(0x0, 0x3f9, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x310, 0x8, 0x8, 0x6, 0x8, 0x7}, 0x48, &(0x7f0000000240)=ANY=[@ANYBLOB="050f49000143100a5966770c94fe228fae93efdba6dc7f8e9c411b282f4752db6ebb8c99d8128bd67137daca6363029337997030da52d6e6258dd85982bb9aa93cb9790c1da7bb3f5c6c04151fff72e0bd0a"]}) syz_usb_ep_read(r6, 0x2, 0x64, &(0x7f0000000ec0)=""/100) 27m45.299266503s ago: executing program 36 (id=1190): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8383, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x421081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001a00010028bd70000000000002208000ff0000010002000008000100e0000001080002000a010100ed69994d36bed985548b58d4593ce47a89e0ecff47b5aff08cf8155b6888beb9066bfe0dc429895ce43d56414f8424cb49164ae96cb8299fcba67b64c32b08d5ef52c082070b6105cd17f22e2611111a8ce6d96cabb577ee4952ad05067a783c0daf06422e31eba51524a771dd13838dcef16e8ba2b3299bedb5764006b1b85b167f48474444cc5add270b19275d006ef3d55d2836482fe3397e2980fdaeed64e6c617562c65c5867a2147e68aabbb4a259f8e80ebc47234ae5519ad57b2b0484bbffab488bc7d0005"], 0x2c}, 0x1, 0x0, 0x0, 0x7de8dd1fd72df44c}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000040000006fd274b306000000000000000000000f00000000000010", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r6, &(0x7f00000004c0)="0016f298921b7ea28dd594ddcdfc2ffebaadbb3e3ad956ba72c5f60d32e32d9adf960d6bdac46be5643006ed47bed4248f2f137ddc3dbb8d3bfa314a658dceadde2ad06723129fcb77917a8224094ae085c3e77f9c417279087e42d8c7df5d18d380e905f50df1e519c8429cef4765750e12303872d4257adda798f78491166a9fcb9414d2519e8760d15d1d8f71e78d9313c971f50468c1ed87a599d8b1077838bf2c4154a631b05bb63b9160f7d266a80199fb39706a837e0333aabb7660c1ab96db039ac3da3e9f66d95fe6c71a1a543a0d5a63aa3da6d614a00471d1c1ca6246d8c3b32e69fb5ecd7147e5d74718e6b2e310", &(0x7f00000005c0)=@udp=r3, 0x1}, 0x20) io_uring_enter(r5, 0x555a, 0xba9f, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfc) unshare(0x22020400) read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, 0x0) 27m44.323234951s ago: executing program 37 (id=1193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, r0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f00000001c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 27m42.093008055s ago: executing program 38 (id=1200): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xffffbffb}, 0x1c, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0xb8}, 0x3400c8d4) 25m57.392818348s ago: executing program 39 (id=1506): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000140)={0xffffffffffffffff, 0x3, 0x1587, 0x7, 0x8000}) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000180)=@nullb, &(0x7f00000001c0)='./proc_mnt/kcore\x00', &(0x7f0000000280)='romfs\x00', 0x1000, &(0x7f0000000300)='\x00') mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000340)='ecryptfs\x00', 0x10000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=', 0x22) r3 = signalfd(r0, &(0x7f00000003c0)={[0x1]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000edceb2637b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000b99e000040000000"], &(0x7f0000000440)='syzkaller\x00', 0x2, 0x15, &(0x7f0000000480)=""/21, 0x41100, 0x1c, '\x00', r4, 0x0, r2, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xf, 0x7, 0x400}, 0x10, 0x1b107, r1, 0x0, &(0x7f0000000580)=[r1, r1], 0x0, 0x10, 0xc}, 0x94) move_mount(r1, &(0x7f0000000400)='./proc/mtrr\x00', r3, &(0x7f0000000680)='./proc_mnt\x00', 0x246) readv(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/45, 0xfdef}, {0x0, 0x4000}], 0x2) 25m47.425044178s ago: executing program 40 (id=1568): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf251b00000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x2010008, &(0x7f0000000100), 0xff, 0x556, &(0x7f00000003c0)="$eJzs3c9vHFcdAPDvrL2OnTi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQTM7G6f2rL1JN7u1/flIk3lvfn3f2/jNzuw8vQngzHo2Il6LiPfTNH0hIuaK5ZViik53yrZ7997bK9mURJq+8Y8kkmJZtlmapmnvmBeK3aYj4htfi/h28kDA6WK+u3djudlsbBXZenvjZn17d+/K+sbyWmOtsbm4uPDy0itLLy1dHUo9L0bEq1/5yw+/9/Ovvvrrz7/152t/u/ydrFizxfpePR7B5FEru1Wvnps+sMPWIwb7KMrqU32vyMwMts/tx1kgAAD6yq7xPxYRn4mIF2IuJo6+nAUAAABOoPRLs/Fe0n1+V2Kqz3IAAADgBKnkfWCTSq3oCzAblUqt1u3D+4k4X2m2ttufu97a2Vzt9pWdj2rl+nqzcbXoKzwf1STLL+Tp/fyL3Xy2S55fjIgnI+IHczN5vrbSaq6O+8cPAAAAOCMuHLj///dc9/7/aMloCgcAAAAMz/xDbGt4AAAAADiZHub+HwAAADhxquMuAAAAAPDYff3117Mp7b3/evXN3Z0brTevrDa2b9Q2dlZqK62tm7W1VmstH7Nv47jjNVutm1+IzZ1b9XZju12/uLt3baO1s9m+th7TI6kQAAAAcMiTn77zxyQiOl+cyafM1LgLBYzE/nAevTE9S1r/n57ozt8ZUaGAkZgYYJt3zpUvd50AJ9uh4bz6tHXg9NH/HzjujR59O+/8rjurDLk8AADA8F36VPnz/+Ov5zsu+eGE04jh7Drw/D+dG1dBgJHLn/8P2pHHxQKcKtWBegACp9mHff5/vDR9qAIBAABDN5tPSaVW/Lw3G5VKrRZxMX8tYDW5vt5sXI2IJyLiD3PVc1l+Id8zOfaeAQAAAAAAAAAAAAAAAAAAAAAAAADoStMkUgAAAOBUi6j8NflNdyz/S3PPzx78fWAq+W/+SuCpiHjrJ2/86NZyu721kC3/5/3l7R8Xy18cxy8YAAAAwEG9+/R8/p9xlwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0+bde2+v9KYBNp8ZVty/fzki5sviT8Z0Pp+OakSc/1cSkw/sl0TExBDid25HxCfL4idZse6HLIs/jA+hczvppLnS+DFffApl8S8MIT6cZXey889rZe2/Es/m8277m4kPtr/JiA/kH1X/81/cP/9N9Gn/FweM8dTdX9b7xr8d8dRk+fmvFz/pE/+5gaJX41vf3Nvrtzb9acSl3vdPfsZ7MMJ+qt7euFnf3t27sr6xvNZYa2wuLi68vPTK0ktLV+vX15uN4t/SGN9/+lfvH1X/86Xff0lRmv71f77keBMl5f/f3Vv3Pt7LdA7Hv/xcSfzf/qzY4nD8ShHns0U6W3+pl+500w965he/f+ao+q/u17/6MP//l/sd9KBDDeXpwf50AIDHYnt378Zys9nYOrWJ7C59lEHTGNoBp+Ij8hme1sR3s8TdYR0wTdM0a1Mlq+5ExCDHSWLINa2Ul2c/0fcMMO4zEwAAMGz7F/3jLgkAAAAAAAAAAAAAAAAAAACcXaMYZe1gzP0hkJNhDKENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAU/w8AAP//+yvbNQ==") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 25m11.310369223s ago: executing program 41 (id=1634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) (fail_nth: 2) 24m36.433662885s ago: executing program 42 (id=1710): syz_usb_connect$hid(0xf467dc96e532133b, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x6, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xe1}}}}}]}}]}}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 20m50.874821139s ago: executing program 43 (id=2389): r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x3b, 0x111000) ppoll(&(0x7f0000000140)=[{r0, 0x218}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0xa3d4]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002240)={0x2020}, 0x2020) 19m0.117537598s ago: executing program 44 (id=2693): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x9, 0x1) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@nodecompose}, {}, {@gid}, {@nls={'nls', 0x3d, 'cp949'}}, {@force}]}, 0x1, 0x5e6, &(0x7f0000002f80)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) sendfile(r0, r2, 0x0, 0x2000fb) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) mount$afs(&(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x14800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a300000000014000580080001"], 0xe8}}, 0x0) 18m51.542464425s ago: executing program 45 (id=2686): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/45, 0xfdef}, {0x0, 0x4000}], 0x2) (fail_nth: 6) 18m18.572264179s ago: executing program 46 (id=2761): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add', 0x3) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add', 0x3) 14m50.854177139s ago: executing program 47 (id=3345): r0 = syz_mount_image$cramfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x20004c0, &(0x7f00000001c0)=ANY=[], 0x21, 0x15e, &(0x7f0000000400)="$eJzs0E+LEmEcwPHv0/gnM/FSYEEmdJHEsgk7FeREgpAJhZeuOYKhKEngKUeiW7euHfoD7UV8Cy7uXnZRWPa8L2AvnmVZlmd5nHFPvoTfB0T4zo/f88y8frHIkoGvSdZedTu9z26/7zYy72rV8vvT6bQUAcxvZf66nd6F1tptmOkhuyX4dPIlQcDkvQQ0W2330cduuxGGZQmygBPnZTMGsWD2hmm3/NknaK01ZB8Qnd32mw0sR+vGpj0N2t0QOEm/FQD9h+tmpxMFWm03Gpwx+HWmtX47P6jkH/6/Z/G9krsfDp6N8Xva/WGX7/y7mbKou/t/cZQGC8gfPZ6Mjxfz6pvaCLDtZwq8QhEPKkVPaz00ez4oUOQm40N/X4RUOlSHbwp+KnOH5/H1gbPfq9q5eU1vx7+BlQE1sDYfT7HVte1ZCCGEEEIIIYQQQgghhBBCCCGEuHIZAAD//4xFYDc=") r1 = getuid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x278, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xff0000ff, 0xff000000], 'ip6gretap0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x16, 0xf, 0x9, 0x60}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x1, 0x1}, {0xffffffffffffffff, 0x6, 0x7}, {0x0, 0x1, 0x4}, 0x1, 0xfffffffa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000016c0)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000017c0)=0xe8) statx(0xffffffffffffffff, &(0x7f0000001800)='./file0\x00', 0x37ca4a9fa17161ed, 0x1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001940)={0x0}, &(0x7f0000001980)=0xc) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r10, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000300)="353d9f8af571491312503e93b93a5849745d2db64d688aa1f7ad7f22588e97", 0x1f}], 0x1, &(0x7f0000000380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x48, 0x1}}], 0x1, 0x20000000) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000019c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000001ac0)=0xe8) r13 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r13, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @value64=0x110c230040}}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r16 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x482205, 0x0) write$evdev(r16, &(0x7f00000001c0)=[{{r14, r15/1000+60000}, 0x5, 0x2, 0x3}, {{0x0, 0x2710}, 0x16, 0x6, 0x400}], 0x30) r17 = fcntl$getown(r2, 0x9) newfstatat(0xffffffffffffff9c, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000000c0)="cf8c180e47395f5db4e083939b97b651f0eb45f922e03a7b50a896cf69c8b28ac31b241862cf11ae9abb42ffc03ae595bb559485897ed4d460e717c8f5bf636c3435a53120dd44d971f1c98f5da9a4c835a19b716f5cdf286c165e4e8e0ee5b5759aa60e36f7a18443afd713383c283ea0277d1bcfac2a2c49c2f8914c0b160d6664676add6a87aace7ce1721b7bde6bb03936fc65e874d12c7d6f6bc853b698f70734ac7a69784ca6b54ba52982ce1e2e0543ddf1d806cafb4848597de753de1821aa9b6ecc75ef26", 0xc9}, {&(0x7f00000001c0)="17957c32d4d0132e5cfec00b2248fb1595e4e1958c45c3b280c8669e88ca89bfd877ae4fd21709b64842c5c2ba91fb29f585efd9db69240de65514c57d162e", 0x3f}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="f71d52befcc90dd09737a59a5101971977140d64c25681f57541bd52ee9eef137daf391f48f19e80a880a3b28b3aa016604bddf5e5a61d162797fabfdd9db2c69e5576306d23de031e348b3481794af23449866e", 0x54}], 0x4, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {r3, r1, r4}}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r1, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r13, r0, r16]}}, @cred={{0x1c, 0x1, 0x2, {r17, r1, r18}}}], 0x100, 0x20008000}, 0x4008001) write(r2, &(0x7f0000000080)="520003000100b8", 0x7) setuid(r1) 14m33.177535795s ago: executing program 48 (id=3354): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 14m17.288897837s ago: executing program 49 (id=3381): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015082d5281b08c00901024ffa0102030109021200013daea0020904"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x28, 0x499, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x1, 0xd0, 0xd5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x13c, 0x2a}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x6, 0xf9, 0x4, 0x0, 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x0, "6d7eb9"}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x3, 0x81, "d8f0f1e8f1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x4d, 0xb, {0x7, 0x25, 0x1, 0x8, 0x0, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x8, 0xb7, {0x7, 0x25, 0x1, 0x0, 0x7, 0x3}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x0, 0x4, 0x0, 0x40, 0x1}, 0x34, &(0x7f0000000400)={0x5, 0xf, 0x34, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0xd, 0x5}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x9, 0x2}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "cc49cc477025310cf7f262643db5784f"}]}, 0x3, [{0x61, &(0x7f0000000440)=@string={0x61, 0x3, "634bffc1b724be42910a200828e4b258e90ecacdf7e0e4b32a64ac133bad6d0736037d8a3b5eebd07a271fee9e79247e3177cc66c05733336774b6e936320d4c02ec802cf9f62cbd87c64e5ba0649171e2f476b6366dff6ea981f2df60c5ed"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x430}}, {0xc, &(0x7f0000000500)=@string={0xc, 0x3, "47e771a8257f9b5e4d63"}}]}) listen(r1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r1, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x10, &(0x7f0000000100)={0x20, 0x14, 0x1, '_'}, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r3, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/45, 0x2d}], 0x1) 13m38.129862198s ago: executing program 50 (id=3404): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'veth0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xe) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002000010025bd7000000000000a00000008001600", @ANYRES32=0x0, @ANYBLOB="180017"], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 13m37.118500453s ago: executing program 51 (id=3451): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xd0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x7, 0xe}}]}}}]}}]}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500030020"}) syz_usb_control_io$hid(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7190000e60080b8785d960001000000000200f903000000a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03daa0f4bd00", [0x2, 0x9]}}) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000b40)='\x1f%\x00', 0x3) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150025ff0900a11e0901a1006d08950109309102c0c0"], 0x0}, 0x0) r4 = syz_usb_connect$cdc_ncm(0x4, 0xa3, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x2, 0x1, 0x3c, 0x10, 0x80, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "f43a"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x4b9, 0x7ff, 0x7, 0xf}, {0x6, 0x24, 0x1a, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x988, 0x9}, @acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0x28, 0x24, 0x13, 0x4, "103bd415e28ddae129dd40a940e427d21cf9b879403074bc0df9b8d72723030266227bbd"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xe, 0x81, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x460, 0x3, 0x95, 0x1}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x0, 0xb, 0x5a, 0x30, 0xfb}, 0x127, &(0x7f00000001c0)={0x5, 0xf, 0x127, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x4, 0x8}, @generic={0x5f, 0x10, 0x3, "83879a8bc281c8395a778835e5e05f80cdb95ac7f977f3f451575ff718d3271e63043f14916cd44bd0a5d4a69ed152c587999d52a6e7a4aac2713dcc140ac1289a2849f07b50f2a8ac97587109d874c4f800d9e36bfff9f8fb5e69ca"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x6, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa8, 0x2, 0x400}, @generic={0xa5, 0x10, 0x2, "4fc9a979437a12b665d7f2e05d92a1277d5e53609d2e5f6d9a948e7cd5f13ea267944ab30b6e387df3cf53d2b650e1c3805754cc29498c71eecbd5b363fb41303c2c1aa559ea41bb3e27fe9e263f7f6f3a6422ed4be40b6742e1fa534f8269d74a5d037af37d407c5c0a60e01e7a981a99fa6ad1650edef01af861d0d3e4c554a7aeaa7c55cbf384400b636b9d2c4b133213db092dbbabd386a616458817ce4fa42a"}]}, 0x8, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4b, &(0x7f0000000400)=@string={0x4b, 0x3, "21e7ecac4db9cb84aa1678b362c96bd147697db4135cc08c1a5c11c3680152d9c40d6806965099845e4930ad5d8a6b73fae2c9a5c1d32b9ff8fdd29c761f07f1cf4e70c2194f639635"}}, {0x6a, &(0x7f0000000480)=@string={0x6a, 0x3, "b780479c3a1fec35c6584f900df548dae779c2b6b5949d4bf0ed50aa857e3ee23d2b3931ceb2aaa75d8247c7fb504f635eb7f60c12ee9dc044de0adeae84b9d77115fd20f056a4e29e77c110e34deeb8c97de130059258db459ff4f4dda992c5aeffb18a4dca9603"}}, {0xe1, &(0x7f0000000500)=@string={0xe1, 0x3, "eafe58a618c9d0e8a6477e30bfb44a56fcdfd76871e37ff5f736d01682d68c5c44bb2bf7869408e1ae62cb5a0d46bb8ca2039700ef32d2a8a0478f12d3e06ed55006608f2a357298d7002502b2807d5e67ab42d0b66fe9a4aa1dd18cac3a993d05dd712b56bdbc28a66196873a7b23905a71a22f3c4c227f98b307d7e816201dfb9cd79401352ee437afddb082fbc5c741ed4ded68c7b38927bf799a8d145c970f0e67427ab07ca60505bf54dcd528d84c2467db8c5b2507e36b7d57f5cd264482cd261c7b56e42596e745f01f83631faaf82f26e171f86d175415dd5377a3"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000800)={0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000840)={0x20, 0x13, 0xb6, "1a234b9fe239f53a4dfbd8fef9d3d1ebcd527213d260f2aac38b43850f621f5558936e4a392533c97fdf9f00dc4286da026c78ad75d5494fdd92f22ff85960c2db3067873a951b048404ad5f33353d41e8ffb537c2790917a5b32511b004731ada9275d4ebc10dac2cf05b4560ab379b866a73bcd891a0da7246734ec143ad0d40480d37f35986f34fc7b3fbaa34f0e7463f9bd7bc204c820f56a32755e405345ba8fb32f32678d58c70a00d787044212d2c8ea1853e"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x6, 0x401, 0x6, 0x8, 0x7f, 0xa, 0x3, 0x9f14, 0x100, 0x1}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000a00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000a80)={0x20, 0x89, 0x2}}) 10m43.128430224s ago: executing program 8 (id=3781): unshare(0x20400) 10m42.860250991s ago: executing program 8 (id=3782): connect$inet6(0xffffffffffffffff, &(0x7f0000002180)={0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x9}, 0x1c) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x88181, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) fsetxattr$trusted_overlay_opaque(r1, 0x0, 0x0, 0x0, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r2, 0x0, 0x2, 0x0) readahead(r0, 0x10000, 0x8000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) 10m41.619375489s ago: executing program 8 (id=3790): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 10m40.466108264s ago: executing program 8 (id=3794): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 10m40.161003033s ago: executing program 8 (id=3797): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x104419, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0xffffffffffffffff, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) 10m37.812415214s ago: executing program 8 (id=3808): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpeername(r0, 0x0, 0x0) 10m36.624442155s ago: executing program 52 (id=3808): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpeername(r0, 0x0, 0x0) 10m30.476102237s ago: executing program 0 (id=3836): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x25b, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x10a}]}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x4, 0x1, {0x3, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008050}, 0x4000010) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r3, &(0x7f0000000a80), 0x0}, 0x20) r10 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) 10m24.952515534s ago: executing program 0 (id=3838): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000240)={0x40, 0x18, 0x3, 'Aq3'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x40, 0x21, 0xb2, {0xb2, 0x10, "37b2157824264d962b35ee8619d5569f9b617dc82c0db37a07f251353b950a171acda220192230a968c5cca4efe23b533fd175aba114b3e99751ae6bfa6bd5572cdcdcece8f115464a63785d7fc3b8f87042ae1aba4d7c2fcd9b3c3e18ed57d7bbaec7cab742838ff16db8888708ce5efe87525348efc88c87b0d27c3dd7f4e2f9cc099028de736651ea07bb0e151492e45ddd2a374d25118f7e035c3e0ebc2e16b7b5dff2026e62edcf53b8206c72c5"}}, &(0x7f0000000180)={0x0, 0x3, 0x76, @string={0x76, 0x3, "13b5167623d108dd55a3a919ce6e29848a68b8f6d1b99c10bcef85da044ed85fef13fbb9349b7ca9af41db9f41fe567d585777a2a685b7261fa6da0008f6f208aad62015a5eb01478cd90d1156bc561a1d65b0f6895edc3b9ed1452ee3b52498d165d53aa5da53a7548a1a694410732a3ca872c1"}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0xe, 0xed, "ec7c21e4661072eaa730c8b9b85b7b16245a07e7d8f49a62ee7e61e64cfd9aea87ea2f03a1aedae03ec9976a7d93bc24298d109999ab62361504d8a94035b77870e5ba8582679fc7177612291b451e3c49158e8930bdfb4f1f24d756fc9e4279c619bfb02ee57ba39c09a60f88a83f05a6203c0ee594290a41f1ffefa027aa6268b79a0343c468f35938647ed21a593df68006b21c657728f97879b914f7af667fb49d4cd0e837bd70af9f5dd2ba90357bc21ff5595c66f3d28f15f34f604506a3a4af4210da9f47a08cdcf572fcc86e2089c9fadfeebf18eeec7e4d869426ee3f4989e6761190b53616e9d214"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xd5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x38}, &(0x7f0000000400)={0xc0, 0x5, 0x4, "5ad305a4"}, &(0x7f0000000440)={0x40, 0x5, 0x4, "51135e5c"}}) 10m20.695552801s ago: executing program 0 (id=3843): r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r12) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4890) ioctl$SIOCSIFHWADDR(r12, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10m17.129207737s ago: executing program 0 (id=3850): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m14.68534644s ago: executing program 0 (id=3854): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000240)={0x40, 0x18, 0x3, 'Aq3'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x40, 0x21, 0xb2, {0xb2, 0x10, "37b2157824264d962b35ee8619d5569f9b617dc82c0db37a07f251353b950a171acda220192230a968c5cca4efe23b533fd175aba114b3e99751ae6bfa6bd5572cdcdcece8f115464a63785d7fc3b8f87042ae1aba4d7c2fcd9b3c3e18ed57d7bbaec7cab742838ff16db8888708ce5efe87525348efc88c87b0d27c3dd7f4e2f9cc099028de736651ea07bb0e151492e45ddd2a374d25118f7e035c3e0ebc2e16b7b5dff2026e62edcf53b8206c72c5"}}, &(0x7f0000000180)={0x0, 0x3, 0x76, @string={0x76, 0x3, "13b5167623d108dd55a3a919ce6e29848a68b8f6d1b99c10bcef85da044ed85fef13fbb9349b7ca9af41db9f41fe567d585777a2a685b7261fa6da0008f6f208aad62015a5eb01478cd90d1156bc561a1d65b0f6895edc3b9ed1452ee3b52498d165d53aa5da53a7548a1a694410732a3ca872c1"}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0xe, 0xed, "ec7c21e4661072eaa730c8b9b85b7b16245a07e7d8f49a62ee7e61e64cfd9aea87ea2f03a1aedae03ec9976a7d93bc24298d109999ab62361504d8a94035b77870e5ba8582679fc7177612291b451e3c49158e8930bdfb4f1f24d756fc9e4279c619bfb02ee57ba39c09a60f88a83f05a6203c0ee594290a41f1ffefa027aa6268b79a0343c468f35938647ed21a593df68006b21c657728f97879b914f7af667fb49d4cd0e837bd70af9f5dd2ba90357bc21ff5595c66f3d28f15f34f604506a3a4af4210da9f47a08cdcf572fcc86e2089c9fadfeebf18eeec7e4d869426ee3f4989e6761190b53616e9d214"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xd5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x38}, &(0x7f0000000400)={0xc0, 0x5, 0x4, "5ad305a4"}, &(0x7f0000000440)={0x40, 0x5, 0x4, "51135e5c"}}) 10m10.704579994s ago: executing program 0 (id=3857): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) socket(0x848000000015, 0x805, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x10}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) close(0x3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r8, 0x0, r8}, 0x5) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r4, 0x0, 0x0, 0xc, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m53.099406427s ago: executing program 53 (id=3857): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) socket(0x848000000015, 0x805, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x10}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) close(0x3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r8, 0x0, r8}, 0x5) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r4, 0x0, 0x0, 0xc, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m21.929591695s ago: executing program 7 (id=4008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000ac0)="06", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {0x0, 0x4000}], 0x2}}], 0x2, 0x14) socket(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 8m20.668494691s ago: executing program 7 (id=4009): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/dir1\x00', &(0x7f0000000100)=@raw={0x80, 0x0, {'\x00'}}, &(0x7f0000000200), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\x00\xa12\x00\x00\x00\x00\x00\x00\x00\x00\xb5\x9a\xa9\xe9=\xed\x00\x00\x00\x00\x00\x00\x91', &(0x7f0000000200)='\x95\x02\xcaxyy\xa9\x00\x00\x00\x00\x00\x00\x00\x00r\xb6\xe7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 8m14.400383902s ago: executing program 7 (id=4021): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) socket(0x848000000015, 0x805, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x10}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) close(0x3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r9, r7, 0x0, r7}, 0x5) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m9.010552051s ago: executing program 7 (id=4031): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x53, 0x0}) unshare(0x26020480) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0x6272, &(0x7f0000007300)="$eJzs3c2OHFfZB/Cn+ms+8saxsojyWghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmRhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTT7rGd7uqZ8/tJk6qnTtX0qfy73N1TVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6uIuPzztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeD0iPj4Wce/+7fVm0bkD9uM7f/zbb3/41Pf/+vvh6X//6Wb/jUnr3br1q3/9+c7j7y8AAACUqK7rukof80+kz/e9rjsFAMxFfv2vk7xcvXD15oL1R61Wq9WHsG6r93enXUTEZnub5j2D0/EAcMhsxiddd4EOyb9og4h4qutOAAut6roDzMS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PSdJrxa0zm9fzain48O6E/K3PqwyLJ+ffG87+80z5K6806/3mZlP9o59an4uT8++P5jzk6+ff2zb9UOf/BI+Xflz8AAAAAACyw/Pf/4x2f/1168l05kIed/12bUx8AAAAAAAAA4LP2pOP/7aqM/wcAAACLqvms3vj1sQfLJn0XW7P8UhXx9Nj6QGHSzTKrXfcDAAAAAAAAAAAAAEoy2LmG91IVMYyIp1dX67puftrG60f1pNsfdqXvP5QsDbAPAAAd+/jY2L38VcRyRFxK3/U3XF1drevlldV6tV5Zyu9nR0vL9Urrc22eNsuWRgd4QzwY1c0vW25t1zbt8/K09vHf1zzWqO4foGPz0WHgABARO69G97wiHTF1/Ux0/S6Hw8Hxf/Q4/jmIrp+nAAAAwOzVdV1X6eu8T6Rz/r2uOwUAzEV+/R8/L6BWq9Vqtfro1W31/u60i4jYbG/TvGcwHD8AHDKb8UnXXaBD8i/aICKe77oTwEKruu4AM3Hv/u31KuVbtV8P0vju+VqQPflvVtvb5e33m04zfo3JrJ5fm2P1VvTj2Qn9eW5GfVhkOf/eeP6Xd9pHab1Z5z8vk/Jv9vN4B/3pWs6/P57/mKOTf2/f/EuV8x88Uv59+QMAAAAAwALLf/8/vlDnf0ePuztTPez879rMHhUAAAAAAAAAZuve/dvr+b7XfP7/c/us5/7PoynnX8m/SDn/dP//7oU3L4+t12/N3337Qf7/vH97/Xc3//H/eXrQ/JfyTJWeWVV6RlTpkapBmj7mjk2wNeyPmkcaVr3+IF3zUw/fjatxLTbizJ51e+l4eNB+dk9709Phdnvd32k/t6d9sNuetz+/p32YrnSqV3L7qViPn8S1eGe7vWlbmrL/y1Pa6yntOf++479IOf9B66fJfzW1V2PTxt2Pev9z3Len+z3OW1c//8szs9+dqbaiv7tvbc3+vdhBf7b/nzw1ip/d2Lh+6taVmzevn4002bP0XKTJZyznP0w/Of+XX9ppz//ut4/Xux+NHjn/RbEVg4n5v9Sab/b3lTn3rQs5/1H6yfm/k9r3P/4Pc/6Tj/9XO+gPAAAAAAAAAAAAAAAAPExd19u3iL4VERfS/T9d3ZsJAMxXfv2vk7x8XnX/cbf/w9796Kr/avWc62rB+jPX+tN6sfqjXsj6PwvWn4Wr2+r9vdkuIuIv7W2a9wy/2O+XAQCL7NOI+HvXnaAz8i9Y/r6/Znqy684Ac3Xjgw9/dOXatY3rN7ruCQAAAAAAAADwuPL4n2ut8Z9P1nV9Z2y9PeO/vh1rTzr+5yDP7A4wOmGg6v6j79PDbPVG/V5ruPEXYtL438PduYeN/z2Y8njDKe2jKe1LU9qXp7Tve6NHS87/hdZ45ycj4sTY8OsljP86PuZ9CXL+L7aez03+Xxpbr51//ZvDnH9vT/6nb77/09M3PvjwtavvX3lv472NH58/e/bM+QsXLl68ePrdq9c2zuz8t8Mez1bOP4997TrQsuT8c+byL0vO/wupln9Zcv5fTLX8y5Lzz+/35F+WnH/+7CP/suT8X0m1/MuS8/9yquVflpz/q6mWf1ly/l9JtfzLkvN/LdXyL0vO/1Sq5V+WnP/pVB8w/5VZ94v5yPnnM1yO/7Lk/POVDfIvS87/XKrlX5ac//lUy78sOf/XUy3/suT8v5pq+Zcl538h1fIvS87/a6mWf1ly/hdTLf+y5Py/nmr5lyXn/41Uy78sOf83Ui3/suT8v5lq+Zcl5/+tVMu/LDn/b6da/mXJ+b+ZavmX5cH3/5sxY8ZMnun6XyYAAAAAAAAAAAAAYNw8Lifueh8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+yAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs3VuMXHd9B/Aze/PagcRASJ3UhI1jQkg22bWd+ELrYsK14VYSQqEXbNe7Ngu+4bVLoFHtKFAiYVRU0TY8tAWE2rxUWBUPtAKUB9SqUiVoH+gLokLlIaoCCkhVaQXZas75//87Mzs7s+sd786c8/lI8c87c2bOmTNnZvfrzXcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI1ue8Psp2pZltVqteKCrVn2ovrcPLE1v+S1G7t9AAAAwNr9Iv/z+RvSBYdWcKOGZf7p1m9/dWFhYSF73/Cfjn5uYSFdMZFlo5uyLL8uuvKD99calwmeyMZrQw1fD3VZ/XCX60e6XD/a5fqxLtdv6nL9eJfrl+yAJTZntXRnO/O/bi12aXZjNppft7PNrZ6obRqq77t026yW32Zh9Hg2l53MZrPppuWLZWv58l+/rb6ut2ZxXUMN69peP0J+8tixuA21sI93Nq1r8T6jH70+m/jpTx479tfnn7u53ey6G5rur9jOO3fUt/MT4ZJiW2vZprRP4nYONWzn9jbPyXDTdtby29X/3rqdz69wO4cXN3NdtT7n49lQ/vfv5PtppJa12U/bw2U/uz3LskuLm926zJJ1ZUPZlqZLhhafn/HiiKzfR/1Qemk2sqrj9LYVHKf1ObOz+ThtfU3E5/+2cLuRZbah8Wn60eNjDc/7zxeu5jiN6o96uddK6zHY69dKvxyD8bj4Tv6gn2x7DO4Mj/+xO5Y/BtseO22OwfS4G47BHd2OwaGx4Xyb05NQy2+zeAzualp+OF9TLZ/P3tH5GJw6f+rs1PzHPn7P3KmjJ2ZPzJ7es2vX9J69e/fv3z91fO7k7HTx51Xu7f63JRtKr4EdYd/F18CrW5ZtPFQXvji25P33al+H4x1eh1tblu3163Ck9cHV1ucFufSYLl4b76nv9PHLQ9kyr7H8+blr7a/D9LgbXocjDa/Dtt9T2rwOR1bwOqwvc/aulf3MMtLwX7ttWP57wdqOwa0Nx2DrzyOtx2Cvfx7pl2NwPBwX37tr+e8F28P2Pjm52p9Hhpccg+nhhvee+iXp5/3x/flod1zeUr/iurHswvzsuXsfPXr+/LldWRjr4mUNx0rr8bql4TFlS47XoVUfr4fmbn3yljaXbw37avye+h/jyz5X9WXuu7fzc5V/d2u/P5su3Z2F0WPrvT/bfTev78+xLPv8tx5/6BuPff4Ny+7Pet78xNTafxZPubTh/Xd0mfffmPtfKNaX7uqJ4dGR4vU7nPbOaNP7cfNTNZK/d9XydT8/tbL349Hw33q/H9/Y4f14W8uyvX4/Hm19cPH9uNbtXzvWpvX5HA/Hycnpzu/H9WW27V7tMTnS8f349jBrYf+/JiSFlIsajp3ljtu0rpGR0fC4RuIamo/TPU3Lj4ZsVl/X07uv7ji98/bivobTo1u0XsfpRMuyvT5O0799LXec1rr969vVaX0+x8NxceOezsdpfZln7lv7e+fm+NeG986xbsfg6PBYfZtH00GYv99nC5vjMXhvdiw7k53MZvJrx/LjqZava/L+lR2DY+G/9X6v3NbhGLyzZdleH4Pp+9hyx15tZOmD74HW53M8HBdP3d/5GKwv88Z9vf3Z9c5wSVqm4WfX1n9fW+7fvG5p2U3X6lgZCdv5rX2d/222vszJ/avNmZ33093hkuva7KfW1+9yr6mZbH3207awnc/tX34/1benvsznDqzweDqUZdnFjzyQ/3tv+P3K31347lebfu/S7nc6Fz/ywI9ffPwfV7P9AAy+F4qxpfhe1/CbqZX8/h8AAAAYCDH3D4WZyP8AAABQGjH3x/8rPJH/AQAAoDRi7h8JM6lI/t/2xufmXriYpWb+QhCvT7vhwWK52HGdDl9PLCyqX/7Al2f/+x8urmzdQ1mW/fzBP2i7/LYH43YVJsJ2XnlT8+VLfPWeFa37yCMX03ob++tfCPcfH89KD4N2FdzpLMu+fsNn8vVMvP9yPp958Eg+H7r05BP1ZZ4/UHwdb//sy4rl/yKUfw8dP9p0+2fDfvhhmNNva78/4u2+cvk12/e9d3F98Xa1HdfnD/upDxT3Gz8n57NPFMvH/bzc9n/j009/pb78o69qv/0Xh9pv/9Phfr8c5v++oli+8Tmofx1v98mw/XF98Xb3fumbbbf/yqeK5c++uVjuSJhx/XeGr3e++bm5xv31aO1o0+PK3lIsF9c//d0/zq+P9xfvv3X7xw9fbtofrcfHM/9W3M9Uy/Lx8rie6O9b1l+/n8bjM67/6T860rSfu63/ykPPvqJ+v63rv7tlubMfuStf/+L9NX9i019+8jNt1xe359Dfnm16PIfeHV7HYf1PfSAcj+H6/7tS3F/rpysceXfz+09c/gtbLzY9nuitPy3Wf+V1J/K5aXzzlute9OLrL72yvu+y7Dubivvrtv4Tf3Wmafu/eFOxP+L1saPfuv7lxPWf++jk6TPzF+Zm0l597Ib8s3PeXmxP3N4bwntr69eHz5z/4Oy5iemJ6SybKO9H6F21L4X542Jc6rz0wpJ30LseCc/nLX/+9S13/Oun4+X//p7i8stvK75vvTos99lw+dbw/K1u/Us9ddtN+eu79kzYwoWlnxe8Ftt3/tf+FS0YHn/rzwXxeD/78g/m+6F+Xf59I76u17j9358p7udrYb8uhE9m3nHT4voal4+fjXD54eL1vub9F97m4vP6N+H5fscPi/uP2xUf7/fDzzHf3Nb8fhePj69dHGq9//xTPC6F95PsUnF9XCru78vP39R28+LnkGSXbs6//pN0Pzev6mEuZ/5j81Mn505feHTq/Oz8+an5j3388KkzF06fP5x/lufhD3W7/eL705b8/Wlmdu99Wf5udaYY19hGb//ZR47N7Ju+Y2b2+NELx88/cnb23Ilj8/PHZmfm7zh6/PjsR7vdfm7m4K7dB/bs2z15Ym7m4P4DB/YcmJw7faa+GcVGdbF3+sOTp88dzm8yf/C+A7vuv/++6clTZ2ZmD+6bnp680O32+femyfqtf3/y3OzJo+fnTs1Ozs99fPbgrgN79+7u+mmAp84en5+YOnfh9NSF+dlzU8VjmTifX1z/3tft9pTT/H8UP8+2qhUfxJe96+696fNZ6778+LJ3VSzS8gGiz4XPovnnl5zdv5KvY+4fDTOpSP4HAACAKoi5fyzMRP4HAACA0oi5f1OYifwPAAAApRFz/3iYSUXyfy/6/43Ntg3v/2+7uKL16//r/zfuL/3/ivX/H+63/n/xfqH/3xtr7d/r/wf6//r/+v/6//r/9EC/9f9j7t+cZZXM/wAAAFAFMfdvCTOR/wEAAKA0Yu6/LsxE/gcAAIDSiLn/RWEmFcn/pTv/v/5/0+30//X/261f/1//v8z0/zvT/+9C/38qq1b//1Ivt1//X/+fpfqt/x9z/4vDTCqS/wEAAKAKYu6/PsxE/gcAAIDSiLn/hjAT+R8AAABKI+b+rWEmFcn/+v9l7P8P6f/r/3dcv/6//n+Z6f93pv/fhf6/8//r/+v/01P91v+Puf8lYSYVyf8AAABQBTH3vzTMRP4HAACA/jNydTeLuf9lYSZL8v9VrgAAAADYcDH335i1FMEr8vt//f8y9v/Ldv7/Tek6/X/9/6wv+//Dmf5//9D/70z/vwv9f/1//X/9f3qq3/r/ee7PxrOXh5lUJP8DAABAFcTcf1OYifwPAAAApRFz/y+Fmcj/AAAAUBox928LM6lI/tf/1//v//6/8//r//d7/9/5//uJ/n9n+v9d6P/r/+v/6//TU/3W/4+5/+Ywk4rkfwAAAKiCmPtvCTOR/wEAAKA0Yu7/5TAT+R8AAABKI+b+7WEmFcn/+v993v+PzVH9f/1//X/9f/3/FdH/70z/vwv9f/1//X/9f3qq3/r/Mfe/IsykIvkfAAAAqiDm/lvDTOR/AAAAKI2Y+18ZZiL/AwAAQGnE3D8RZlKR/K//3+f9/6IHP+b8//r/+v/6//r/K6P/35n+fxf6//r/Pen/L1wsVf+/ftDp/3OV+q3/H3P/bWEmFcn/AAAAUAUx9+8IM5H/AQAAoDRi7r89zET+BwAAgNKIuX9nmElF8r/+/0D0/7OS9//HGrdd/3/xdvr/Bf1//f/V0P/vTP+/C/1//X/n/3f+f3qq3/r/Mfe/KsykIvkfAAAAqiDm/jvCTOR/AAAAKI2Y+18dZiL/AwAAQGnE3H9nmElF8r/+v/5/H/T/nf9f/z+n/6//3wv6/53p/3eh/6//r/+v/09P9Vv/P+b+14SZVCT/AwAAQBXE3H9XmIn8DwAAAKURc//dYSbyPwAAAJRGzP2TYSYVyf/6//r/+v/6//r/7dev/z+Y9P870//vQv9f/1//X/+fnuq3/n/M/feEmVQk/wMAAEAVxNx/b5iJ/A8AAAClEXP/VJiJ/A8AAAClEXP/dJhJRfK//r/+v/6//v+q+v+vXLxf/f+C/n9/0f/vTP+/C/1//f8N7/+P6v9TKv3W/4+5f1eYSUXyPwAAAFRBzP27w0zkfwAAACiNmPv3hJnI/wAAAFAaMfffF2ZSkfyv/6//r/+v/+/8/+3Xr/8/mPT/O+t9/z8+RP1//X/9f+f/1/9nqX7r/8fcf3+YSUXyPwAAAFRBzP17w0zkfwAAACiNmPv3hZnI/wAAAFAaMffvDzOpSP7X/9f/1//X/9f/b79+/f/BpP/fmfP/d6H/r/+v/6//zxo9/IeNX/Vb/z/m/gNhJhXJ/wAAAFAFMfe/NsxE/gcAAIDSiLn/V8JM5H8AAAAojZj7fzXMpCL5X/+/qXtef7j6/1fd/y/+1P/X/9f/b0//f33o/3em/9+F/r/+v/6//j89tWz/P0Tv9e7/x9x/MMykIvkfAAAAqiDm/l8LM5H/AQAAoDRi7n9dmIn8DwAAAKURc/+hMJOK5H/9f+f/d/5//X/9//br72n//2L3/v9YvF/9/zXR/+9M/78L/X/9f/1//X96qt/O/x9z/+vDTCqS/wEAAKAKYu5/IMxE/gcAAIDSiLn/DWEm8j8AAACURsz9bwwzqUj+1//X/9f/1//X/2+/fuf/H0z6/53p/3eh/6//r/+v/09P9Vv/P+b+N4WZVCT/AwAAQBXE3P/mMBP5HwAAAEoj5v63hJnI/wAAAFAaMfe/NcykIvlf/1//X/9f/1//v/369f8Hk/5/Z/r/Xej/6//r/+v/01P91v+Puf/Xw0wqkv8BAACgCmLufzDMRP4HAACA0oi5/21hJvI/AAAAlEbM/W8PM6lI/tf/1//X/9f/1/9vv/7e9f8353/q/68P/f/OBqz//4vrw+X6/wX9//7e/tX2/0davr4m/f8fLNf/X9jUenv9f66Ffuv/x9z/jjCTiuR/AAAAqIKY+98ZZiL/AwAAQGnE3P+uMBP5HwAAAEoj5v7fCDOpSP7X/69vx2J7Wf+/rP3/If1//X/n/68I/f/OBqz/7/z/LfT/+3v7nf9f/5+l+q3/H3P/u8NMKpL/AQAAoApi7n8ozET+BwAAgNKIuf/hMBP5HwAAAEoj5v73hJlUJP/r/zv/fzX6/87/n+n/6/9XhP5/Z/r/XWx0//8F/f9B3v5r0v//T/1/Blu/9f9j7n8kzKQi+R8AAACqIOb+94aZyP8AAABQGjH3/2aYifwPAAAApRFz//vCTCqS//X/B6X/PzGg/f/H9f+vYf//1uuL5fT/9f9ZpP/fmf5/Fxvd/1/j+f9HVvVgl9ro/vxabfT2O/+//j9L9Vv/P+b+94eZrDz/j694SQAAAGBDxNz/W2EmFfn9PwAAAFRBzP2/HWYi/wMAAEBpxNz/O2EmFcn/+v+D0v93/v9M/9/5/1sej/6//n8769f/j+88+v/6//3T/1+rje7PD/r26//r/7NUv/X/Y+7/3TCTiuR/AAAAqIKY+z8QZiL/AwAAwEBo9/9kt4q5/3CYifwPAAAApRFz/5Ewk4rkf/1//X/9/z7t///Zjn/53rffeWSX/v969P+H261f/38wrev5/+svfuf/1//X/0/0//X/9f9p1W/9/5j7j4aZVCT/AwAAQBXE3P97YSbyPwAAAJRGzP3HwkzkfwAAACiNmPtnwkwqkv/1//X/9f/7tP8/wOf/j/tjgPr/bdfft/3/+Kar/99W0b9PR9G17f+/d7Enrv+/2v7/WNtL9f/1/wd5+/X/9f9Zqt/6/zH3z4aZVCT/AwAAQBWE3D90vJiLV8j/AAAAUBox958IM5H/AQAAoDRi7v9gmElF8r/+v/7/IPT/N2X6/4PU/x/A8/+3XX+n/n9txPn/+1Xq3/8sf6Ho/7fon/5/e/r/+v+DvP36//r/LNVv/f+Y++fCTCqS/wEAAKAKYu7/UJiJ/A8AAAClEXP/h8NM5H8AAAAojZj7T4aZVCT/6/9fXf9/uX51I/1/5/9vPT70/8vT/8828vz/+v8drbV/r/8f6P9Xu///P/r/+v//z959NFlWn3ccv20PTE/hhXdeeOMqL/0SWNhr+wV4YS+8cZXLVcYB2ygzKEckJKEsIVAOKIBACEmgHEAJCWWQhHIOKCEkalT0PM/T6fa5HW73Pef//3wW85hmmntNTc3wm56vjv6f5Rhb/5+7/z/ilk72PwAAAPQgd/8lcYv9DwAAAM3I3f+fcYv9DwAAAM3I3f9fcUsn+1//f5Tn/29Wyvr/7e9/FP3/3+r/93p9/b/+v2X6/2H6/wX0/57/r//X/7NUY+v/c/f/d9zSyf4HAACAHuTu/5+4xf4HAACAZuTuvzRusf8BAACgGbn7/zdu6WT/7+j/12Z99v+Z8R6w/9+k/9/+/kfR/3v+/56vr//X/7fsZPv/Kx7+mU//r//X/wf9/776/9N7fb7+nxaNrf/P3f9/cUsn+x8AAAB6kLv//+MW+x8AAACakbv/srjF/gcAAIBm5O5/RNzSyf5f3vP/z2x8fKL9f9H/6/83PqD/1//r/yfL8/+H9dT/X3r3RZfcf/Nf3nKQ19f/6/89/1//z3KNrf/P3f/IuKWT/Q8AAAA9yN3/qLjF/gcAAIBm5O5/dNxi/wMAAEAzcvc/Jm7pZP8vr/+f9PP/i/5f/7/xAf2//l//P1n6/2E99f+Hef32+/8zg3931f38Ua36/ev/9f/sNrb+P3f/Y+OWTvY/AAAA9CB3/+PiFvsfAAAAmpG7//K4xf4HAACAZuTuPxu3dLL/9f/H3/8/pP/X/8fV/+v/9f/HT/8/TP+/QPP9/7BV9/NTf//6f/0/u42t/8/df0Xc0sn+BwAAgB7k7n983GL/AwAAQDNy9z8hbrH/AQAAoBm5+58Yt3Sy//X/nv+v/9f/6//nv77+f5r0/8P0/wvo/4/az1+g/9f/6//Z6oD9/4MDP20vpf/P3f+kuKWT/Q8AAAA9yN3/5LjF/gcAAIBm5O5/Stxi/wMAAEAzcvc/NW7pZP/r//X/+n/9/6H7/90/9Dbo/+fT/58M/f+w0fT/a6fmflj/P/n+3/P/9f/6f7YZ2/P/c/c/LW7pZP8DAABAD3L3Pz1uGdj/B/7NfAAAAGClcvc/I27x9X8AAACYvKzOcvc/M27pZP/r//X/+n/9v+f/z3/9of7/li3vT/8/Lvr/YaPp//eg/9f/T/n96//1/+w2tv4/d/+z4pZO9j8AAAD0IHf/lXGL/Q8AAADNyN3/7LjF/gcAAIBm5O5/TtzSyf6f3/9v/n39//7o/7e/f/3//B8fy+r/85+o/x/s///O8//7pP8fdvL9/2n9//Z/vv7/GK36/Tfe/59Z9Pn6f+YZW/+fu/+quKWT/Q8AAAA9yN3/3LjF/gcAAIBm5O5/Xtxi/wMAAEAzcvc/P27pZP97/r/+X/8/vf7f8//PW+Xz/2cn3v+f0v/vk/5/mOf/L6D/1//r/z3/n6UaW/+fu//quKWT/Q8AAAA9uPqB2cbuf8FsZv8DAADAFG39swM7/0BpyN3/wrjF/gcAAIBm5O5/UdzSyf7X/+v/9f/6f/3//NcfV//v+f/7pf8fpv9fQP9/HP38qcb6/2v2+vwx9P+X6/8ZmW39/22bH19V/5+7/8VxSyf7HwAAAHqQu/8lcYv9DwAAAM3I3f/SuMX+BwAAgGbk7n9Z3NLJ/j/2/v/M3q+t/9f/6//1//p//f+y6f+H6f8X0P97/r/n/+v/WarN/n/7z4er6v9z9788bulk/wMAAEAPcve/Im6x/wEAAKAZufuviVvsfwAAAGhG7v5Xxi2d7H/P/9f/6//1//r/+a+v/58m/f8w/f8C+n/9v/5f/89SbXv+/xar6v9z918bt3Sy/wEAAKAHufuvi1vsfwAAAGhG7v5XxS32PwAAADQjd/+r45ZO9r/+/3j7//y4/l//P9P/6//1/yei2/5/bd6vRLvt0f/f+W9n/2H7R/T/+n/9v/5f/88SjKL/P7f5X5e5+18Tt3Sy/wEAAKAHuftfG7fY/wAAANCM3P2vi1vsfwAAAGhG7v7Xxy0H3P9/vtR3dXL0/57/r//X/+v/57++/n+auu3/98nz/xfQ/+v/9f/6f5ZqFP3/lr/O3f+GuMXX/wEAAKAZufvfGLfY/wAAANCM3P1vilvsfwAAAGhG7v43xy2d7H/9v/5f/6//1//Pf/3D9v/rs/n0/ydD/z9M/7+A/l//r//X/7NUY+v/c/dfH7d0sv8BAACgB7n73xK32P8AAADQjNz9b41b7H8AAABoRu7+t8Utnex//b/+X/+v/9f/z399z/+fJv3/MP3/bDa7YeANzOv/z53W/+v/9f/6fw5pbP1/7v63xy2d7H8AAADoQe7+G+IW+x8AAACakbv/xrjF/gcAAIBm5O5/R9zSyf7X/+v/9f/6/5H0/w//a9T/6/+PTP8/TP+/gOf/6//1//p/lmps/X/u/pvilk72PwAAAPQgd//NcYv9DwAAAM3I3f/OuMX+BwAAgGbk7r8lbulk/+v/9f/6f/3/sfT/Zz3/fyf9/8k4vv5/pv/X/+v/F9D/6//1/+x0Uv3/g/Hz/aL+P3f/u+KWTvY/AAAA9CB3/61xi/0PAAAAzcjd/+64xf4HAACAZuTuf0/c0sn+1//r//fZ/2+8I/2//n+rJT//X/+v/18Kz/8fpv9fQP+v/9f/6/9ZqpPq//fq/Xf+de7+98Ytnex/AAAA6EHu/tviFvsfAAAAmpG7//a4xf4HAACAZuTuf1/c0sn+1//r/7f3/7OZ5//r//X/551A/78+0/8vnf5/mP5/Af1/m/3/n8wa6v/P7Pn5+n/GaGz9f+7+98ctnex/AAAA6EHu/g/ELfY/AAAANCN3/wfjFvsfAAAAmpG7/0NxS0v7/6G907fp9/+nd3yi/n82m91z2fKf/6//1//r/z3/fxL0/8P0/wvo/9vs/z3/X//Pyoyt/8/d/+G4paX9DwAAAJ3L3f+RuMX+BwAAgGbk7v9o3GL/AwAAQDNy938sbulk/0+//9/5ifr/2ZGe/6//3/iA/l//r/+frKP299eux69p+n/9v/5/bj+/tsd/98z0//p//T9zjK3/z93/8bilk/0PAAAAPcjdf0fcYv8DAABAM3L33xm32P8AAADQjNz9n4hbOtn/+n/9v/5/mv3/uv5f/6//n2ssz/+/+OK/v0v/r/9vsf8fov/X/+v/2Wls/X/u/k/GLZ3sfwAAAOhB7v5PxS32PwAAADQjd/+n4xb7HwAAAJqRu/8zcUsn+393/3/B7Hyhet68/j8aNf3/Fvr/7e9f/z//x4fn/+v/9f/Hbyz9v+f/H+796//1/1N+/wfq//9q9+fr/2nR2Pr/3P13xS2d7H8AAADoQe7+z8Yt9j8AAAA0I3f/5+IW+x8AAACakbv/7rilk/3v+f/6f/2//l//P//19f/TpP8fpv9fQP9/9H4+f1bV/0/3+f9/qv9necbW/+fu/3zcsjH8/vrPDvn/JgAAADAiufu/ELd08vV/AAAA6EHu/i/GLfY/AAAANCN3/5filk72v/5f/6//1//r/+e/vv5/mvT/w/T/C/TT/6/P++Cq+/mjWvX7b6b/9/x/lmhs/X/u/i/HLZ3sfwAAAGjbAxvf5u7/Stxi/wMAAEAzcvd/NW6x/wEAAKAZufvviVs62f/6f/1/+/3/v+j/d7y+/l//3zL9f/6KPp/+f4F++v+5Vt3PT/396//1/+w2tv4/d/+9cUsn+x8AAAB6kLv/a3GL/Q8AAADNyN3/9bjF/gcAAIBm5O7/RtzSyf7X//fV/6/Neuz/Pf9f/6//78l0+v/rTs37qOf/6//1/9N9//p//T+7ja3/z91/39qpLvc/AAAATNU//s2/37vf73vfxrfrs2/GLfY/AAAANCN3/7fiFvsfAAAAmpG7/9txSyf7X//fV//f5/P/9f/6f/1/T6bT/8+n/9f/6/+n+/71//p/dhtb/5+7/ztxy5bhN/d/oAcAAABYnQsP9t1z9383bunk6/8AAADQg9z934tbdu3/c/v8U+0AAADA2OTu/37c0snX//X/I+//Z8fU/8f30/+fp//X/897ff3/NOn/hx2x/z+3pv/X/w/Q/+v/9f/sNLb+P3f/rTfNutz/AAAA0Khtv6Pwg41v12c/jFvsfwAAAGhG7v4fxS32PwAAADQjd/+P45ZO9r/+f+T9/6Ge/3+m/i/P/++8/79yfe7r6//1/y3T/w/z/P8F9P/6f/2//p+lOkD/vzFIj7v/z93/k7ilk/0PAAAAPcjd/9O4xf4HAACAZuTu/1ncYv8DAABAM3L3/zxu6WT/6/9X0P9fdXo2O9b+fx/P/9f/99H/7/H6y+//t/etJ9f//8VFZ+/4p3+98Xr9P5tOsv/PHwv6f/2//v88/b/+X//PTmN7/n/u/l/ELZ3sfwAAAOhB7v774xb7HwAAAJqRu/+XccvD+//2Vb0rAAAAYJly9/8qbunk6//6/xaf/z/N/j//Xa+g/z87vf4/m+Kx9P/bef7/fPr/k+H5/8P0/wvo//X/I+3//1n/z0SNrf/P3f/ruKWT/Q8AAAA9yN3/m7gl9//agX/rHgAAABiZ3P2/jVt8/R8AAACakbv/gbilk/2v/9f/j6X/T57/v/l503n+/3aH6P8vnOn/9f9Lov8fpv9fQP+v/x9p/+/5/0zV2Pr/3P2/i1s62f8AAADQg9z9D8Yt9j8AAAA0I3f/7+MW+x8AAACakbv/D3FLJ/tf/6//1//r/0fQ/2/Q/+v/l0H/P0z/v4D+X/+v/9f/s1Rj6/9z9/8xAAD//zEcYhE=") socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d00010100"], 0x0) syz_usb_ep_read(r0, 0x3, 0x0, 0x0) syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000700)="aa00080c0000000100070009") setxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x4}}, 0x24, 0x0) setxattr$incfs_size(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f00000001c0)={0x0, 0x12000}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xb6) unshare(0x20200) 8m5.454017025s ago: executing program 7 (id=4038): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b44a30800000000000000000002000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100"/28], 0x50) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='4095', 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x1, './proc\x00'}, 0x6e) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 8m2.334979881s ago: executing program 7 (id=4048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x8000, 0x15) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000580)={0x1, 0x26000, 0x2, r2, 0x4}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = timerfd_create(0x7, 0x80000) timerfd_settime(r4, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x7, &(0x7f0000000100)=0xffffffffffffffff}) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8880b870dffe) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000280)=@newtaction={0x174, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x40000003}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe6, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x1, 0x1, 0x1200}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16fc, 0x1}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0x174}}, 0x0) 7m46.67839866s ago: executing program 54 (id=4048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x8000, 0x15) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000580)={0x1, 0x26000, 0x2, r2, 0x4}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = timerfd_create(0x7, 0x80000) timerfd_settime(r4, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x7, &(0x7f0000000100)=0xffffffffffffffff}) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8880b870dffe) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000280)=@newtaction={0x174, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x40000003}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe6, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x1, 0x1, 0x1200}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16fc, 0x1}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0x174}}, 0x0) 4m22.174651259s ago: executing program 3 (id=4555): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) socket(0x848000000015, 0x805, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x10}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) close(0x3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r8, 0x0, r8}, 0x5) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r4, 0x0, 0x0, 0xc, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m18.812171705s ago: executing program 3 (id=4563): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd07, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") landlock_restrict_self(r0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r4, 0x4, 0x8e000) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) read$hidraw(r4, &(0x7f0000000000)=""/91, 0x5b) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$watch_queue(r10, &(0x7f0000000280)=""/6, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000140)={0x28, r8, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x5e}}}}}, 0x28}}, 0x810) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 4m18.089031819s ago: executing program 3 (id=4567): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x9, 0x1b4, 0x0, 0x7, 0x3, 0x0}) syz_open_procfs(r0, &(0x7f0000000240)='net/ip_tables_targets\x00') syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1000404, &(0x7f00000001c0)={[{@dmode={'dmode', 0x3d, 0x8000}}, {@map_off}, {}, {@check_strict}, {@map_acorn}, {@hide}]}, 0x5, 0x581, &(0x7f0000000380)="$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") socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x100, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x10000002, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e000000200000000000000000000000000000000000002ff0000000000000001fffd0800100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 4m16.205399367s ago: executing program 3 (id=4571): r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x44000160) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 4m15.692519304s ago: executing program 3 (id=4574): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x6e, 0x0, 0xffff, 0x20, 0x3, 0x2, 0x7, 0x100, 0x8000000000000, 0x80000004000080, 0x7, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m14.437178257s ago: executing program 3 (id=4577): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x66, &(0x7f0000000880)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './proc_mnt/../file0\x00'}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000180)="1bf97e14d54dc24bd67abbc8e6b2afc2aa541f1f3100", &(0x7f00000001c0)=""/78}, 0x20) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, &(0x7f00005b0000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/45, 0x2d}, {0x0}], 0x2) 4m14.323238429s ago: executing program 4 (id=4579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='mnt/ttyUSB0\x00', &(0x7f0000000080)={0x8440, 0x40, 0x6}, 0x18) 4m12.910855753s ago: executing program 4 (id=4580): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = userfaultfd(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 4m9.16454139s ago: executing program 4 (id=4593): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x20, 0xd6e}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 4m7.646142994s ago: executing program 4 (id=4594): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) stat(&(0x7f0000000140)='./file0/file2\x00', &(0x7f0000000240)) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 4m7.041044937s ago: executing program 4 (id=4597): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0xe0b42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) write$UHID_INPUT(r0, 0x0, 0x72) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) 4m5.826683604s ago: executing program 4 (id=4599): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 3m59.250323589s ago: executing program 55 (id=4577): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x66, &(0x7f0000000880)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './proc_mnt/../file0\x00'}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000180)="1bf97e14d54dc24bd67abbc8e6b2afc2aa541f1f3100", &(0x7f00000001c0)=""/78}, 0x20) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, &(0x7f00005b0000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/45, 0x2d}, {0x0}], 0x2) 3m50.280838387s ago: executing program 56 (id=4599): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 13.018336295s ago: executing program 6 (id=5216): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000008c0)=""/141, 0x8d}, {&(0x7f0000000080)=""/29, 0x1d}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x2}], 0x1, 0x100, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 12.271236529s ago: executing program 6 (id=5219): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@oldalloc}]}, 0x0, 0x610, &(0x7f0000000bc0)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000100)={0x9f0902, 0x7, @name="ea8dd03fa72836ba95935cd834c7b2bb431da1f2462e78a208e78fe608a462a8"}) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c0000000e0a01010000000000000000020000060900020073797a31000000000900010073797a31000000001400000011000100b2ba59cba397d8e40510d9d98dd8bf5c192e07287217275800ae674af46853a66961d1c80b78654d7db17ce74f1137d5a05638bf27848ace9dc927460c31400bc8ced0ea3b79955a04e0967a22f08706db6378fdf68348bc55aa9e00"/175], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f00000004c0), 0x8, 0x28, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xc0800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x810) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000002440)={&(0x7f0000002400), 0x0, 0x0, 0x0, 0x0, 0x3d, 0x1a8f, 0x1f4, {0x9f, 0x5, 0x0, 0x8, 0x101, 0x7fff, 0x5, 0x8, 0xb6f, 0x8, 0x6, 0x200, 0x8, 0x6, "69002f3f59316454420b0986b2e801f350fcb4288c1130f96340e37b5434e429"}}) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 12.224296051s ago: executing program 1 (id=5220): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) socket(0x848000000015, 0x805, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x10}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) close(0x3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r8, 0x0, r8}, 0x5) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r4, 0x0, 0x0, 0xc, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.48716206s ago: executing program 6 (id=5223): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x4b, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)=ANY=[@ANYBLOB=',size=4']) 10.063594747s ago: executing program 6 (id=5225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x14) socket(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x402) syz_emit_ethernet(0x4e, &(0x7f0000000840)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x4, 0xf, 0x0, "da"}]}}}}}}}}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) 9.746307308s ago: executing program 5 (id=5226): mount$overlay(0x20, 0x0, 0x0, 0x1021408, 0x0) unshare(0x2c020400) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000000)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x14) 8.822244453s ago: executing program 6 (id=5228): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000300)={0x5, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}}) 8.10019883s ago: executing program 2 (id=5229): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000008c0)=""/141, 0x8d}, {&(0x7f0000000080)=""/29, 0x1d}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x2}], 0x1, 0x100, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.0089064s ago: executing program 1 (id=5230): signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x5, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x7, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x2, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x4, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x5, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x8, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x3ff, 0xd3, 0x2, 0x7fffffff, 0x3, 0x200000d, 0x7, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x81, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0xb, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x8, 0x5396, 0x3, 0x6, 0x0, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0xff, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1008, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r7, 0x8800000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) r10 = dup3(r9, r8, 0x0) sendfile(r10, r7, 0x0, 0x1000009) read$FUSE(r10, &(0x7f0000003240)={0x2020}, 0x2020) 7.650046482s ago: executing program 2 (id=5231): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0) (rerun: 32) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x11, 0x3, 0xff) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f0000000000)=""/32, 0x20}], 0x2, 0x3, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r5, 0x0, 0x1000000, 0x3) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r5, 0x2000) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4000002}, 0x28) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x8000850) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r7, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2c00000000000000840000000100000002200000450000000800000002000500fffff14a889f8b4f8ed70080", @ANYRES32=0x0], 0x2c}, 0x0) (async) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) r9 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r9, 0x2283, 0x0) (async, rerun: 32) r10 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x2) (rerun: 32) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r10, 0xc2604111, &(0x7f0000000100)={0xfffffffc, [[0xffffffff, 0xfffffffe, 0xffffffff, 0xfffffe01, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x0, 0x7fffffff, 0xffffffff, 0xffffffff, 0x2, 0x5, 0xffffffff, 0xfffffff0], [0xfffbffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffa, 0x10, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989480}, {0x4, 0x989680}, {0x0, 0x989680}, {0xd, 0x989684}, {0x0, 0x989680}, {0x800002, 0x989680}, {0x0, 0x989680}, {0x8, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16a6ae7df3", @ANYRES16=0x0, @ANYRESDEC=r0, @ANYRES8=r4, @ANYRES64=r10, @ANYRES8=r5], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) 6.969126364s ago: executing program 5 (id=5234): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000008c0)=""/141, 0x8d}, {&(0x7f0000000080)=""/29, 0x1d}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x2}], 0x1, 0x100, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.45646509s ago: executing program 5 (id=5235): mq_unlink(0x0) mq_unlink(&(0x7f0000000080)='ext4\x00') socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) close(0x3) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00') setpgid(r5, r5) setpgid(0x0, r5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10010, 0xffffffffffffffff, 0xaf49a000) msgctl$IPC_STAT(0x0, 0x2, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) gettid() 6.246374392s ago: executing program 1 (id=5236): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d003d", 0x23}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300007b"], 0xfe33) 6.007558344s ago: executing program 9 (id=5237): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x1, 0x2, 0x180, 0x7f, 0x10, 0xf1, 0x53, 0xf, 0x2, 0x0, 0x2d, 0x0, 0x4, 0x5, 0x8], 0x100000, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x6, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x0, 0x20000000000], 0xeeee8000, 0x202}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0xfffffffffffffffc, &(0x7f0000000340)=0x88) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x7ff, 0x6, 0x73, 0x6, 0x8, 0x8, 0x1, 0x1, 0x0, 0x4, 0xfc, 0x4, 0x6}, {0xe, 0x105, 0x48, 0xa, 0xdd, 0xa, 0x9, 0x8, 0xcf, 0x1, 0x5, 0x5, 0xef}, {0x3, 0x80, 0x2, 0x2, 0x95, 0x81, 0x2, 0x7, 0x6, 0x7f, 0x5, 0x1, 0xf76}], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="d38110001001000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x6, &(0x7f00000000c0)=""/6, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x759, &(0x7f00000000c0)={[{@usrquota}, {@nobarrier}], [], 0x2c}, 0x0, 0x4f6, &(0x7f00000002c0)="$eJzs3EtvVFUcAPD/nbaUCtiKTx7KKBobjZSW58IFEE3YmJhoDC5rWwhSwNCaAGmkGAOJCw2fwMfOxE/gSjdGjQuNW4lbY0JMN6ALc82duVOnvZ2+mHYs/f2SGc6999w55z/3HuY8ZhrAulXOnpKIzRHxa0R0VzdnZihX/7kzNTH019TEUBJp+tqfSSXf7amJoVrW2nmb8o3eUkTpgyR2FIvtHLt0+czg6OjIhXxH33gpT50dPDVyauTcwOHD+/d1HTo4cKApcWZ1ur39vfM7tx1/88YrQyduvPX9l1l90/x4fRxVPZXnDYsuoa2wpxzlme9lnWcWX/U1YUtdOmnPnkutqwyLlt212eXqqLT/7mirbFV1x8vvt7RywIpK0zTtLOyd/iybTOslSfWENL2aAveAJFpdA6A1ah/0t6eykerEUHEcfG+7dTQqI6As7jv5o3qkvTKCLfdUx0YdK1T+QxFxYvLvT7JHzDkPAQDQXF8fjbh+rNrvqD2qR0rxSF2++/O1oZ6IeCAitkbEg3n/5eGISt5HI+KxunM2L2IVoDxru9j/+bkrT9R3V5sm6/+9mK9tzez/Tde8py3f2lKJvyM5eXp0ZG/+nvRGR2e23V986elptW9e+uXjRuWX6/p/2SMrv9YXzOvxR/usCbrhwfHBu4275tbVyht7pRh/Eu1JLRWxLSK2L+P1s/fs9HNf7Gx0fEb8WZyF+D9q/OLty6jQLOlnEc9Wr/9kzIo/8vW/pLI+efadvrFLl184Xb8+2X/o4MCBvo0xOrK3r3ZXFP3w07VX82RhGDHP9a81jRVdSMuu/31z3v/TK5c9WWp6vXZs6WVcu3m94Zhmuff/huT1Srq2PntxcHz8Qn/EhmSyuH/gv3MvDnbNyJ/F37t77va/NeKfT/PzdkREdhM/HhFPRMSuvO5PRsRTEbF7nvi/O/b0242GkAvHv7Ky+IeXdP0bJY78GDH3obYz335VKPjDciH+jmh0/fdXUr35nuHB8Y0LxTVfTesTd/0GAgAAwBqwqzJPm5T25BNNm6NU2rMnYtP0DMrY+PMnz797brg6n9sTHaXaTFd33Xxofz43nG1nZw3UbWfH91XmjdM0Tbuy7Wz8PrqltaHDurepQfvP/F78SQtwr1nSOlqjX7QBa9Ls9n9z0Wc2/wsZwOpqwvdogDVK+4f1a9Htf6V+BQe0zFzt/0rEnRZUBVhlc7X/Nwp7jqxKXYDVZfwP69fy278vA8Ba5/Mf1qVF/Uh+GYmtx+fJk7SvTKGNE6WY/68A9ETU9tT6NPO/4G+liObUsK2pkXbNuKalOfNsjGaUFaUF87Qv4Q8xrG6i9P+oRjXRGREL3L3TN9uVWuLySles0gg+b+3/TgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHfv3wAAAP//C4DT6g==") openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x4001, 0x0, 0x13}, 0x18) 5.848991472s ago: executing program 5 (id=5238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x14) socket(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x402) syz_emit_ethernet(0x4e, &(0x7f0000000840)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x4, 0xf, 0x0, "da"}]}}}}}}}}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) 4.972356699s ago: executing program 5 (id=5239): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0xc5, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000108004c1500b700650000033390786401010064010101441c5881e00000010000000864010101000000046401010280000001c5fb2b6c4fc633a27bb323dc61e81b8c376926a7ae57130a64da285cb9212ac8db6ea80991bbbd2fb44f39a77c5424f8ec59a22ef5dcabd37b59638583df850dd6cd860c22bc719c08db64c017893c34501b98b880777959879642090df8356e39a754015b859232e0ac683558a0fec3c6ec39a318708c890b67371f9400"/197], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x3d, 0x301, 0x70bf25, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8400, 0x0) r4 = openat(r3, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) write$binfmt_register(r4, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x0, 0x3a, '/dev/comedi2\x00', 0x3a, '', 0x3a, './file0'}, 0x34) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r7, 0x3, {0x0, 0x0, 0x3}, 0xfe}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="7f454c46030007e1080000000000000003003e00f9fdffffd8010000000000004000000000000000d902000000000000330d000008003800010079001f00090051e5"], 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r2) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007c, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xc7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b2c, &(0x7f0000000040)) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4.883538294s ago: executing program 1 (id=5240): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) socket(0x848000000015, 0x805, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(0x0) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x10}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) close(0x3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r8, 0x0, r8}, 0x5) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r4, 0x0, 0x0, 0xc, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.677647339s ago: executing program 9 (id=5241): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f00000000c0)=""/122, 0x7a}, {0x0}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000080)=""/8, 0x8}], 0x6}, 0xd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000102, 0x0) 4.52039146s ago: executing program 2 (id=5242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd2a, 0x800000, 0x2, 0x4, 0x0, 0xe5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000079104800000000007900300000000000950074000000000022187069f9fb6bdbca6359d81e8eecd7934bdcd758593c4e4ead4367ee3caad7a68421695cdba2a119ca79a0a9a842dbeba155bc249578ff037773a2813b594c769c354a802307ef4ea733072570de61c55077543278cb2f2ce50f80aa94017b5ba8805cdd558a7eb801e1a9442402e596944d7dc5db8c2aa2a96eb2ba810078c32e228ea525f9dabdd2de349bf424610dc6a94b237888800628fa480e7d411df454c90cf5e070b0fa21c5fa54a65b920e43e67e9d7a6094bda46a016e7b8f9edbb8eea6"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 4.38324296s ago: executing program 9 (id=5243): syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x488ab, &(0x7f0000000000)=ANY=[], 0x1, 0x6b9, &(0x7f0000000800)="$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") (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x3, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000000)=0x7}) 4.109666632s ago: executing program 2 (id=5244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f31fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066ba000000000f3066b9bb0800000f32", 0x4a}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x9200}, @val={0x2, 0x1, 0x3, 0xfff, 0x8, 0x4}, @ipv6=@generic={0xa, 0x6, "d28b59", 0x12cd, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x2b, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x3ff}, @ra={0x5, 0x2, 0x8001}, @enc_lim={0x4, 0x1, 0x30}]}, @srh={0x1, 0xe, 0x4, 0x7, 0x1, 0x8, 0xfff, [@remote, @dev={0xfe, 0x80, '\x00', 0x20}, @ipv4={'\x00', '\xff\xff', @remote}, @private1, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}, @hopopts={0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x89, 0x0, 0xb5, 0x0, 0x0, 0x10, 0x64}, @dstopts={0x6c, 0x3, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x16, 0x12, '\x00', [@enc_lim, @generic={0x0, 0x6c, "81026ed6c1996288c42b7cc798c043d7c2111e57cb451806aee124730f4dd6c906e8d24639aeb82087839e7a17a5690db9cb905bd4993c567e2d5b31d60505b44fdd83dc454dd17e2cd1b1b0f2bf4a319d63f0a68302e23b726bbe5d049cfac20aea2026c133578bbf442cf3"}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0xf801, [0x8, 0x4]}}, @enc_lim={0x4, 0x1, 0x4}, @pad1]}, @hopopts={0x89, 0x207, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x4, [0x7fffffff, 0x4]}}, @generic={0xa, 0x1000, "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"}, @ra={0x5, 0x2, 0x8001}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, @routing={0x2, 0x6, 0x0, 0x3, 0x0, [@private2, @rand_addr=' \x01\x00', @mcast1]}, @hopopts={0x2c, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @empty}]}], "1364397b56a28d676a8ae3fe49453df6b78ade4153136306d95d8e43c06c2068705b26e682a340a45e9ea21ca949c96dbf4cae6155194e9d7f5f5a6d6a6c5a7df3120af0a9b543bdf49b11087940e6d49a18939414a896cb72665f1588a2f9fad0dbbf2da2d3740c8792aeb36e6c68e8b2f01c33831dbb199550b7867cae49134c37d319f8de158a15d88ca3ec164e3394c02f1ba01d71f88dc34c87f89a021735e959461f"}}}, 0x1303) 3.824434501s ago: executing program 9 (id=5245): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000008c0)=""/141, 0x8d}, {&(0x7f0000000080)=""/29, 0x1d}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x2}], 0x1, 0x100, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.496464084s ago: executing program 9 (id=5246): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, &(0x7f0000000080)) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0xd25) 3.189782555s ago: executing program 2 (id=5247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0xb334, 0x2003) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='mnt/ttyUSB0\x00', &(0x7f0000000080)={0x8440, 0x40, 0x6}, 0x18) 3.124990707s ago: executing program 9 (id=5248): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_udc', 0x9) clock_getres(0xd, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x210042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 2.110579751s ago: executing program 2 (id=5249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x14) socket(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x402) syz_emit_ethernet(0x4e, &(0x7f0000000840)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x4, 0xf, 0x0, "da"}]}}}}}}}}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) 1.441724092s ago: executing program 1 (id=5251): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x1, 0x2, 0x180, 0x7f, 0x10, 0xf1, 0x53, 0xf, 0x2, 0x0, 0x2d, 0x0, 0x4, 0x5, 0x8], 0x100000, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x6, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x0, 0x20000000000], 0xeeee8000, 0x202}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0xfffffffffffffffc, &(0x7f0000000340)=0x88) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x7ff, 0x6, 0x73, 0x6, 0x8, 0x8, 0x1, 0x1, 0x0, 0x4, 0xfc, 0x4, 0x6}, {0xe, 0x105, 0x48, 0xa, 0xdd, 0xa, 0x9, 0x8, 0xcf, 0x1, 0x5, 0x5, 0xef}, {0x3, 0x80, 0x2, 0x2, 0x95, 0x81, 0x2, 0x7, 0x6, 0x7f, 0x5, 0x1, 0xf76}], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="d38110001001000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x6, &(0x7f00000000c0)=""/6, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x759, &(0x7f00000000c0)={[{@usrquota}, {@nobarrier}], [], 0x2c}, 0x0, 0x4f6, &(0x7f00000002c0)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x4001, 0x0, 0x13}, 0x18) 864.336723ms ago: executing program 6 (id=5252): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x20, 0x45, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe6, 0xa, 0x96}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x3, 0x4, {0xa, 0x25, 0x25, 0x9, 0x5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x2, 0x2, {0xa, 0x25, 0x25, 0x401, 0x3, 0x3}}}}}}}}]}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000180), 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) set_mempolicy(0x3, 0x0, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/11], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r1, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0xf00, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 209.213484ms ago: executing program 5 (id=5253): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f00000000c0)=""/122, 0x7a}, {0x0}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000080)=""/8, 0x8}], 0x6}, 0xd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000102, 0x0) 0s ago: executing program 1 (id=5254): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000540)="703a732f70202e2f66696c65303a300c24fed2849287cddd1218bf84bfffd25dd05a7c036beac8bce2c54fc7c1618e9d8e21fa8d119612ee2c553aa53d", 0x3d) (fail_nth: 8) kernel console output (not intermixed with test programs): ? trace_irq_disable+0x3b/0x140 [ 1823.796362][T26531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.796382][T26531] ? clear_bhb_loop+0x70/0xc0 [ 1823.796405][T26531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.796423][T26531] RIP: 0033:0x7fc33cf9e0d9 [ 1823.796441][T26531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1823.796457][T26531] RSP: 002b:00007fc33dec2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1823.796478][T26531] RAX: ffffffffffffffda RBX: 00007fc33d226090 RCX: 00007fc33cf9e0d9 [ 1823.796492][T26531] RDX: 0000000000040080 RSI: 0000200000000140 RDI: 0000000000000003 [ 1823.796505][T26531] RBP: 00007fc33dec2090 R08: 0000000000000000 R09: 0000000000000000 [ 1823.796517][T26531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1823.796528][T26531] R13: 00007fc33d226128 R14: 00007fc33d226090 R15: 00007ffc52ab9968 [ 1823.796559][T26531] [ 1824.082326][ T30] audit: type=1800 audit(1787699771.181:11785): pid=26522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4879" name="enable" dev="configfs" ino=105979 res=0 errno=0 [ 1824.106787][ T30] audit: type=1800 audit(1787699771.191:11786): pid=26158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=517007 res=0 errno=0 [ 1825.511474][ T5751] usb 3-1: USB disconnect, device number 42 [ 1825.791996][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1825.943071][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1825.949962][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1825.956509][ T10] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 1825.956532][ T10] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1825.956549][ T10] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.956567][ T10] usb 2-1: config 3 has no interface number 0 [ 1825.956604][ T10] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1825.956633][ T10] usb 2-1: config 3 interface 45 has no altsetting 0 [ 1825.974646][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.974670][ T10] usb 2-1: Product: syz [ 1825.974684][ T10] usb 2-1: Manufacturer: syz [ 1825.974697][ T10] usb 2-1: SerialNumber: syz [ 1826.330530][T26543] tmpfs: Unknown parameter 'nr_blo' [ 1826.700895][ T10] usb 2-1: USB disconnect, device number 75 [ 1826.836642][T26158] udevd[26158]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1826.984007][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1826.984049][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1826.984087][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2642 instead [ 1826.984109][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x93be instead [ 1826.984128][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1826.984147][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1826.984168][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1826.984191][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1826.984223][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1826.984256][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1826.984275][T26557] jffs2: Further such events for this erase block will not be printed [ 1826.984605][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1826.984626][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1826.984648][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2642 instead [ 1826.984670][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x93be instead [ 1826.984688][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1826.984706][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1826.984725][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1826.984746][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1826.984779][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1826.984812][T26557] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1826.984830][T26557] jffs2: Further such events for this erase block will not be printed [ 1827.084479][T26557] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1827.084494][T26557] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1827.235885][T26557] Invalid argument reading file caps for ./file0 [ 1827.638489][T26562] program syz.2.4893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1827.931954][ T5808] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1828.083935][ T5808] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 1828.102610][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.102653][ T5808] usb 6-1: Product: syz [ 1828.102681][ T5808] usb 6-1: Manufacturer: syz [ 1828.102699][ T5808] usb 6-1: SerialNumber: syz [ 1828.132329][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1828.132372][ T30] audit: type=1800 audit(1787699775.231:11797): pid=26158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=517270 res=0 errno=0 [ 1828.186257][ T5808] usb 6-1: selecting invalid altsetting 1 [ 1828.208384][ T5808] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1828.238777][ T30] audit: type=1800 audit(1787699775.341:11798): pid=26158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=517302 res=0 errno=0 [ 1828.238845][ T30] audit: type=1800 audit(1787699775.341:11799): pid=26158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=517277 res=0 errno=0 [ 1828.252495][ T30] audit: type=1800 audit(1787699775.361:11800): pid=26158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=517278 res=0 errno=0 [ 1828.259230][ T5808] usb 6-1: selecting invalid altsetting 1 [ 1828.295858][ T5808] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1828.329993][ T5808] usb 6-1: selecting invalid altsetting 1 [ 1829.809815][ T5808] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1829.820021][ T30] audit: type=1800 audit(1787699776.921:11801): pid=26158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=517299 res=0 errno=0 [ 1829.820064][ T30] audit: type=1800 audit(1787699776.921:11802): pid=26158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=517300 res=0 errno=0 [ 1829.833396][ T30] audit: type=1800 audit(1787699776.941:11803): pid=26158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=517279 res=0 errno=0 [ 1829.833436][ T30] audit: type=1800 audit(1787699776.941:11804): pid=26158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=517301 res=0 errno=0 [ 1829.979771][ T30] audit: type=1800 audit(1787699777.081:11805): pid=26158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=517331 res=0 errno=0 [ 1829.982948][ T30] audit: type=1800 audit(1787699777.091:11806): pid=26157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=517377 res=0 errno=0 [ 1830.229254][T26577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4899'. [ 1830.409980][T26158] udevd[26158]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1830.642099][ T5751] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1830.807127][ T5751] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1830.821712][ T5751] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1830.823331][ T5751] usb 3-1: config 0 has no interface number 0 [ 1830.839767][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.839807][ T5751] usb 3-1: Product: syz [ 1830.839836][ T5751] usb 3-1: Manufacturer: syz [ 1830.839853][ T5751] usb 3-1: SerialNumber: syz [ 1830.863904][ T5751] usb 3-1: config 0 descriptor?? [ 1831.619627][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1831.619683][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1831.619721][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2642 instead [ 1831.619745][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x93be instead [ 1831.619764][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1831.619784][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1831.619803][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1831.619826][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1831.619860][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1831.619892][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1831.619911][T26585] jffs2: Further such events for this erase block will not be printed [ 1831.620279][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1831.620301][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1831.620322][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2642 instead [ 1831.620344][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x93be instead [ 1831.620363][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1831.620381][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1831.620400][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1831.620423][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1831.620457][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1831.620489][T26585] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1831.620508][T26585] jffs2: Further such events for this erase block will not be printed [ 1831.710926][T26585] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1831.710941][T26585] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1831.722554][ T5751] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1831.722789][ T5751] asix 3-1:0.251: probe with driver asix failed with error -524 [ 1831.900152][ T5808] usb 6-1: USB disconnect, device number 36 [ 1832.190721][ T10] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1832.352046][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1832.352756][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1832.355359][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1832.355382][ T10] usb 7-1: config 0 has no interface number 0 [ 1832.357639][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.357661][ T10] usb 7-1: Product: syz [ 1832.357674][ T10] usb 7-1: Manufacturer: syz [ 1832.357688][ T10] usb 7-1: SerialNumber: syz [ 1832.379562][ T10] usb 7-1: config 0 descriptor?? [ 1832.402531][ T10] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1832.402554][ T10] usb 7-1: selecting invalid altsetting 1 [ 1832.402569][ T10] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1832.462899][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1832.463224][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1832.463268][ T10] usb 7-1: media controller created [ 1832.600185][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1833.172695][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1833.172735][ T30] audit: type=1800 audit(1787699780.281:11848): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518049 res=0 errno=0 [ 1833.204867][ T30] audit: type=1800 audit(1787699780.311:11849): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518061 res=0 errno=0 [ 1833.234723][ T30] audit: type=1800 audit(1787699780.341:11850): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518073 res=0 errno=0 [ 1833.254884][ T30] audit: type=1800 audit(1787699780.341:11851): pid=26597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518037 res=0 errno=0 [ 1833.275689][ T30] audit: type=1800 audit(1787699780.361:11852): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518085 res=0 errno=0 [ 1833.297177][ T30] audit: type=1800 audit(1787699780.381:11853): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518097 res=0 errno=0 [ 1833.407923][ T30] audit: type=1800 audit(1787699780.511:11854): pid=26598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518109 res=0 errno=0 [ 1833.437144][ T30] audit: type=1800 audit(1787699780.541:11855): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518121 res=0 errno=0 [ 1833.462322][ T30] audit: type=1800 audit(1787699780.571:11856): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518133 res=0 errno=0 [ 1833.496255][ T30] audit: type=1800 audit(1787699780.601:11857): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518145 res=0 errno=0 [ 1833.646261][ T10] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1833.646327][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1833.648248][ T10] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1833.979903][ T10] usb 7-1: USB disconnect, device number 76 [ 1834.137769][ T44] usb 3-1: USB disconnect, device number 43 [ 1834.737357][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1834.737399][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1834.737431][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2642 instead [ 1834.737453][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x93be instead [ 1834.737473][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1834.737492][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1834.737510][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1834.737533][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1834.737565][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1834.737598][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1834.737616][T26607] jffs2: Further such events for this erase block will not be printed [ 1834.737966][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1834.737986][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1834.738006][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2642 instead [ 1834.738026][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x93be instead [ 1834.738045][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1834.738063][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1834.738081][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1834.738105][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1834.738137][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1834.738170][T26607] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1834.738194][T26607] jffs2: Further such events for this erase block will not be printed [ 1834.848948][T26607] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1834.848965][T26607] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1834.986148][T26607] Invalid argument reading file caps for ./file0 [ 1837.180695][T21549] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 1837.806480][T26656] evm: overlay not supported [ 1839.103189][T21549] Bluetooth: hci11: Controller not accepting commands anymore: ncmd = 0 [ 1839.117693][T21549] Bluetooth: hci11: Injecting HCI hardware error event [ 1839.142052][T21549] Bluetooth: hci11: hardware error 0x00 [ 1839.158811][T17814] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1840.052301][T26671] Bluetooth: hci7: command 0x0406 tx timeout [ 1842.054085][T21549] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 1842.054237][T21549] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1842.054310][T21549] Bluetooth: hci1: Injecting HCI hardware error event [ 1842.068999][T21549] Bluetooth: hci1: hardware error 0x00 [ 1843.436754][T26699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4933'. [ 1843.481718][T26699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4933'. [ 1845.156082][T21549] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1846.825552][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1846.825596][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1846.825629][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2642 instead [ 1846.825652][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x93be instead [ 1846.825671][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1846.825689][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1846.825708][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1846.825731][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1846.831165][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1846.831208][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1846.831225][T26719] jffs2: Further such events for this erase block will not be printed [ 1846.841741][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1846.841991][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1846.842011][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2642 instead [ 1846.842030][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x93be instead [ 1846.842045][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1846.842061][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1846.842077][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1846.842096][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1846.842126][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1846.842156][T26719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1846.842180][T26719] jffs2: Further such events for this erase block will not be printed [ 1846.842536][T26719] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1846.842545][T26719] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1846.872804][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1846.872821][ T30] audit: type=1804 audit(1787699793.961:11891): pid=26719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4943" name="file0" dev="tmpfs" ino=2963 res=1 errno=0 [ 1850.408455][T26732] FAULT_INJECTION: forcing a failure. [ 1850.408455][T26732] name failslab, interval 1, probability 0, space 0, times 0 [ 1850.408555][T26732] CPU: 0 UID: 0 PID: 26732 Comm: syz.5.4946 Tainted: G L syzkaller #0 PREEMPT(full) [ 1850.408582][T26732] Tainted: [L]=SOFTLOCKUP [ 1850.408589][T26732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1850.408600][T26732] Call Trace: [ 1850.408608][T26732] [ 1850.408615][T26732] dump_stack_lvl+0xe8/0x150 [ 1850.408639][T26732] should_fail_ex+0x3eb/0x540 [ 1850.408658][T26732] should_failslab+0xa8/0x100 [ 1850.408673][T26732] __kmalloc_noprof+0xfe/0x720 [ 1850.408689][T26732] ? lock_acquire+0x115/0x350 [ 1850.408699][T26732] ? tomoyo_encode+0x2ad/0x570 [ 1850.408711][T26732] ? tomoyo_encode+0x2ad/0x570 [ 1850.408725][T26732] tomoyo_encode+0x2ad/0x570 [ 1850.408739][T26732] tomoyo_mount_permission+0x3a4/0x9e0 [ 1850.408750][T26732] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 1850.408764][T26732] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1850.408774][T26732] ? kasan_save_track+0x4f/0x80 [ 1850.408809][T26732] ? kasan_quarantine_put+0xbb/0x1f0 [ 1850.408823][T26732] security_sb_mount+0xe4/0x320 [ 1850.408837][T26732] path_mount+0xbc/0x1050 [ 1850.408853][T26732] ? user_path_at+0xd4/0x160 [ 1850.408870][T26732] __se_sys_mount+0x31d/0x420 [ 1850.408886][T26732] ? __pfx___se_sys_mount+0x10/0x10 [ 1850.408903][T26732] ? __x64_sys_mount+0x20/0xc0 [ 1850.408917][T26732] do_syscall_64+0x166/0x520 [ 1850.408934][T26732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.408945][T26732] ? clear_bhb_loop+0x70/0xc0 [ 1850.408958][T26732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.408968][T26732] RIP: 0033:0x7f3fe379e0d9 [ 1850.408979][T26732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1850.408989][T26732] RSP: 002b:00007f3fe46c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1850.409002][T26732] RAX: ffffffffffffffda RBX: 00007f3fe3a26090 RCX: 00007f3fe379e0d9 [ 1850.409010][T26732] RDX: 0000200000002200 RSI: 00002000000021c0 RDI: 0000000000000000 [ 1850.409017][T26732] RBP: 00007f3fe46c0090 R08: 0000200000000000 R09: 0000000000000000 [ 1850.409024][T26732] R10: 0000000001200850 R11: 0000000000000246 R12: 0000000000000001 [ 1850.409030][T26732] R13: 00007f3fe3a26128 R14: 00007f3fe3a26090 R15: 00007ffd96bf8ab8 [ 1850.409047][T26732] [ 1851.565278][T26737] FAULT_INJECTION: forcing a failure. [ 1851.565278][T26737] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.565359][T26737] CPU: 0 UID: 0 PID: 26737 Comm: syz.2.4947 Tainted: G L syzkaller #0 PREEMPT(full) [ 1851.565386][T26737] Tainted: [L]=SOFTLOCKUP [ 1851.565393][T26737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1851.565405][T26737] Call Trace: [ 1851.565413][T26737] [ 1851.565422][T26737] dump_stack_lvl+0xe8/0x150 [ 1851.565454][T26737] should_fail_ex+0x3eb/0x540 [ 1851.565487][T26737] should_failslab+0xa8/0x100 [ 1851.565512][T26737] __kvmalloc_node_noprof+0x176/0x820 [ 1851.565535][T26737] ? __kvmalloc_node_noprof+0x345/0x820 [ 1851.565554][T26737] ? io_alloc_cache_init+0x42/0x140 [ 1851.565578][T26737] ? io_alloc_cache_init+0x42/0x140 [ 1851.565609][T26737] io_alloc_cache_init+0x42/0x140 [ 1851.565637][T26737] io_ring_ctx_alloc+0x54b/0xb80 [ 1851.565673][T26737] io_uring_create+0x50/0x990 [ 1851.565704][T26737] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1851.565735][T26737] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1851.565792][T26737] do_syscall_64+0x166/0x520 [ 1851.565819][T26737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.565838][T26737] ? clear_bhb_loop+0x70/0xc0 [ 1851.565861][T26737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.565881][T26737] RIP: 0033:0x7f3a0699e0d9 [ 1851.565899][T26737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1851.565915][T26737] RSP: 002b:00007f3a0787bee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1851.565936][T26737] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f3a0699e0d9 [ 1851.565950][T26737] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 1851.565963][T26737] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 1851.565975][T26737] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 1851.565988][T26737] R13: 0000200000000b10 R14: 00007f3a0787bfd8 R15: 0000000000000000 [ 1851.566018][T26737] [ 1852.543901][T26743] FAULT_INJECTION: forcing a failure. [ 1852.543901][T26743] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.543950][T26743] CPU: 1 UID: 0 PID: 26743 Comm: syz.2.4949 Tainted: G L syzkaller #0 PREEMPT(full) [ 1852.543975][T26743] Tainted: [L]=SOFTLOCKUP [ 1852.543982][T26743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1852.543993][T26743] Call Trace: [ 1852.544001][T26743] [ 1852.544009][T26743] dump_stack_lvl+0xe8/0x150 [ 1852.544041][T26743] should_fail_ex+0x3eb/0x540 [ 1852.544073][T26743] should_failslab+0xa8/0x100 [ 1852.544097][T26743] __kmalloc_noprof+0xfe/0x720 [ 1852.544124][T26743] ? rcu_is_watching+0x16/0xb0 [ 1852.544146][T26743] ? tomoyo_realpath_from_path+0xef/0x640 [ 1852.544166][T26743] ? tomoyo_realpath_from_path+0xef/0x640 [ 1852.544194][T26743] tomoyo_realpath_from_path+0xef/0x640 [ 1852.544224][T26743] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1852.544252][T26743] tomoyo_path_number_perm+0x246/0x5f0 [ 1852.544282][T26743] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1852.544307][T26743] ? __lock_acquire+0x6df/0x2e50 [ 1852.544342][T26743] ? hook_file_ioctl+0x1f2/0x600 [ 1852.544379][T26743] ? __fget_files+0x2a/0x420 [ 1852.544406][T26743] ? __fget_files+0x2a/0x420 [ 1852.544429][T26743] ? __fget_files+0x3a2/0x420 [ 1852.544451][T26743] ? __fget_files+0x2a/0x420 [ 1852.544486][T26743] security_file_ioctl+0xc3/0x2a0 [ 1852.544514][T26743] __se_sys_ioctl+0x47/0x170 [ 1852.544536][T26743] do_syscall_64+0x166/0x520 [ 1852.544563][T26743] ? trace_irq_disable+0x3b/0x140 [ 1852.544581][T26743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.544600][T26743] ? clear_bhb_loop+0x70/0xc0 [ 1852.544623][T26743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.544641][T26743] RIP: 0033:0x7f3a0699e0d9 [ 1852.544658][T26743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.544674][T26743] RSP: 002b:00007f3a078be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1852.544695][T26743] RAX: ffffffffffffffda RBX: 00007f3a06c25fa0 RCX: 00007f3a0699e0d9 [ 1852.544711][T26743] RDX: 0000200000000040 RSI: 0000000000008b2c RDI: 0000000000000004 [ 1852.544723][T26743] RBP: 00007f3a078be090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.544735][T26743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1852.544747][T26743] R13: 00007f3a06c26038 R14: 00007f3a06c25fa0 R15: 00007fffe5750bb8 [ 1852.544778][T26743] [ 1852.566606][T26743] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1852.809205][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1852.981849][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1852.988726][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1853.001472][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1853.009650][ T10] usb 2-1: config 0 has no interface number 0 [ 1853.024700][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.024738][ T10] usb 2-1: Product: syz [ 1853.024767][ T10] usb 2-1: Manufacturer: syz [ 1853.024785][ T10] usb 2-1: SerialNumber: syz [ 1853.067303][ T30] audit: type=1800 audit(1787699800.171:11892): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518745 res=0 errno=0 [ 1853.085205][ T30] audit: type=1800 audit(1787699800.191:11893): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=518777 res=0 errno=0 [ 1853.111986][ T30] audit: type=1800 audit(1787699800.211:11894): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=518752 res=0 errno=0 [ 1853.112014][ T30] audit: type=1800 audit(1787699800.211:11895): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=518753 res=0 errno=0 [ 1853.157132][ T10] usb 2-1: config 0 descriptor?? [ 1853.175717][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.178407][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.217773][ T10] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1853.217815][ T10] usb 2-1: selecting invalid altsetting 1 [ 1853.217848][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1853.252683][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1853.263438][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1853.271860][ T10] usb 2-1: media controller created [ 1853.392627][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1853.443537][ T30] audit: type=1800 audit(1787699800.551:11896): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518849 res=0 errno=0 [ 1853.535369][ T30] audit: type=1800 audit(1787699800.641:11897): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518876 res=0 errno=0 [ 1853.547150][T26751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.563394][T26751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.568725][ T30] audit: type=1800 audit(1787699800.671:11898): pid=26752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518864 res=0 errno=0 [ 1853.638071][ T30] audit: type=1800 audit(1787699800.741:11899): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518900 res=0 errno=0 [ 1853.679418][ T30] audit: type=1800 audit(1787699800.771:11900): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518912 res=0 errno=0 [ 1853.681343][ T30] audit: type=1800 audit(1787699800.781:11901): pid=26754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=518888 res=0 errno=0 [ 1854.537433][ T10] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1854.537509][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1854.759910][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1854.759952][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1854.759985][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2642 instead [ 1854.760007][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x93be instead [ 1854.760026][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1854.760043][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1854.760062][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1854.760085][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1854.760118][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1854.760151][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1854.760170][T26760] jffs2: Further such events for this erase block will not be printed [ 1854.760510][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1854.760531][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1854.760551][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2642 instead [ 1854.760572][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x93be instead [ 1854.760591][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1854.760609][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1854.760627][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1854.760649][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1854.760681][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1854.760713][T26760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1854.760732][T26760] jffs2: Further such events for this erase block will not be printed [ 1854.882083][T26760] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1854.882098][T26760] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1855.007586][T26760] Invalid argument reading file caps for ./file0 [ 1855.064199][ T10] usb 2-1: USB disconnect, device number 76 [ 1856.246294][T26775] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4958'. [ 1856.433261][T26776] kernel read not supported for file /file0 (pid: 26776 comm: syz.5.4948) [ 1856.652065][T26775] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4958'. [ 1856.989830][T26785] FAULT_INJECTION: forcing a failure. [ 1856.989830][T26785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1856.989864][T26785] CPU: 1 UID: 0 PID: 26785 Comm: syz.1.4962 Tainted: G L syzkaller #0 PREEMPT(full) [ 1856.989880][T26785] Tainted: [L]=SOFTLOCKUP [ 1856.989884][T26785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1856.989891][T26785] Call Trace: [ 1856.989896][T26785] [ 1856.989901][T26785] dump_stack_lvl+0xe8/0x150 [ 1856.989921][T26785] should_fail_ex+0x3eb/0x540 [ 1856.989940][T26785] _copy_from_user+0x2d/0xb0 [ 1856.989952][T26785] __sys_bpf+0x2e7/0xd90 [ 1856.989969][T26785] ? __pfx___sys_bpf+0x10/0x10 [ 1856.989986][T26785] ? __fget_files+0x2a/0x420 [ 1856.990009][T26785] ? ksys_write+0x242/0x270 [ 1856.990025][T26785] ? __pfx_ksys_write+0x10/0x10 [ 1856.990042][T26785] __x64_sys_bpf+0xba/0xd0 [ 1856.990054][T26785] do_syscall_64+0x166/0x520 [ 1856.990070][T26785] ? trace_irq_disable+0x3b/0x140 [ 1856.990081][T26785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.990091][T26785] ? clear_bhb_loop+0x70/0xc0 [ 1856.990104][T26785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.990122][T26785] RIP: 0033:0x7fc33cf9e0d9 [ 1856.990133][T26785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1856.990143][T26785] RSP: 002b:00007fc33dee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1856.990156][T26785] RAX: ffffffffffffffda RBX: 00007fc33d225fa0 RCX: 00007fc33cf9e0d9 [ 1856.990164][T26785] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 0000000000000000 [ 1856.990171][T26785] RBP: 00007fc33dee3090 R08: 0000000000000000 R09: 0000000000000000 [ 1856.990178][T26785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1856.990184][T26785] R13: 00007fc33d226038 R14: 00007fc33d225fa0 R15: 00007ffc52ab9968 [ 1856.990200][T26785] [ 1857.561606][T26792] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4963'. [ 1857.645832][T26792] fuse: Unknown parameter '' [ 1858.292023][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1859.603074][ T1220] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1859.763139][ T1220] usb 6-1: Using ep0 maxpacket: 8 [ 1859.773141][ T1220] usb 6-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1859.798355][ T1220] usb 6-1: config 3 has an invalid interface number: 45 but max is 0 [ 1859.798393][ T1220] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1859.798427][ T1220] usb 6-1: config 3 has no interface number 0 [ 1859.798469][ T1220] usb 6-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1859.798496][ T1220] usb 6-1: config 3 interface 45 has no altsetting 0 [ 1859.856720][ T1220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.856760][ T1220] usb 6-1: Product: syz [ 1859.856791][ T1220] usb 6-1: Manufacturer: syz [ 1859.856809][ T1220] usb 6-1: SerialNumber: syz [ 1859.894243][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1859.894292][ T30] audit: type=1800 audit(1787699807.001:11965): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=519653 res=0 errno=0 [ 1859.947209][ T30] audit: type=1800 audit(1787699807.051:11966): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=519685 res=0 errno=0 [ 1859.947255][ T30] audit: type=1800 audit(1787699807.051:11967): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=519660 res=0 errno=0 [ 1859.988743][ T30] audit: type=1800 audit(1787699807.071:11968): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=519661 res=0 errno=0 [ 1860.223565][T26802] tmpfs: Unknown parameter 'nr_blo' [ 1860.653380][ T30] audit: type=1800 audit(1787699807.761:11969): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=519682 res=0 errno=0 [ 1860.673918][ T30] audit: type=1800 audit(1787699807.761:11970): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=519683 res=0 errno=0 [ 1860.698086][ T30] audit: type=1800 audit(1787699807.781:11971): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=519662 res=0 errno=0 [ 1860.723981][ T1220] usb 6-1: USB disconnect, device number 37 [ 1860.799753][ T30] audit: type=1800 audit(1787699807.901:11972): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=519684 res=0 errno=0 [ 1860.997499][ T30] audit: type=1800 audit(1787699808.101:11973): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=27059 res=0 errno=0 [ 1861.009607][T26744] udevd[26744]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1861.451885][ T5818] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1861.462824][ T1220] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1861.601863][ T1220] usb 3-1: device descriptor read/64, error -71 [ 1861.622271][ T5818] usb 6-1: Using ep0 maxpacket: 32 [ 1861.623106][ T5818] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1861.625685][ T5818] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1861.625706][ T5818] usb 6-1: config 0 has no interface number 0 [ 1861.642083][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.642106][ T5818] usb 6-1: Product: syz [ 1861.642119][ T5818] usb 6-1: Manufacturer: syz [ 1861.642133][ T5818] usb 6-1: SerialNumber: syz [ 1861.664315][ T5818] usb 6-1: config 0 descriptor?? [ 1861.688860][ T30] audit: type=1800 audit(1787699808.781:11974): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=519850 res=0 errno=0 [ 1861.716938][ T5818] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1861.716985][ T5818] usb 6-1: selecting invalid altsetting 1 [ 1861.717016][ T5818] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1861.752629][ T5818] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1861.752941][ T5818] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1861.752984][ T5818] usb 6-1: media controller created [ 1861.841867][ T1220] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1861.919334][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1861.980154][T26814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.989898][ T1220] usb 3-1: device descriptor read/64, error -71 [ 1861.997783][T26821] FAULT_INJECTION: forcing a failure. [ 1861.997783][T26821] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.997813][T26821] CPU: 0 UID: 0 PID: 26821 Comm: syz.1.4975 Tainted: G L syzkaller #0 PREEMPT(full) [ 1861.997837][T26821] Tainted: [L]=SOFTLOCKUP [ 1861.997844][T26821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1861.997855][T26821] Call Trace: [ 1861.997864][T26821] [ 1861.997871][T26821] dump_stack_lvl+0xe8/0x150 [ 1861.997901][T26821] should_fail_ex+0x3eb/0x540 [ 1861.997933][T26821] should_failslab+0xa8/0x100 [ 1861.997955][T26821] ? vm_area_dup+0x28/0x760 [ 1861.997982][T26821] kmem_cache_alloc_noprof+0xa1/0x600 [ 1861.998010][T26821] ? vm_area_dup+0x28/0x760 [ 1861.998042][T26821] vm_area_dup+0x28/0x760 [ 1861.998065][T26821] ? __split_vma+0x1b7/0xa60 [ 1861.998090][T26821] __split_vma+0x1d7/0xa60 [ 1861.998115][T26821] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1861.998134][T26821] ? arch_stack_walk+0xfb/0x150 [ 1861.998165][T26821] ? __pfx___split_vma+0x10/0x10 [ 1861.998194][T26821] ? stack_trace_save+0xa9/0x100 [ 1861.998211][T26821] ? __pfx_stack_trace_save+0x10/0x10 [ 1861.998227][T26821] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1861.998252][T26821] vms_gather_munmap_vmas+0x322/0x1370 [ 1861.998277][T26821] ? mtree_range_walk+0x707/0x8b0 [ 1861.998303][T26821] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1861.998330][T26821] ? mas_walk+0x37e/0x490 [ 1861.998363][T26821] mmap_region+0x92e/0x2240 [ 1861.998399][T26821] ? __pfx_mmap_region+0x10/0x10 [ 1861.998424][T26821] ? kfree+0x1c5/0x650 [ 1861.998446][T26821] ? process_measurement+0x13ea/0x1c10 [ 1861.998473][T26821] ? __lock_acquire+0x6df/0x2e50 [ 1861.998507][T26821] ? __pfx_process_measurement+0x10/0x10 [ 1861.998569][T26821] ? __asan_memset+0x22/0x50 [ 1861.998594][T26821] ? process_measurement+0x14fb/0x1c10 [ 1861.998637][T26821] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 1861.998664][T26821] ? __lock_acquire+0x6df/0x2e50 [ 1861.998683][T26821] ? cap_mmap_addr+0xaf/0x100 [ 1861.998709][T26821] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1861.998732][T26821] ? security_mmap_addr+0x71/0x240 [ 1861.998760][T26821] ? shmem_mapping+0xd/0x50 [ 1861.998778][T26821] ? memfd_check_seals_mmap+0xc5/0x220 [ 1861.998804][T26821] do_mmap+0xe0a/0x1300 [ 1861.998826][T26821] ? get_pid_task+0x20/0x1f0 [ 1861.998851][T26821] ? __pfx_do_mmap+0x10/0x10 [ 1861.998885][T26821] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 1861.998904][T26821] ? down_write_killable+0x17e/0x240 [ 1861.998927][T26821] ? __pfx_down_write_killable+0x10/0x10 [ 1861.998954][T26821] vm_mmap_pgoff+0x272/0x4e0 [ 1861.998975][T26821] ? lock_acquire+0x115/0x350 [ 1861.998997][T26821] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1861.999019][T26821] ? __fget_files+0x2a/0x420 [ 1861.999046][T26821] ? __fget_files+0x3a2/0x420 [ 1861.999069][T26821] ? __fget_files+0x2a/0x420 [ 1861.999095][T26821] ksys_mmap_pgoff+0x4dc/0x760 [ 1861.999125][T26821] do_syscall_64+0x166/0x520 [ 1861.999155][T26821] ? trace_irq_disable+0x3b/0x140 [ 1861.999174][T26821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.999193][T26821] ? clear_bhb_loop+0x70/0xc0 [ 1861.999215][T26821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.999233][T26821] RIP: 0033:0x7fc33cf9e0d9 [ 1861.999251][T26821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1861.999268][T26821] RSP: 002b:00007fc33dee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1861.999288][T26821] RAX: ffffffffffffffda RBX: 00007fc33d225fa0 RCX: 00007fc33cf9e0d9 [ 1861.999301][T26821] RDX: 0000000001800004 RSI: 0000000000c00000 RDI: 0000200000002000 [ 1861.999313][T26821] RBP: 00007fc33dee3090 R08: 0000000000000003 R09: 0000000000000000 [ 1861.999324][T26821] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 1861.999336][T26821] R13: 00007fc33d226038 R14: 00007fc33d225fa0 R15: 00007ffc52ab9968 [ 1861.999366][T26821] [ 1862.037709][T26814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.096529][ T1220] usb usb3-port1: attempt power cycle [ 1862.512023][ T1220] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1862.532580][ T1220] usb 3-1: device descriptor read/8, error -71 [ 1862.781877][ T1220] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1862.802825][ T1220] usb 3-1: device descriptor read/8, error -71 [ 1862.912581][ T1220] usb usb3-port1: unable to enumerate USB device [ 1863.072994][ T5818] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1863.073068][ T5818] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1863.078490][ T5818] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1863.568006][ T5818] usb 6-1: USB disconnect, device number 38 [ 1863.727073][ T5729] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1863.884909][ T5729] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 1863.930131][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.930171][ T5729] usb 2-1: Product: syz [ 1863.930201][ T5729] usb 2-1: Manufacturer: syz [ 1863.930217][ T5729] usb 2-1: SerialNumber: syz [ 1863.990469][ T5729] usb 2-1: selecting invalid altsetting 1 [ 1864.004379][ T5729] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1864.017866][ T5729] usb 2-1: selecting invalid altsetting 1 [ 1864.025012][ T5729] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1864.037937][ T5729] usb 2-1: selecting invalid altsetting 1 [ 1864.209894][ T5729] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1864.238188][T26834] CIFS: Attempting to mount //::1/share [ 1865.411387][T26834] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1865.411460][T26834] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1865.660821][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 1865.660872][ T30] audit: type=1800 audit(1787699812.761:12045): pid=26830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=520758 res=0 errno=0 [ 1865.703595][ T30] audit: type=1800 audit(1787699812.811:12046): pid=26830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=520790 res=0 errno=0 [ 1865.715246][ T30] audit: type=1800 audit(1787699812.811:12047): pid=26830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=520765 res=0 errno=0 [ 1865.716031][ T30] audit: type=1800 audit(1787699812.811:12048): pid=26830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=520766 res=0 errno=0 [ 1865.745050][ T30] audit: type=1800 audit(1787699812.831:12049): pid=26830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=520787 res=0 errno=0 [ 1865.758230][ T30] audit: type=1800 audit(1787699812.861:12050): pid=26830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=520788 res=0 errno=0 [ 1865.785076][ T30] audit: type=1800 audit(1787699812.881:12051): pid=26830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=520767 res=0 errno=0 [ 1865.798542][ T30] audit: type=1800 audit(1787699812.901:12052): pid=26830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=520789 res=0 errno=0 [ 1866.031258][ T30] audit: type=1800 audit(1787699813.131:12053): pid=26752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=520865 res=0 errno=0 [ 1866.034508][ T30] audit: type=1800 audit(1787699813.131:12054): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=520819 res=0 errno=0 [ 1866.297363][T26744] udevd[26744]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1866.470282][ T5808] usb 2-1: USB disconnect, device number 77 [ 1867.133771][T19948] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1867.286748][T19948] usb 2-1: Using ep0 maxpacket: 8 [ 1867.287856][T19948] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1867.296745][T19948] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 1867.296768][T19948] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1867.296785][T19948] usb 2-1: config 3 has no interface number 0 [ 1867.296823][T19948] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1867.296846][T19948] usb 2-1: config 3 interface 45 has no altsetting 0 [ 1867.309167][T19948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.309189][T19948] usb 2-1: Product: syz [ 1867.309203][T19948] usb 2-1: Manufacturer: syz [ 1867.309216][T19948] usb 2-1: SerialNumber: syz [ 1867.700881][T26855] tmpfs: Unknown parameter 'nr_blo' [ 1868.171017][T19948] usb 2-1: USB disconnect, device number 78 [ 1868.312637][T26744] udevd[26744]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1870.382232][ T1173] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1870.432682][ T5808] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1870.592529][ T5808] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 1870.618869][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.618910][ T5808] usb 6-1: Product: syz [ 1870.618940][ T5808] usb 6-1: Manufacturer: syz [ 1870.618957][ T5808] usb 6-1: SerialNumber: syz [ 1870.663315][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1870.663365][ T30] audit: type=1800 audit(1787699817.771:12069): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=521279 res=0 errno=0 [ 1870.697838][ T5808] usb 6-1: selecting invalid altsetting 1 [ 1870.704871][ T5808] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1870.722042][ T30] audit: type=1800 audit(1787699817.831:12070): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=521311 res=0 errno=0 [ 1870.723523][ T30] audit: type=1800 audit(1787699817.831:12071): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=521286 res=0 errno=0 [ 1870.736638][ T30] audit: type=1800 audit(1787699817.831:12072): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=521287 res=0 errno=0 [ 1870.762966][ T5808] usb 6-1: selecting invalid altsetting 1 [ 1870.804016][ T5808] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1870.821685][ T5808] usb 6-1: selecting invalid altsetting 1 [ 1870.889578][ T5808] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1870.909545][ T30] audit: type=1800 audit(1787699818.011:12073): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=521308 res=0 errno=0 [ 1870.910396][ T30] audit: type=1800 audit(1787699818.011:12074): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=521309 res=0 errno=0 [ 1870.924614][ T30] audit: type=1800 audit(1787699818.011:12075): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=521288 res=0 errno=0 [ 1870.938715][ T30] audit: type=1800 audit(1787699818.031:12076): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=521310 res=0 errno=0 [ 1871.718676][ T30] audit: type=1800 audit(1787699818.821:12077): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=521340 res=0 errno=0 [ 1871.718741][ T30] audit: type=1800 audit(1787699818.821:12078): pid=26752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=521395 res=0 errno=0 [ 1871.946602][T26744] udevd[26744]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1872.715335][T26909] FAULT_INJECTION: forcing a failure. [ 1872.715335][T26909] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.715379][T26909] CPU: 0 UID: 0 PID: 26909 Comm: syz.2.5001 Tainted: G L syzkaller #0 PREEMPT(full) [ 1872.715404][T26909] Tainted: [L]=SOFTLOCKUP [ 1872.715410][T26909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1872.715421][T26909] Call Trace: [ 1872.715428][T26909] [ 1872.715435][T26909] dump_stack_lvl+0xe8/0x150 [ 1872.715462][T26909] should_fail_ex+0x3eb/0x540 [ 1872.715499][T26909] ? __alloc_skb+0x1db/0x7a0 [ 1872.715516][T26909] should_failslab+0xa8/0x100 [ 1872.715539][T26909] ? __alloc_skb+0x1db/0x7a0 [ 1872.715554][T26909] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1872.715580][T26909] ? __alloc_skb+0x18d/0x7a0 [ 1872.715596][T26909] ? __alloc_skb+0x1db/0x7a0 [ 1872.715619][T26909] __alloc_skb+0x1db/0x7a0 [ 1872.715639][T26909] netlink_sendmsg+0x5d4/0xb40 [ 1872.715671][T26909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1872.715700][T26909] ? apparmor_socket_sendmsg+0x98/0x360 [ 1872.715729][T26909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1872.715749][T26909] sock_sendmsg_nosec+0x13a/0x180 [ 1872.715777][T26909] ____sys_sendmsg+0x54e/0x850 [ 1872.715802][T26909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1872.715830][T26909] ? import_iovec+0x73/0xa0 [ 1872.715851][T26909] ___sys_sendmsg+0x2a5/0x360 [ 1872.715870][T26909] ? __lock_acquire+0x6df/0x2e50 [ 1872.715893][T26909] ? __pfx____sys_sendmsg+0x10/0x10 [ 1872.715943][T26909] ? __fget_files+0x2a/0x420 [ 1872.715966][T26909] ? __fget_files+0x3a2/0x420 [ 1872.715998][T26909] __x64_sys_sendmsg+0x1b1/0x290 [ 1872.716020][T26909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1872.716058][T26909] do_syscall_64+0x166/0x520 [ 1872.716087][T26909] ? trace_irq_disable+0x3b/0x140 [ 1872.716104][T26909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.716123][T26909] ? clear_bhb_loop+0x70/0xc0 [ 1872.716144][T26909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.716162][T26909] RIP: 0033:0x7f3a0699e0d9 [ 1872.716179][T26909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1872.716195][T26909] RSP: 002b:00007f3a078be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1872.716214][T26909] RAX: ffffffffffffffda RBX: 00007f3a06c25fa0 RCX: 00007f3a0699e0d9 [ 1872.716228][T26909] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 1872.716240][T26909] RBP: 00007f3a078be090 R08: 0000000000000000 R09: 0000000000000000 [ 1872.716251][T26909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1872.716262][T26909] R13: 00007f3a06c26038 R14: 00007f3a06c25fa0 R15: 00007fffe5750bb8 [ 1872.716290][T26909] [ 1873.078418][T26911] tmpfs: Unknown parameter 'nr_blo' [ 1873.226635][ T5808] usb 6-1: USB disconnect, device number 39 [ 1875.010283][T26930] xt_hashlimit: size too large, truncated to 1048576 [ 1875.250420][T26930] xt_hashlimit: size too large, truncated to 1048576 [ 1875.501113][T26938] netlink: 152 bytes leftover after parsing attributes in process `syz.9.5012'. [ 1875.662298][T26942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5013'. [ 1875.824923][T26945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5013'. [ 1875.824965][T26945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5013'. [ 1876.163181][T26949] autofs: Unknown parameter 'inode_readahead_blks' [ 1876.205820][T26950] tmpfs: Unknown parameter 'nr_blo' [ 1876.773926][T26958] FAULT_INJECTION: forcing a failure. [ 1876.773926][T26958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1876.773974][T26958] CPU: 1 UID: 0 PID: 26958 Comm: syz.6.5019 Tainted: G L syzkaller #0 PREEMPT(full) [ 1876.774000][T26958] Tainted: [L]=SOFTLOCKUP [ 1876.774007][T26958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1876.774018][T26958] Call Trace: [ 1876.774025][T26958] [ 1876.774033][T26958] dump_stack_lvl+0xe8/0x150 [ 1876.774061][T26958] should_fail_ex+0x3eb/0x540 [ 1876.774089][T26958] _copy_from_iter+0x1d3/0x1660 [ 1876.774117][T26958] ? rcu_is_watching+0x16/0xb0 [ 1876.774135][T26958] ? proc_sys_call_handler+0x3d0/0x830 [ 1876.774152][T26958] ? trace_kmalloc+0x2a/0xf0 [ 1876.774174][T26958] ? __pfx__copy_from_iter+0x10/0x10 [ 1876.774195][T26958] ? proc_sys_call_handler+0x3d0/0x830 [ 1876.774210][T26958] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1876.774227][T26958] ? __kvmalloc_node_noprof+0x345/0x820 [ 1876.774241][T26958] ? proc_sys_call_handler+0x3d0/0x830 [ 1876.774256][T26958] ? proc_sys_call_handler+0x3d0/0x830 [ 1876.774276][T26958] proc_sys_call_handler+0x424/0x830 [ 1876.774297][T26958] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1876.774321][T26958] vfs_write+0x612/0xba0 [ 1876.774349][T26958] ? __pfx_vfs_write+0x10/0x10 [ 1876.774377][T26958] ? __fget_files+0x2a/0x420 [ 1876.774403][T26958] ksys_write+0x150/0x270 [ 1876.774425][T26958] ? __pfx_ksys_write+0x10/0x10 [ 1876.774454][T26958] do_syscall_64+0x166/0x520 [ 1876.774474][T26958] ? trace_irq_disable+0x3b/0x140 [ 1876.774489][T26958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.774504][T26958] ? clear_bhb_loop+0x70/0xc0 [ 1876.774523][T26958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.774537][T26958] RIP: 0033:0x7f638c79e0d9 [ 1876.774551][T26958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1876.774564][T26958] RSP: 002b:00007f638d5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1876.774581][T26958] RAX: ffffffffffffffda RBX: 00007f638ca25fa0 RCX: 00007f638c79e0d9 [ 1876.774592][T26958] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003 [ 1876.774601][T26958] RBP: 00007f638d5fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1876.774610][T26958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1876.774619][T26958] R13: 00007f638ca26038 R14: 00007f638ca25fa0 R15: 00007ffd1a80adb8 [ 1876.774643][T26958] [ 1878.694826][T19948] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1879.066249][T19948] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1879.081131][T19948] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1879.081172][T19948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.126041][T19948] usb 6-1: config 0 descriptor?? [ 1879.127106][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1879.127120][ T30] audit: type=1800 audit(1787699826.231:12083): pid=26994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=521507 res=0 errno=0 [ 1879.168062][ T30] audit: type=1800 audit(1787699826.271:12084): pid=26994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=521536 res=0 errno=0 [ 1879.168125][ T30] audit: type=1800 audit(1787699826.271:12085): pid=26994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=521514 res=0 errno=0 [ 1879.181022][ T30] audit: type=1800 audit(1787699826.281:12086): pid=26994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=521515 res=0 errno=0 [ 1879.199036][ T30] audit: type=1800 audit(1787699826.301:12087): pid=26994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=521516 res=0 errno=0 [ 1879.245545][ T30] audit: type=1800 audit(1787699826.351:12088): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=521556 res=0 errno=0 [ 1879.410707][T19948] usb 6-1: USB disconnect, device number 40 [ 1879.564725][T26996] xt_hashlimit: size too large, truncated to 1048576 [ 1879.761829][T26999] tmpfs: Unknown parameter 'nr_blo' [ 1879.774206][T26996] xt_hashlimit: size too large, truncated to 1048576 [ 1880.095916][T19948] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1880.282513][T19948] usb 6-1: Using ep0 maxpacket: 32 [ 1880.283253][T19948] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice= 0.40 [ 1880.285720][T19948] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1880.285767][T19948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.293484][T19948] usb 6-1: config 0 descriptor?? [ 1880.308125][ T30] audit: type=1800 audit(1787699827.401:12089): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=521598 res=0 errno=0 [ 1880.319487][T19948] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 1880.327086][ T30] audit: type=1800 audit(1787699827.431:12090): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=521627 res=0 errno=0 [ 1880.341075][ T30] audit: type=1800 audit(1787699827.431:12091): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=521605 res=0 errno=0 [ 1880.359088][ T30] audit: type=1800 audit(1787699827.451:12092): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=521606 res=0 errno=0 [ 1880.431842][T19948] dvb-usb: bulk message failed: -22 (2/0) [ 1880.431894][T19948] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1880.433152][T19948] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 1880.433208][T19948] usb 6-1: media controller created [ 1880.451682][T19948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1880.520103][T19948] usb 6-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)... [ 1880.520602][T19948] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1880.902666][T19948] rc_core: IR keymap rc-dtt200u not found [ 1880.902705][T19948] Registered IR keymap rc-empty [ 1880.903992][T19948] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1880.937010][T19948] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input67 [ 1880.967908][T19948] dvb-usb: schedule remote query interval to 300 msecs. [ 1880.967952][T19948] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 1882.659454][T19948] dvb-usb: bulk message failed: -22 (1/0) [ 1882.659502][T19948] dvb-usb: error -22 while querying for an remote control event. [ 1883.023646][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1883.023684][ T10] dvb-usb: error -22 while querying for an remote control event. [ 1883.223520][T19947] usb 6-1: USB disconnect, device number 41 [ 1884.499858][T19947] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 1884.833399][T19947] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1885.015299][T19947] usb 6-1: Using ep0 maxpacket: 8 [ 1885.017245][T19947] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1885.027124][T19947] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1885.045001][T19947] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1885.045037][T19947] usb 6-1: Product: syz [ 1885.045066][T19947] usb 6-1: Manufacturer: syz [ 1885.045082][T19947] usb 6-1: SerialNumber: syz [ 1885.100727][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1885.100768][ T30] audit: type=1800 audit(1787699832.201:12110): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=521802 res=0 errno=0 [ 1885.119163][ T30] audit: type=1800 audit(1787699832.211:12111): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=521834 res=0 errno=0 [ 1885.163634][ T30] audit: type=1800 audit(1787699832.271:12112): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=521809 res=0 errno=0 [ 1885.163696][ T30] audit: type=1800 audit(1787699832.271:12113): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=521810 res=0 errno=0 [ 1885.313029][ T30] audit: type=1800 audit(1787699832.411:12114): pid=27022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5038" name="enable" dev="configfs" ino=107841 res=0 errno=0 [ 1885.392029][T19947] usb 6-1: Invalid connection information received from device [ 1885.415449][ T30] audit: type=1800 audit(1787699832.521:12115): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=521831 res=0 errno=0 [ 1885.415507][ T30] audit: type=1800 audit(1787699832.521:12116): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=521832 res=0 errno=0 [ 1885.434612][ T30] audit: type=1800 audit(1787699832.521:12117): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=521811 res=0 errno=0 [ 1885.435542][ T30] audit: type=1800 audit(1787699832.521:12118): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=521833 res=0 errno=0 [ 1885.623081][ T30] audit: type=1800 audit(1787699832.721:12119): pid=26988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=521863 res=0 errno=0 [ 1885.655509][ T1220] usb 6-1: USB disconnect, device number 42 [ 1886.245015][T27041] tmpfs: Unknown parameter 'nr_blo' [ 1887.624786][T27054] 9pnet_virtio: no channels available for device syz [ 1890.728343][T27082] misc userio: No port type given on /dev/userio [ 1891.012855][T19948] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1891.142951][T19948] usb 6-1: device descriptor read/64, error -71 [ 1891.387208][T19948] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1891.512096][T19948] usb 6-1: device descriptor read/64, error -71 [ 1891.531860][ T5808] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1891.623789][T19948] usb usb6-port1: attempt power cycle [ 1891.682066][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 1891.689827][ T5808] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1891.704612][ T5808] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1891.713409][ T5808] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1891.713453][ T5808] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1891.713476][ T5808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1891.713497][ T5808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1891.713518][ T5808] usb 3-1: config 0 has no interface number 0 [ 1891.713557][ T5808] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1891.713586][ T5808] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1891.713610][ T5808] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1891.713645][ T5808] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1891.713672][ T5808] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1891.819840][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.819880][ T5808] usb 3-1: Product: syz [ 1891.819910][ T5808] usb 3-1: Manufacturer: syz [ 1891.819927][ T5808] usb 3-1: SerialNumber: syz [ 1891.845957][ T5808] usb 3-1: config 0 descriptor?? [ 1891.853838][ T30] audit: type=1800 audit(1787699838.961:12120): pid=27037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=521989 res=0 errno=0 [ 1891.877167][ T30] audit: type=1800 audit(1787699838.981:12121): pid=27037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=522021 res=0 errno=0 [ 1891.907664][ T30] audit: type=1800 audit(1787699839.011:12122): pid=27037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=521996 res=0 errno=0 [ 1891.925772][ T30] audit: type=1800 audit(1787699839.011:12123): pid=27037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=521997 res=0 errno=0 [ 1891.960019][ T30] audit: type=1800 audit(1787699839.061:12124): pid=27037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=522018 res=0 errno=0 [ 1891.960088][ T30] audit: type=1800 audit(1787699839.061:12125): pid=27037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=522019 res=0 errno=0 [ 1891.972984][ T30] audit: type=1800 audit(1787699839.061:12126): pid=27037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=521998 res=0 errno=0 [ 1892.002191][ T30] audit: type=1800 audit(1787699839.061:12127): pid=27037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=522020 res=0 errno=0 [ 1892.005458][T19948] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1892.036775][T19948] usb 6-1: device descriptor read/8, error -71 [ 1892.055639][ T30] audit: type=1800 audit(1787699839.151:12128): pid=27037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522041 res=0 errno=0 [ 1892.264007][T19948] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1892.286313][T19948] usb 6-1: device descriptor read/8, error -71 [ 1892.392421][T19948] usb usb6-port1: unable to enumerate USB device [ 1892.598083][T27106] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5062'. [ 1892.609285][ T5808] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1892.766325][ T5808] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1892.788221][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.811072][ T30] audit: type=1800 audit(1787699839.911:12129): pid=27037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522207 res=0 errno=0 [ 1892.975759][ T5808] i2c-tiny-usb 2-1:1.0: version 1.00 found at bus 002 address 079 [ 1893.717998][T27102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1893.747069][T27102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1893.749098][ T5808] (null): failure reading functionality [ 1893.801720][ T5808] i2c i2c-2: failure reading functionality [ 1893.814478][ T5808] i2c i2c-2: connected i2c-tiny-usb device [ 1893.853389][ T5808] usb 2-1: USB disconnect, device number 79 [ 1894.321615][T23763] usb 3-1: USB disconnect, device number 48 [ 1894.522715][ T1220] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1894.678713][ T1220] usb 7-1: Using ep0 maxpacket: 8 [ 1894.688474][ T1220] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1894.707524][ T1220] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1894.722410][ T1220] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1894.722450][ T1220] usb 7-1: Product: syz [ 1894.722478][ T1220] usb 7-1: Manufacturer: syz [ 1894.722496][ T1220] usb 7-1: SerialNumber: syz [ 1895.705511][ T1220] usb 7-1: palm_os_3_probe - error -110 getting connection information [ 1895.705614][ T1220] visor 7-1:1.0: probe with driver visor failed with error -110 [ 1895.970405][T19947] usb 7-1: USB disconnect, device number 77 [ 1896.263255][T27139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5071'. [ 1896.263424][T27139] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5071'. [ 1896.561948][ T1220] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1896.711984][ T1220] usb 2-1: Using ep0 maxpacket: 32 [ 1896.715628][ T1220] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1896.723347][ T1220] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1896.723370][ T1220] usb 2-1: config 0 has no interface number 0 [ 1896.750197][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.750229][ T1220] usb 2-1: Product: syz [ 1896.750264][ T1220] usb 2-1: Manufacturer: syz [ 1896.750277][ T1220] usb 2-1: SerialNumber: syz [ 1896.768946][ T1220] usb 2-1: config 0 descriptor?? [ 1896.791206][ T1220] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1896.791243][ T1220] usb 2-1: selecting invalid altsetting 1 [ 1896.807799][ T1220] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1896.856200][ T1220] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1896.856543][ T1220] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1896.856587][ T1220] usb 2-1: media controller created [ 1896.974542][ T1220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1897.085962][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1897.086017][ T30] audit: type=1800 audit(1787699844.191:12152): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522541 res=0 errno=0 [ 1897.116436][ T30] audit: type=1800 audit(1787699844.201:12153): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522553 res=0 errno=0 [ 1897.136568][ T30] audit: type=1800 audit(1787699844.241:12154): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522565 res=0 errno=0 [ 1897.154939][T27141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.156527][ T30] audit: type=1800 audit(1787699844.251:12155): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522587 res=0 errno=0 [ 1897.184764][T27141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.244621][ T30] audit: type=1800 audit(1787699844.351:12156): pid=27144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522602 res=0 errno=0 [ 1897.297346][ T30] audit: type=1800 audit(1787699844.381:12157): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522614 res=0 errno=0 [ 1897.297393][ T30] audit: type=1800 audit(1787699844.401:12158): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522632 res=0 errno=0 [ 1897.349619][ T30] audit: type=1800 audit(1787699844.451:12159): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522644 res=0 errno=0 [ 1897.371605][ T30] audit: type=1800 audit(1787699844.471:12160): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522656 res=0 errno=0 [ 1897.377905][T27145] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5074'. [ 1897.404847][ T30] audit: type=1800 audit(1787699844.511:12161): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=522668 res=0 errno=0 [ 1898.168263][ T1220] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1898.168334][ T1220] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1898.170227][ T1220] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1898.546413][ T1220] usb 2-1: USB disconnect, device number 80 [ 1901.531866][ T44] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1901.692546][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 1901.694282][ T44] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1901.710024][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1901.770673][ T44] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1901.770719][ T44] usb 2-1: Product: syz [ 1901.770758][ T44] usb 2-1: Manufacturer: syz [ 1901.770770][ T44] usb 2-1: SerialNumber: syz [ 1902.022224][T22611] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1902.192270][ T44] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 1902.192363][ T44] visor 2-1:1.0: probe with driver visor failed with error -110 [ 1902.208341][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1902.208352][ T30] audit: type=1800 audit(1787699849.301:12223): pid=27169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=523371 res=0 errno=0 [ 1902.208378][ T30] audit: type=1800 audit(1787699849.301:12224): pid=27169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=523372 res=0 errno=0 [ 1902.221952][ T30] audit: type=1800 audit(1787699849.321:12225): pid=27169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=523351 res=0 errno=0 [ 1902.221995][ T30] audit: type=1800 audit(1787699849.321:12226): pid=27169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=523373 res=0 errno=0 [ 1902.313458][ T5751] usb 2-1: USB disconnect, device number 81 [ 1906.264896][ T1220] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1906.413070][ T1220] usb 7-1: Using ep0 maxpacket: 8 [ 1906.419658][ T1220] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1906.436489][ T1220] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1906.450684][ T1220] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1906.450729][ T1220] usb 7-1: Product: syz [ 1906.450757][ T1220] usb 7-1: Manufacturer: syz [ 1906.450775][ T1220] usb 7-1: SerialNumber: syz [ 1906.501187][ T30] audit: type=1800 audit(1787699853.601:12227): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=523447 res=0 errno=0 [ 1906.544445][ T30] audit: type=1800 audit(1787699853.651:12228): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=523479 res=0 errno=0 [ 1906.544510][ T30] audit: type=1800 audit(1787699853.651:12229): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=523454 res=0 errno=0 [ 1906.561472][ T30] audit: type=1800 audit(1787699853.651:12230): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=523455 res=0 errno=0 [ 1906.853684][ T30] audit: type=1800 audit(1787699853.961:12231): pid=27226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5084" name="enable" dev="configfs" ino=109105 res=0 errno=0 [ 1906.865951][ T1220] usb 7-1: palm_os_3_probe - error -110 getting connection information [ 1906.866032][ T1220] visor 7-1:1.0: probe with driver visor failed with error -110 [ 1906.870988][ T30] audit: type=1800 audit(1787699853.961:12232): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=523476 res=0 errno=0 [ 1909.065585][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1909.065638][ T30] audit: type=1326 audit(1787699856.171:12237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27256 comm="syz.2.5113" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a0699e0d9 code=0xffff0000 [ 1909.268747][T23763] usb 7-1: USB disconnect, device number 78 [ 1911.692082][T19947] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1911.862604][T19947] usb 7-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 1911.875142][T19947] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1911.900799][T19947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.914394][T19947] usb 7-1: Product: syz [ 1911.914439][T19947] usb 7-1: Manufacturer: syz [ 1911.914458][T19947] usb 7-1: SerialNumber: syz [ 1911.948432][ T30] audit: type=1800 audit(1787699859.051:12238): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=523552 res=0 errno=0 [ 1911.996859][ T30] audit: type=1800 audit(1787699859.101:12239): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=523584 res=0 errno=0 [ 1912.017631][ T30] audit: type=1800 audit(1787699859.101:12240): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=523559 res=0 errno=0 [ 1912.017682][ T30] audit: type=1800 audit(1787699859.101:12241): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=523560 res=0 errno=0 [ 1913.615252][T27294] program syz.1.5128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1913.625032][T27294] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1914.439409][T19947] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1914.448132][T19947] usb 7-1: unit 5 not found! [ 1914.615786][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.615864][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.678915][ T30] audit: type=1800 audit(1787699861.781:12242): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=523581 res=0 errno=0 [ 1914.678985][ T30] audit: type=1800 audit(1787699861.781:12243): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=523582 res=0 errno=0 [ 1914.699890][ T30] audit: type=1800 audit(1787699861.781:12244): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=523561 res=0 errno=0 [ 1914.699937][ T30] audit: type=1800 audit(1787699861.781:12245): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=523583 res=0 errno=0 [ 1914.762189][T19947] usb 7-1: USB disconnect, device number 79 [ 1914.937037][T27229] udevd[27229]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1915.059569][ T30] audit: type=1800 audit(1787699862.161:12246): pid=27308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5133" name="file1" dev="tmpfs" ino=3251 res=0 errno=0 [ 1915.179273][T27316] macvtap0: entered promiscuous mode [ 1915.179343][T27316] vlan0: entered promiscuous mode [ 1915.179818][T27316] macvtap0: entered allmulticast mode [ 1915.179833][T27316] vlan0: entered allmulticast mode [ 1915.179843][T27316] veth0_vlan: entered allmulticast mode [ 1915.362930][T27318] macvtap1: entered promiscuous mode [ 1915.370499][T27318] macvtap1: entered allmulticast mode [ 1915.612654][ T30] audit: type=1800 audit(1787699862.721:12247): pid=27321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5137" name="enable" dev="configfs" ino=109601 res=0 errno=0 [ 1915.921314][T27326] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5138'. [ 1916.062812][T27328] trusted_key: encrypted_key: master key parameter '' is invalid [ 1917.314859][T27342] binder: 27341:27342 ioctl 1274 0 returned -22 [ 1918.088751][T19947] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1918.268643][T27350] FAULT_INJECTION: forcing a failure. [ 1918.268643][T27350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1918.268691][T27350] CPU: 0 UID: 0 PID: 27350 Comm: syz.2.5147 Tainted: G L syzkaller #0 PREEMPT(full) [ 1918.268717][T27350] Tainted: [L]=SOFTLOCKUP [ 1918.268724][T27350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1918.268734][T27350] Call Trace: [ 1918.268742][T27350] [ 1918.268750][T27350] dump_stack_lvl+0xe8/0x150 [ 1918.268782][T27350] should_fail_ex+0x3eb/0x540 [ 1918.268815][T27350] _copy_to_iter+0x1e4/0x1810 [ 1918.268842][T27350] ? __pfx_filemap_get_entry+0x10/0x10 [ 1918.268874][T27350] ? aa_file_perm+0x18b/0x15f0 [ 1918.268896][T27350] ? __pfx__copy_to_iter+0x10/0x10 [ 1918.268923][T27350] ? folio_mark_accessed+0x425/0x8b0 [ 1918.268950][T27350] ? __pfx_folio_mark_accessed+0x10/0x10 [ 1918.268981][T27350] copy_page_to_iter+0x23f/0x330 [ 1918.269012][T27350] shmem_file_read_iter+0x4f2/0x8a0 [ 1918.269050][T27350] do_iter_readv_writev+0x612/0x8c0 [ 1918.269081][T27350] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1918.269117][T27350] ? rw_verify_area+0x24a/0x4c0 [ 1918.269147][T27350] vfs_readv+0x28d/0x850 [ 1918.269176][T27350] ? __pfx_vfs_readv+0x10/0x10 [ 1918.269209][T27350] ? __fget_files+0x2a/0x420 [ 1918.269238][T27350] ? __fget_files+0x3a2/0x420 [ 1918.269260][T27350] ? __fget_files+0x2a/0x420 [ 1918.269292][T27350] __x64_sys_preadv+0x19c/0x2b0 [ 1918.269312][T27350] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1918.269341][T27350] do_syscall_64+0x166/0x520 [ 1918.269367][T27350] ? trace_irq_disable+0x3b/0x140 [ 1918.269387][T27350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.269407][T27350] ? clear_bhb_loop+0x70/0xc0 [ 1918.269430][T27350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.269448][T27350] RIP: 0033:0x7f3a0699e0d9 [ 1918.269465][T27350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1918.269481][T27350] RSP: 002b:00007f3a078be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1918.269501][T27350] RAX: ffffffffffffffda RBX: 00007f3a06c25fa0 RCX: 00007f3a0699e0d9 [ 1918.269515][T27350] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000003 [ 1918.269527][T27350] RBP: 00007f3a078be090 R08: 0000000000000000 R09: 0000000000000000 [ 1918.269545][T27350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1918.269557][T27350] R13: 00007f3a06c26038 R14: 00007f3a06c25fa0 R15: 00007fffe5750bb8 [ 1918.269586][T27350] [ 1918.291979][T19947] usb 2-1: Using ep0 maxpacket: 32 [ 1918.292751][T19947] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1918.293896][T19947] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1918.296244][T19947] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1918.296266][T19947] usb 2-1: Product: syz [ 1918.296280][T19947] usb 2-1: Manufacturer: syz [ 1918.296293][T19947] usb 2-1: SerialNumber: syz [ 1918.318570][T19947] usb 2-1: config 0 descriptor?? [ 1918.319258][T27345] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1918.329429][ T30] audit: type=1800 audit(1787699865.431:12248): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524031 res=0 errno=0 [ 1918.363867][ T30] audit: type=1800 audit(1787699865.471:12249): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=524063 res=0 errno=0 [ 1918.494170][ T30] audit: type=1800 audit(1787699865.601:12250): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=524038 res=0 errno=0 [ 1918.524847][ T30] audit: type=1800 audit(1787699865.621:12251): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=524039 res=0 errno=0 [ 1919.078489][T27359] binder: 27357:27359 ioctl c038586a 200000000140 returned -22 [ 1919.722086][T19948] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1919.875959][T19948] usb 6-1: Using ep0 maxpacket: 8 [ 1919.876771][T19948] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1919.877838][T19948] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1919.883406][T19948] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1919.883427][T19948] usb 6-1: Product: syz [ 1919.883441][T19948] usb 6-1: Manufacturer: syz [ 1919.883455][T19948] usb 6-1: SerialNumber: syz [ 1919.904766][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1919.904781][ T30] audit: type=1800 audit(1787699867.011:12258): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524157 res=0 errno=0 [ 1919.938177][ T30] audit: type=1800 audit(1787699867.041:12259): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=524189 res=0 errno=0 [ 1919.938241][ T30] audit: type=1800 audit(1787699867.041:12260): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=524164 res=0 errno=0 [ 1919.949145][ T30] audit: type=1800 audit(1787699867.051:12261): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=524165 res=0 errno=0 [ 1920.135218][T19947] usb 2-1: USB disconnect, device number 82 [ 1920.233044][T19948] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 1920.233150][T19948] visor 6-1:1.0: probe with driver visor failed with error -110 [ 1920.246467][ T30] audit: type=1800 audit(1787699867.351:12262): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=524186 res=0 errno=0 [ 1920.247847][ T30] audit: type=1800 audit(1787699867.351:12263): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=524187 res=0 errno=0 [ 1920.263845][ T30] audit: type=1800 audit(1787699867.361:12264): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=524166 res=0 errno=0 [ 1920.263889][ T30] audit: type=1800 audit(1787699867.361:12265): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=524188 res=0 errno=0 [ 1920.400326][ T30] audit: type=1800 audit(1787699867.501:12266): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524218 res=0 errno=0 [ 1920.951414][T27384] netlink: 384 bytes leftover after parsing attributes in process `syz.6.5159'. [ 1920.990553][T27384] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5159'. [ 1920.990884][T27386] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5159'. [ 1921.145797][ T30] audit: type=1800 audit(1787699868.251:12267): pid=27376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5157" name="file1" dev="tmpfs" ino=1880 res=0 errno=0 [ 1921.732226][T27396] IPVS: set_ctl: invalid protocol: 50 172.30.1.10:20001 [ 1922.589715][ T5751] usb 6-1: USB disconnect, device number 47 [ 1922.607718][T27408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1923.153061][T23763] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1923.293628][T23763] usb 6-1: device descriptor read/64, error -71 [ 1923.602052][T23763] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1923.732345][T23763] usb 6-1: device descriptor read/64, error -71 [ 1923.843337][T23763] usb usb6-port1: attempt power cycle [ 1924.213560][T23763] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1924.243594][T23763] usb 6-1: device descriptor read/8, error -71 [ 1924.481925][T23763] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1924.511865][T23763] usb 6-1: device descriptor read/8, error -71 [ 1924.623435][T23763] usb usb6-port1: unable to enumerate USB device [ 1926.737325][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1926.737366][ T30] audit: type=1800 audit(1787699873.841:12271): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524347 res=0 errno=0 [ 1926.764489][T23763] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1926.909484][T27466] fuse: Invalid rootmode [ 1926.922456][T23763] usb 7-1: Using ep0 maxpacket: 8 [ 1926.928096][T27462] veth0_to_bond: entered allmulticast mode [ 1926.936458][T23763] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1926.959418][T23763] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1926.972233][T23763] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1926.972271][T23763] usb 7-1: Product: syz [ 1926.972288][T23763] usb 7-1: Manufacturer: syz [ 1926.972304][T23763] usb 7-1: SerialNumber: syz [ 1927.016143][ T30] audit: type=1800 audit(1787699874.121:12272): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524443 res=0 errno=0 [ 1927.069275][ T30] audit: type=1800 audit(1787699874.171:12273): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=524475 res=0 errno=0 [ 1927.084987][ T30] audit: type=1800 audit(1787699874.191:12274): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=524450 res=0 errno=0 [ 1927.104461][ T30] audit: type=1800 audit(1787699874.211:12275): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=524451 res=0 errno=0 [ 1928.116796][T23763] usb 7-1: palm_os_3_probe - error -110 getting connection information [ 1928.116899][T23763] visor 7-1:1.0: probe with driver visor failed with error -110 [ 1928.147719][ T30] audit: type=1800 audit(1787699875.251:12276): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=524472 res=0 errno=0 [ 1928.147784][ T30] audit: type=1800 audit(1787699875.251:12277): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=524473 res=0 errno=0 [ 1928.203888][ T30] audit: type=1800 audit(1787699875.311:12278): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=524452 res=0 errno=0 [ 1928.242939][ T30] audit: type=1800 audit(1787699875.311:12279): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=524474 res=0 errno=0 [ 1928.401394][ T30] audit: type=1800 audit(1787699875.501:12280): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524504 res=0 errno=0 [ 1930.187231][ T5808] usb 7-1: USB disconnect, device number 80 [ 1931.795758][ T30] audit: type=1800 audit(1787699878.891:12281): pid=27500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5193" name="add_local_port" dev="sysfs" ino=21888 res=0 errno=0 [ 1931.875928][T27501] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5191'. [ 1932.846512][T27516] FAULT_INJECTION: forcing a failure. [ 1932.846512][T27516] name failslab, interval 1, probability 0, space 0, times 0 [ 1932.860339][T27516] CPU: 1 UID: 0 PID: 27516 Comm: syz.5.5197 Tainted: G L syzkaller #0 PREEMPT(full) [ 1932.860371][T27516] Tainted: [L]=SOFTLOCKUP [ 1932.860378][T27516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1932.860389][T27516] Call Trace: [ 1932.860397][T27516] [ 1932.860406][T27516] dump_stack_lvl+0xe8/0x150 [ 1932.860439][T27516] should_fail_ex+0x3eb/0x540 [ 1932.860471][T27516] should_failslab+0xa8/0x100 [ 1932.860495][T27516] __kmalloc_noprof+0xfe/0x720 [ 1932.860522][T27516] ? rcu_is_watching+0x16/0xb0 [ 1932.860544][T27516] ? tomoyo_realpath_from_path+0xef/0x640 [ 1932.860565][T27516] ? tomoyo_realpath_from_path+0xef/0x640 [ 1932.860593][T27516] tomoyo_realpath_from_path+0xef/0x640 [ 1932.860627][T27516] tomoyo_mount_permission+0x3e9/0x9e0 [ 1932.860646][T27516] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 1932.860671][T27516] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1932.860689][T27516] ? kasan_save_track+0x4f/0x80 [ 1932.860755][T27516] ? kasan_quarantine_put+0xbb/0x1f0 [ 1932.860776][T27516] security_sb_mount+0xe4/0x320 [ 1932.860808][T27516] path_mount+0xbc/0x1050 [ 1932.860836][T27516] ? user_path_at+0xd4/0x160 [ 1932.860864][T27516] __se_sys_mount+0x31d/0x420 [ 1932.860894][T27516] ? __pfx___se_sys_mount+0x10/0x10 [ 1932.860924][T27516] ? __x64_sys_mount+0x20/0xc0 [ 1932.860950][T27516] do_syscall_64+0x166/0x520 [ 1932.860976][T27516] ? trace_irq_disable+0x3b/0x140 [ 1932.860995][T27516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.861016][T27516] ? clear_bhb_loop+0x70/0xc0 [ 1932.861039][T27516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.861058][T27516] RIP: 0033:0x7f3fe379e0d9 [ 1932.861075][T27516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1932.861090][T27516] RSP: 002b:00007f3fe46e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1932.861111][T27516] RAX: ffffffffffffffda RBX: 00007f3fe3a25fa0 RCX: 00007f3fe379e0d9 [ 1932.861126][T27516] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 1932.861138][T27516] RBP: 00007f3fe46e1090 R08: 00002000000000c0 R09: 0000000000000000 [ 1932.861151][T27516] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1932.861163][T27516] R13: 00007f3fe3a26038 R14: 00007f3fe3a25fa0 R15: 00007ffd96bf8ab8 [ 1932.861194][T27516] [ 1932.981250][T27516] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1933.050704][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1937.130785][T27542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1939.241953][T19947] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1939.371837][T19947] usb 7-1: device descriptor read/64, error -71 [ 1939.820004][T19947] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1939.955988][T19947] usb 7-1: device descriptor read/64, error -71 [ 1940.065853][T19947] usb usb7-port1: attempt power cycle [ 1940.403511][T19947] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1940.425982][T19947] usb 7-1: device descriptor read/8, error -71 [ 1940.662517][T19947] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1940.683084][T19947] usb 7-1: device descriptor read/8, error -71 [ 1940.715863][T27570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5211'. [ 1940.792067][T19947] usb usb7-port1: unable to enumerate USB device [ 1942.167738][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1942.167783][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1942.167818][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2642 instead [ 1942.167839][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x93be instead [ 1942.167858][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1942.167877][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1942.167896][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1942.167919][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1942.167952][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1942.167985][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1942.168007][T27576] jffs2: Further such events for this erase block will not be printed [ 1942.168352][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1942.168372][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1942.168392][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2642 instead [ 1942.168415][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x93be instead [ 1942.168433][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1942.235109][ T30] audit: type=1804 audit(1787699889.341:12282): pid=27580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5212" name="/newroot/108/file0" dev="tmpfs" ino=610 res=1 errno=0 [ 1942.270181][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1942.270204][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1942.270224][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1942.270255][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1942.270285][T27576] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1942.270301][T27576] jffs2: Further such events for this erase block will not be printed [ 1942.270669][T27576] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1942.270679][T27576] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1942.402317][T27576] Invalid argument reading file caps for ./file0 [ 1945.151873][T23763] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1945.313115][T23763] usb 2-1: Using ep0 maxpacket: 8 [ 1945.318806][T23763] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1945.335189][T23763] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1945.358030][T23763] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1945.358078][T23763] usb 2-1: Product: syz [ 1945.358108][T23763] usb 2-1: Manufacturer: syz [ 1945.358125][T23763] usb 2-1: SerialNumber: syz [ 1945.395170][ T30] audit: type=1800 audit(1787699892.501:12283): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524630 res=0 errno=0 [ 1945.420699][ T30] audit: type=1800 audit(1787699892.521:12284): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=524662 res=0 errno=0 [ 1945.420756][ T30] audit: type=1800 audit(1787699892.521:12285): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=524637 res=0 errno=0 [ 1945.438271][ T30] audit: type=1800 audit(1787699892.541:12286): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=524638 res=0 errno=0 [ 1945.484297][ T30] audit: type=1800 audit(1787699892.591:12287): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524708 res=0 errno=0 [ 1945.504617][ T30] audit: type=1800 audit(1787699892.611:12288): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524723 res=0 errno=0 [ 1945.686917][T23763] usb 2-1: Invalid connection information received from device [ 1945.699549][ T30] audit: type=1800 audit(1787699892.801:12289): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=524659 res=0 errno=0 [ 1945.720939][ T30] audit: type=1800 audit(1787699892.801:12290): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=524660 res=0 errno=0 [ 1945.720988][ T30] audit: type=1800 audit(1787699892.821:12291): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=524639 res=0 errno=0 [ 1946.664216][T19947] usb 2-1: USB disconnect, device number 83 [ 1946.900849][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1946.912749][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1946.924493][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2642 instead [ 1946.926318][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x93be instead [ 1946.926338][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1946.926353][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1946.941985][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1946.942010][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1946.942040][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1946.942070][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1946.942085][T27628] jffs2: Further such events for this erase block will not be printed [ 1946.942413][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1946.942431][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1946.942447][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2642 instead [ 1946.942465][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x93be instead [ 1946.942481][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1946.942496][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1946.942512][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1946.942531][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1946.942561][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1946.942591][T27628] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1946.942607][T27628] jffs2: Further such events for this erase block will not be printed [ 1946.942961][T27628] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1946.942971][T27628] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1947.052790][T27628] Invalid argument reading file caps for ./file0 [ 1948.610516][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1948.610564][ T30] audit: type=1800 audit(1787699895.711:12295): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524759 res=0 errno=0 [ 1948.623764][ T30] audit: type=1800 audit(1787699895.731:12296): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524774 res=0 errno=0 [ 1951.084242][ T5808] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1951.251930][ T5808] usb 2-1: Using ep0 maxpacket: 8 [ 1951.259012][ T5808] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1951.272507][ T5808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1951.285105][ T5808] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1951.293300][ T5808] usb 2-1: Product: syz [ 1951.298945][ T5808] usb 2-1: Manufacturer: syz [ 1951.303997][ T5808] usb 2-1: SerialNumber: syz [ 1951.319258][ T30] audit: type=1800 audit(1787699898.421:12297): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524797 res=0 errno=0 [ 1951.334840][ T30] audit: type=1800 audit(1787699898.441:12298): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=524829 res=0 errno=0 [ 1951.343897][ T30] audit: type=1800 audit(1787699898.451:12299): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=524804 res=0 errno=0 [ 1951.358895][ T30] audit: type=1800 audit(1787699898.461:12300): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=524805 res=0 errno=0 [ 1951.712637][ T5808] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 1951.721168][ T5808] visor 2-1:1.0: probe with driver visor failed with error -110 [ 1951.739576][ T30] audit: type=1800 audit(1787699898.841:12301): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=524826 res=0 errno=0 [ 1951.739638][ T30] audit: type=1800 audit(1787699898.841:12302): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=524827 res=0 errno=0 [ 1951.742245][ T30] audit: type=1800 audit(1787699898.851:12303): pid=27687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5240" name="enable" dev="configfs" ino=111261 res=0 errno=0 [ 1951.752200][ T30] audit: type=1800 audit(1787699898.861:12304): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=524806 res=0 errno=0 [ 1952.474241][T27707] overlayfs: failed to clone upperpath [ 1953.933624][T19948] usb 2-1: USB disconnect, device number 84 [ 1954.318851][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1954.318904][ T30] audit: type=1800 audit(1787699901.421:12307): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524894 res=0 errno=0 [ 1954.345044][ T30] audit: type=1800 audit(1787699901.451:12308): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524905 res=0 errno=0 [ 1954.353283][T24492] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1954.368737][T24492] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1954.397626][T24492] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1954.415956][T24492] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1954.425384][T24492] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1954.500684][ T30] audit: type=1800 audit(1787699901.601:12309): pid=27583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524935 res=0 errno=0 [ 1954.521923][ T30] audit: type=1800 audit(1787699901.601:12310): pid=27585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=524924 res=0 errno=0 [ 1954.775406][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1954.775453][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1954.775477][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2642 instead [ 1954.775493][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x93be instead [ 1954.775505][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1954.775518][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1954.775530][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1954.775547][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1954.775576][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1954.775605][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1954.775620][T27722] jffs2: Further such events for this erase block will not be printed [ 1954.775933][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1954.775950][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1954.775966][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2642 instead [ 1954.775983][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x93be instead [ 1954.775999][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1954.776015][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1954.776031][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1954.776051][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1954.776081][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1954.776110][T27722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1954.776125][T27722] jffs2: Further such events for this erase block will not be printed [ 1954.781438][T27722] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1954.781451][T27722] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1954.793211][ T30] audit: type=1804 audit(1787699901.901:12311): pid=27722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5239" name="/newroot/116/file0" dev="tmpfs" ino=653 res=1 errno=0 [ 1954.957406][T27722] Invalid argument reading file caps for ./file0 [ 1955.343476][ T5808] usb 7-1: new full-speed USB device number 85 using dummy_hcd [ 1955.503751][ T5808] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 1955.581838][ T5808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.582057][ T5808] usb 7-1: Product: syz [ 1955.582091][ T5808] usb 7-1: Manufacturer: syz [ 1955.582109][ T5808] usb 7-1: SerialNumber: syz [ 1955.607092][ T30] audit: type=1800 audit(1787699902.711:12312): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=525106 res=0 errno=0 [ 1955.618410][ T30] audit: type=1800 audit(1787699902.721:12313): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=525138 res=0 errno=0 [ 1955.628489][ T30] audit: type=1800 audit(1787699902.731:12314): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=525113 res=0 errno=0 [ 1955.640523][ T30] audit: type=1800 audit(1787699902.741:12315): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=525114 res=0 errno=0 [ 1955.697034][ T5808] usb 7-1: selecting invalid altsetting 1 [ 1955.698433][ T5808] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1955.709584][T27732] FAULT_INJECTION: forcing a failure. [ 1955.709584][T27732] name failslab, interval 1, probability 0, space 0, times 0 [ 1955.709611][T27732] CPU: 0 UID: 0 PID: 27732 Comm: syz.1.5254 Tainted: G L syzkaller #0 PREEMPT(full) [ 1955.709635][T27732] Tainted: [L]=SOFTLOCKUP [ 1955.709642][T27732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1955.709654][T27732] Call Trac ** replaying previous printk message ** [ 1955.709654][T27732] Call Trace: [ 1955.709661][T27732] [ 1955.709669][T27732] dump_stack_lvl+0xe8/0x150 [ 1955.709701][T27732] should_fail_ex+0x3eb/0x540 [ 1955.709733][T27732] should_failslab+0xa8/0x100 [ 1955.709758][T27732] __kmalloc_noprof+0xfe/0x720 [ 1955.709788][T27732] ? alloc_trace_uprobe+0x32/0x2a0 [ 1955.709804][T27732] ? alloc_trace_uprobe+0x32/0x2a0 [ 1955.709828][T27732] alloc_trace_uprobe+0x32/0x2a0 [ 1955.709849][T27732] __trace_uprobe_create+0x9b8/0xe40 [ 1955.709875][T27732] ? trace_kmalloc+0x2a/0xf0 [ 1955.709901][T27732] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1955.709920][T27732] ? __kmalloc_noprof+0x38c/0x720 [ 1955.709946][T27732] ? __kmalloc_noprof+0x1ab/0x720 [ 1955.709970][T27732] ? argv_split+0x18d/0x400 [ 1955.709994][T27732] ? argv_split+0x18d/0x400 [ 1955.710025][T27732] ? argv_split+0x378/0x400 [ 1955.710056][T27732] trace_probe_create+0xce/0x130 [ 1955.710084][T27732] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1955.710102][T27732] ? __pfx_trace_probe_create+0x10/0x10 [ 1955.710133][T27732] ? __might_fault+0xaf/0x130 [ 1955.710159][T27732] dyn_event_create+0x59/0x80 [ 1955.710182][T27732] create_or_delete_trace_uprobe+0x65/0xa0 [ 1955.710202][T27732] trace_parse_run_command+0x1f3/0x380 [ 1955.710222][T27732] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 1955.710243][T27732] ? __pfx_probes_write+0x10/0x10 [ 1955.710261][T27732] vfs_write+0x296/0xba0 [ 1955.710295][T27732] ? __pfx_vfs_write+0x10/0x10 [ 1955.710323][T27732] ? __fget_files+0x2a/0x420 [ 1955.710351][T27732] ? __fget_files+0x3a2/0x420 [ 1955.710372][T27732] ? __fget_files+0x2a/0x420 [ 1955.710411][T27732] ksys_write+0x150/0x270 [ 1955.710441][T27732] ? __pfx_ksys_write+0x10/0x10 [ 1955.710477][T27732] do_syscall_64+0x166/0x520 [ 1955.710502][T27732] ? trace_irq_disable+0x3b/0x140 [ 1955.710520][T27732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.710539][T27732] ? clear_bhb_loop+0x70/0xc0 [ 1955.710561][T27732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.710579][T27732] RIP: 0033:0x7fc33cf9e0d9 [ 1955.710597][T27732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1955.710613][T27732] RSP: 002b:00007fc33dee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1955.710632][T27732] RAX: ffffffffffffffda RBX: 00007fc33d225fa0 RCX: 00007fc33cf9e0d9 [ 1955.710646][T27732] RDX: 000000000000003d RSI: 0000200000000540 RDI: 0000000000000004 [ 1955.710657][T27732] RBP: 00007fc33dee3090 R08: 0000000000000000 R09: 0000000000000000 [ 1955.710668][T27732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1955.710679][T27732] R13: 00007fc33d226038 R14: 00007fc33d225fa0 R15: 00007ffc52ab9968 [ 1955.710710][T27732] [ 1955.758220][T27732] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 1956.033974][T27732] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 1956.035842][ T5808] usb 7-1: selecting invalid altsetting 1 [ 1956.036617][ T5808] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1956.039052][ T5808] usb 7-1: selecting invalid altsetting 1 [ 1956.062647][T27732] CPU: 0 UID: 0 PID: 27732 Comm: syz.1.5254 Tainted: G L syzkaller #0 PREEMPT(full) [ 1956.073566][T27732] Tainted: [L]=SOFTLOCKUP [ 1956.077875][T27732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1956.087909][T27732] RIP: 0010:path_put+0x24/0x60 [ 1956.092666][T27732] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 47 4b 79 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 a0 40 e9 ff 48 8b 7b 08 e8 e7 8e 03 00 48 [ 1956.112256][T27732] RSP: 0018:ffffc90005ff79c8 EFLAGS: 00010203 [ 1956.118306][T27732] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff88809603be80 [ 1956.126271][T27732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 1956.134241][T27732] RBP: ffffc90005ff7b50 R08: ffffffff9aa2fe37 R09: 0000000000000000 [ 1956.142202][T27732] R10: ffffffff9aa2fe20 R11: fffffbfff3545fc7 R12: fffffffffffffff4 [ 1956.150170][T27732] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1956.158140][T27732] FS: 00007fc33dee36c0(0000) GS:ffff888124cd5000(0000) knlGS:0000000000000000 [ 1956.167052][T27732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1956.173616][T27732] CR2: 00007fc33cfeb7c0 CR3: 000000007216a000 CR4: 00000000003526f0 [ 1956.181577][T27732] Call Trace: [ 1956.184844][T27732] [ 1956.187760][T27732] __trace_uprobe_create+0x53f/0xe40 [ 1956.193037][T27732] ? trace_kmalloc+0x2a/0xf0 [ 1956.197621][T27732] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1956.203413][T27732] ? __kmalloc_noprof+0x38c/0x720 [ 1956.208429][T27732] ? __kmalloc_noprof+0x1ab/0x720 [ 1956.213439][T27732] ? argv_split+0x18d/0x400 [ 1956.217934][T27732] ? argv_split+0x18d/0x400 [ 1956.222427][T27732] ? argv_split+0x378/0x400 [ 1956.226921][T27732] trace_probe_create+0xce/0x130 [ 1956.231848][T27732] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1956.237637][T27732] ? __pfx_trace_probe_create+0x10/0x10 [ 1956.243173][T27732] ? __might_fault+0xaf/0x130 [ 1956.247840][T27732] dyn_event_create+0x59/0x80 [ 1956.252504][T27732] create_or_delete_trace_uprobe+0x65/0xa0 [ 1956.258305][T27732] trace_parse_run_command+0x1f3/0x380 [ 1956.263762][T27732] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 1956.270255][T27732] ? __pfx_probes_write+0x10/0x10 [ 1956.275265][T27732] vfs_write+0x296/0xba0 [ 1956.279506][T27732] ? __pfx_vfs_write+0x10/0x10 [ 1956.284261][T27732] ? __fget_files+0x2a/0x420 [ 1956.288847][T27732] ? __fget_files+0x3a2/0x420 [ 1956.293517][T27732] ? __fget_files+0x2a/0x420 [ 1956.298107][T27732] ksys_write+0x150/0x270 [ 1956.302433][T27732] ? __pfx_ksys_write+0x10/0x10 [ 1956.307280][T27732] do_syscall_64+0x166/0x520 [ 1956.311868][T27732] ? trace_irq_disable+0x3b/0x140 [ 1956.316882][T27732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.322938][T27732] ? clear_bhb_loop+0x70/0xc0 [ 1956.327604][T27732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.333485][T27732] RIP: 0033:0x7fc33cf9e0d9 [ 1956.337891][T27732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1956.357491][T27732] RSP: 002b:00007fc33dee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1956.365900][T27732] RAX: ffffffffffffffda RBX: 00007fc33d225fa0 RCX: 00007fc33cf9e0d9 [ 1956.373863][T27732] RDX: 000000000000003d RSI: 0000200000000540 RDI: 0000000000000004 [ 1956.381825][T27732] RBP: 00007fc33dee3090 R08: 0000000000000000 R09: 0000000000000000 [ 1956.389792][T27732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1956.397746][T27732] R13: 00007fc33d226038 R14: 00007fc33d225fa0 R15: 00007ffc52ab9968 [ 1956.405714][T27732] [ 1956.408734][T27732] Modules linked in: [ 1956.414353][T27732] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1956.501860][T27732] RIP: 0010:path_put+0x24/0x60 [ 1956.506740][T27732] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 47 4b 79 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 a0 40 e9 ff 48 8b 7b 08 e8 e7 8e 03 00 48 [ 1956.526693][T27732] RSP: 0018:ffffc90005ff79c8 EFLAGS: 00010203 [ 1956.533385][T27732] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff88809603be80 [ 1956.555256][T21549] Bluetooth: hci12: command tx timeout [ 1956.571895][T27732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 1956.579943][T27732] RBP: ffffc90005ff7b50 R08: ffffffff9aa2fe37 R09: 0000000000000000 [ 1956.588387][T27732] R10: ffffffff9aa2fe20 R11: fffffbfff3545fc7 R12: fffffffffffffff4 [ 1956.602556][ T5808] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1956.701820][ T30] audit: type=1800 audit(1787699903.761:12316): pid=27586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=525135 res=0 errno=0 [ 1956.751855][T27583] udevd[27583]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1956.924916][T27732] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1956.924960][T27732] FS: 00007fc33dee36c0(0000) GS:ffff888124cd5000(0000) knlGS:0000000000000000 [ 1956.924980][T27732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1956.924996][T27732] CR2: 0000001b31312ffc CR3: 000000007216a000 CR4: 00000000003526f0 [ 1956.925035][T27732] Kernel panic - not syncing: Fatal exception [ 1956.962752][T27732] Kernel Offset: disabled [ 1956.967066][T27732] Rebooting in 86400 seconds..