last executing test programs: 27.507158981s ago: executing program 3 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000100)={0xd, 0x8, 0x100000}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006040100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000020000000000a03000000000000000000070000030900010073797a3100000000140000001100010000000000000000000100000a"], 0xf0}, 0x1, 0x0, 0x0, 0x40008d1}, 0x40) 23.509043577s ago: executing program 3 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) syz_emit_ethernet(0xe4, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6004000000ae0600fe8000000000000000000000000000aafe8000000000000000000000000000aafffa4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80044100, &(0x7f0000001a80)) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f0000005680)="$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") timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x7ff, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) mprotect(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000fb) r4 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2aae6}]}, 0x38}}, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r5, 0x550c, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="32d4945f0017ab5f40c81d8f397c00e8e43b4f49f78dba4b9ba36e7465020bd30ccacf6a1366a3ba11eb59fc5a676cea81a82d65625e0d160989de58ad3119db676d5325daf77e74a9d064c9730d52c0dbe9c5cf2a7de62f70daa579618991addc00f380ffe6fe13cdc27baca58735f8bcc2332624d7a93cb97184604f74120346e91aa35b9edafbf0ce93d486a1656e8f576a9b585c398706fb05f5c2ca0a50f180ced8e69acaefec0761a6c1e01091f6b8d71ba4bfda"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x5, 0x85, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000140)={0x1}) 20.530770249s ago: executing program 3 (id=335): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) 15.004998841s ago: executing program 4 (id=345): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f080, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000180), 0x8) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/dev/video#\x00'}, {0x20, '-)@^[:%.'}, {0x20, '/dev/video#\x00'}, {0x20, '/dev/video#\x00'}, {0x20, '/dev/video#\x00'}], 0xa, "9e0bff596831842916b02d4d0d7c255388ac5bc4c61202d9c78ff21c2af47ef78ecedc4840eeb41ad8262c357b3c7f6588d8988df5b60a38447dba19dd8fe5b6bfb8021414bc7665c5144e4feab9d5101a590da6e22be6e05b5507e4a9ea841a074a114de3c0ad65b89332665071aa8981294aab587b8e366a256b5f5a16424185c9d634e4c08ce8d9351bf6fdd3501ad5d1449d740ee6be6b83060f786bdc33376b3bd9fc469bbace529f0a4bfb5207ff9d7405a15c10d5d1b5c5f4a27f5e7e786fcec0512bea8cd64a9d95a9cf471387"}, 0x119) 14.725424804s ago: executing program 4 (id=347): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x2}}, {@data_ordered}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x1, 0x451, &(0x7f0000000bc0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open$dir(&(0x7f0000000200)='./bus\x00', 0x380, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b00)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x22040004) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$sock(r2, &(0x7f0000003840)={&(0x7f0000000340)=@phonet={0x23, 0x18, 0x2, 0xc}, 0x80, &(0x7f0000003740)=[{&(0x7f0000000400)="d1cd58b77719070241c79c7116fd343c38b1d44969092ebd696ac9d03d95af32765d3d2022bcbab0c4b9e21450fe2120c4308e116c06ad84eb12b56a14682e89b2e6def62801be73326bc631a0d6eee25575fea40d6561b677f5f98f5a87d221c9585856864b243b74d13385e8630d61f0c1a273fe14f8bd8510426b5ffc6b17d96ca4b0b0d75efa5d2b3e622e7c1f43c57349562a1d60058f66dc1e2b51c6953e0fd2d16cbf8d9531b4b99f9d17b5a6d8668877e45794d75d0997f9f069287bd4b65c3c0b89ce43ef3f2eab58b8895ed4ca7a643a355fb2ef6f5b7ddfe0e6311d847b", 0xe3}, {&(0x7f0000000500)="f81c7212c065b21dd70344ae5d0f5833a5aed48233d2e78ef963e45065ef", 0x1e}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="1b41db70b56294556d70e6db6d9e31bf1ad52bc0c5f0847707619cc268a51f4804559bd0bcfc61b99806156fc8cbb577101fcd324a916c41e4e6ca3539369c8db0f48ddfec94644df5aecaaff7d0207f929a2034646584488d12c5533e4a333afd2251e70290cf54b5ccea532f26f4b9246718f027a988ee0729248cb031178b757f7920912310c9e494105cd005bc50fd788a4870837f51415908d6f9233716f8eff032de40863b76d7e423766be3b8ea63aa8314d22e287cfee7eb3d2e6d0194ae89286f24cfd8253848a168529d", 0xcf}, {&(0x7f0000003680)="dfb57caeedc8552068c4e4318f752072af761f6ea5239ae3463d63900d97764b8bedd38debc05fde3c9b87a6b7ec9dff191adb1d81c59f2bf801725955949ff1107a3b500e748dedb80ac4fdee0b2d6b97b4aa8b7acf447785bc1d6b9a7e86601942fcef8d8dae1489501db58331e6ae24e47407c2952d2e5c0ff285a016a73eac1e95c3a071702fd25f82a9274525553d474b5badcd3e558ade5a4e40b8659ccdc340f5225b89a6da33c221ed2c79de6aa33a657a", 0xb5}], 0x6, &(0x7f00000037c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x4000000800}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0x1}}, './bus\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x1f) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000008c6a16e6c06da9df1682da1df2daaed14ecd3d00860ec4455d0e376379e7fb65f23abeea682063b891c26b479ec943bc646653222bf1b337475a55a2f6dbeccfa30059b144700f09", @ANYRES16=r8, @ANYRES64=r5, @ANYRESHEX=r8, @ANYBLOB="0800ef00040000000800ef000c000000"], 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x24008800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, &(0x7f0000000240)={0x1d, r9}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r10, &(0x7f0000000000)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f00000003c0)=0xfffffffd, 0x1) shutdown(r3, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes128, 0x3, '\x00', @b}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000180)={0x35}) r12 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r12) close(r12) 14.536896012s ago: executing program 3 (id=348): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in=@private=0xa010101, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x5, 0x9, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x6, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, 0x0, 0x5) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000004c0)={r3, r5, 0xffff, 0xa2, &(0x7f00000003c0)="86bca947a5421cf2d618e9d220c342f0cf766e6f68c7e48090b08978ac27ede90d6c6c178532b8d1e3718c04e2808fd5826341348ac085b45fac946c9f455376665250ad5c01db788921d742f0a42b91895bfb0750c94c2da7fd3cd21df5ddb51186510b1a69a31d81c400a7ac70f0fbf96f7fb6ec6e5c07c9f947914cad9734bc6834845f62020b73b75132bb9d9bbadbe7416365bd8ce5b7c2811f2d24e9e434b7", 0xf0, 0xf1, 0x5, 0x5, 0x6, 0x2, 0x6, 'syz0\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) r8 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000000080)={0x2, @output={0x0, 0x1, {0x5, 0x9d}, 0x5, 0x8}}) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000240)="08003a117c123a3d74", 0x9}, {0x0}], 0x2}, 0x48d0) socket$igmp(0x2, 0x3, 0x2) 13.966679715s ago: executing program 0 (id=349): syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x20000000, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 13.965231936s ago: executing program 1 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x14a101, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x7d) (fail_nth: 3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000340)=0x7d) socket(0x10, 0x803, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, 0x0, 0x0) 13.964908632s ago: executing program 2 (id=351): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x800000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800004, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 12.941220538s ago: executing program 1 (id=352): r0 = gettid() timer_create(0x200000000000000, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000000), 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) sysinfo(0x0) 12.858538699s ago: executing program 2 (id=353): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read(r2, &(0x7f0000000000)=""/40, 0x28) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000004c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e34, 0xcc, @remote, 0x2}, {0xa, 0x4e21, 0x8ae5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, r1, 0x8}}, 0x48) 12.758162812s ago: executing program 1 (id=354): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0xa, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b"], 0x0) ioctl$MON_IOCX_GETX(r0, 0x80089203, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 12.693055159s ago: executing program 4 (id=355): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_normal', 0xc0a82, 0x146) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x4}}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r6, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x40e0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e51fc050000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4c815}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffa, 0x100, {{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x87}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0xfe, 0x1000000000000195, 0xf, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x30}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1ff}]}, 0x140}, 0x1, 0x0, 0x0, 0x81}, 0x844) 9.812132054s ago: executing program 2 (id=356): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000280)="8247f354f87b0f9f687435f2ec8af9e4e38da4a76fdf29a4", 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") r2 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b12", 0x2, 0x0, &(0x7f0000000140)={0x11, 0x5, r6, 0x1, 0x9, 0x6, @link_local}, 0x14) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, r3, {{0x6, 0x0, 0x4, 0x85, 0x3, 0x1, {0x6, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x3, 0x0, r4, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000002c0)={r2, r2}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5b) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000140)=0x20002, 0x4) 6.696391721s ago: executing program 0 (id=357): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300010000000000000000", @ANYRES32, @ANYBLOB="000700000000040014001a80100005800c000580080001"], 0x34}, 0x1, 0x0, 0x0, 0x8060}, 0xc810) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000040)) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=r5, @ANYBLOB="0100ffffffff00000000010000000400078008000100000000000c000200ff7f000000000000"], 0x2c}}, 0x20000000) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x20000000) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvfrom$inet(r6, &(0x7f0000000300)=""/120, 0x78, 0x10000, 0x0, 0x0) 5.095032124s ago: executing program 3 (id=358): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) 5.092075298s ago: executing program 0 (id=359): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timerfd_create(0x9, 0x80000) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r2, 0x8949, &(0x7f00000000c0)={'veth0_to_team\x00', @ifru_data=0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x100000000005, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @in6={0xa, 0x4e21, 0x3c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x365}}}, 0x90) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000140)={0x29, 0x1}) 5.091679598s ago: executing program 1 (id=360): socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000002e80)=[{&(0x7f00000000c0)="07c128cdfbcc59c344249d42332878c8693ca0b02c1130df3c77c7eeb8b6bfd9389a212c24236ba81252ed25441fe721dd50758119e294d2a7b44f79f178461ea1373c367984174c3c6f950df57fa1c882a268944738eda4c1642f42445e50d92376097761cfee010bf2814c2d0c9bb53c7893d6b99b7eb8f0662a113384ba5a6357a3a5cd11a574bc2bb53481d3f091277482b7", 0x94}, {&(0x7f0000000a40)="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", 0xf6d}], 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 5.056107023s ago: executing program 4 (id=361): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000080)=""/37, 0x25}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000380)=""/68, 0x44}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/93, 0x5d}], 0x7) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040)=0xb55, 0x4) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0xbb99095de0ec55c4, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYBLOB="ba07af6e9cf42bd5a591785e5fa539f779b6f978cda68cf356ab55bed243ce4acc24541afc8896c4c385dfb026cc5a4dcdebd9478e06644e3a366f", @ANYRES32=r0, @ANYRESOCT=r1], 0x1, 0x215, &(0x7f00000005c0)="$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") r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x21, 0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000880)={'vcan0\x00', 0x0}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x54, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x54}}, 0x4000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb4, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40800}, 0x4040001) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") r7 = fanotify_init(0x200, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r7, 0x1, 0x4000101a, r8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 4.55829416s ago: executing program 1 (id=362): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x50, 0x5, 0x7}, {0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x8, 0x5}]}, 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)='\f', 0x1}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000000c0)={r0}) sendto$inet6(r2, &(0x7f0000000840)="a6e0", 0x2, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000056544820e10508041125010203010902"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xf000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1f}]}, 0x5c}, 0x1, 0x620b}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) shutdown(r2, 0x1) 3.847131116s ago: executing program 0 (id=363): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x11d4850, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x26f, &(0x7f0000000680)="$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") write(r0, &(0x7f0000000080)="218586a66b189d19e06270c3b2f95dcf8c313dff7aad8d8bc360df6329b521128ecbaebb242c1abd7a845af9703ed4b2a4e799f66fd81442abb0a31aee63cdb9991a2b427066a46dc412aae06b31ed0921b73a1c2f4d276d326bd2bab03dbc51dd2e26742b87ae74f0b7586f34747a93c74de6906866", 0x76) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new\"'], 0x2a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndmidi(&(0x7f0000000000), 0x4, 0xe0000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 3.846437628s ago: executing program 2 (id=364): r0 = gettid() timer_create(0x200000000000000, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000000), 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sysinfo(0x0) 3.503187703s ago: executing program 0 (id=365): userfaultfd(0x801) (async) r0 = userfaultfd(0x801) socket$inet6(0xa, 0x6, 0x5) (async) socket$inet6(0xa, 0x6, 0x5) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000004c0)) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000a00)=ANY=[@ANYRES64=0x0], 0x85, 0x2a6, &(0x7f0000000180)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@ptr, @fwd={0xd}, @func_proto]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x2e, 0x2e]}}, 0x0, 0x44}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@ptr, @fwd={0xd}, @func_proto]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x2e, 0x2e]}}, 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f00007e0000/0xe000)=nil, 0xe000}) getpgid(0x0) (async) r1 = getpgid(0x0) prlimit64(r1, 0x8, 0x0, &(0x7f0000000000)) 3.476173953s ago: executing program 4 (id=366): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x101b02, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xf, 0x10000, 0x4, 0xfffffffe, 0xaa, '@\x00'}) write(r0, &(0x7f0000000080)="c2", 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x30, r2, 0x1, 0x74bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) 3.151418036s ago: executing program 0 (id=367): socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) userfaultfd(0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) 3.001162906s ago: executing program 4 (id=368): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) syz_mount_image$fuse(0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000035c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000001c0)=0x4f, &(0x7f00000002c0)=0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x70, &(0x7f00000008c0)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRES32=0x41424344, @ANYBLOB="84100000907802d9080a00000029fffffaa40000b03cd43733f12be37260d966141dd1a3e8b0c2a705d7000000000000ffff191ebd48102be97316c4aec36b4dff23"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="c4593a08000000000000000000000000000000001e90d85f9a9c4201b5051d157ab05fc4bb24e2842cddece8ad4bbfe54c1ba5cf73006e7becc66dcffc20a83e093be1c8d5b28eff0040bb7f42e4e2ccb92ae975355d22fe9a939e17620fd123fff92960ad21159e84b600a1ccfd0b8d37ff3ec58ca7a9832b0c1448d1301da059"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4048084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010f68790b8468b9429c6bec0a90d3a00010000000000000000000100000a54000000060a010400000000000000000a00fffe0900020073797a32000000000900010073797a31000000000600074060050000200004801c0001800900010068617368000000000c0002800800074000000001140000001400010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000e80)={[0xffff, 0xfffffffffffffffe, 0x2e, 0xa4e, 0xffff, 0x400ffff, 0x2, 0x7, 0x6, 0x8000, 0x10, 0x5, 0x100, 0x1, 0x8], 0x1, 0x140200}) 2.758750528s ago: executing program 2 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000280)={0x24}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 2.605168729s ago: executing program 1 (id=370): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, 0x0, 0x2d, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r2, 0x0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$pokeuser(0x6, r3, 0x0, 0xb1d4) 1.682815163s ago: executing program 2 (id=371): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$read(0xb, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0xa000400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x2, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x10000005, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x7e8, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x4, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x8001, 0x401, 0x8, 0x0, 0xff, 0x1, 0x1000009, 0x5f31, 0xd, 0x4e0, 0x7, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfdfffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x800000, 0x7, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x4000008, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x0, 0xffe, 0x8a2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x2003, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x4, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x41, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) (fail_nth: 5) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_open_dev$vbi(0x0, 0x2, 0x2) preadv2(r4, 0x0, 0x0, 0x4, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530498c) 0s ago: executing program 3 (id=372): socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000002e80)=[{&(0x7f00000000c0)="07c128cdfbcc59c344249d42332878c8693ca0b02c1130df3c77c7eeb8b6bfd9389a212c24236ba81252ed25441fe721dd50758119e294d2a7b44f79f178461ea1373c367984174c3c6f950df57fa1c882a268944738eda4c1642f42445e50d92376097761cfee010bf2814c2d0c9bb53c7893d6b99b7eb8f0662a113384ba5a6357a3a5cd11a574bc2bb53481d3f091277482b7", 0x94}, {&(0x7f0000000a40)="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", 0xf6d}], 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 3.070574][ T6187] usb 4-1: Manufacturer: syz [ 143.070587][ T6187] usb 4-1: SerialNumber: syz [ 143.388762][ T6187] usb 4-1: config 0 descriptor?? [ 143.654557][ T6187] usb 4-1: can't set config #0, error -71 [ 143.719266][ T6280] ntfs3(loop4): volume is dirty and "force" flag is not set! [ 143.738623][ T6187] usb 4-1: USB disconnect, device number 5 [ 145.308513][ T823] usbhid 5-1:0.0: can't add hid device: -32 [ 145.308611][ T823] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 145.850784][ T5829] usb 5-1: USB disconnect, device number 8 [ 146.353796][ T6314] FAULT_INJECTION: forcing a failure. [ 146.353796][ T6314] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 146.353839][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: syz.3.90 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 146.353861][ T6314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 146.353879][ T6314] Call Trace: [ 146.353889][ T6314] [ 146.353897][ T6314] dump_stack_lvl+0xe8/0x150 [ 146.353931][ T6314] should_fail_ex+0x46b/0x600 [ 146.353956][ T6314] _copy_to_user+0x31/0xb0 [ 146.353983][ T6314] bpf_test_finish+0x1db/0x6b0 [ 146.354016][ T6314] ? __pfx_bpf_test_finish+0x10/0x10 [ 146.354038][ T6314] ? eth_type_trans+0x348/0x7e0 [ 146.354073][ T6314] bpf_prog_test_run_skb+0x1250/0x2260 [ 146.354117][ T6314] ? __fget_files+0x3a6/0x420 [ 146.354140][ T6314] ? __fget_files+0x2a/0x420 [ 146.354169][ T6314] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 146.354198][ T6314] bpf_prog_test_run+0x2cd/0x340 [ 146.354226][ T6314] __sys_bpf+0x643/0x950 [ 146.354249][ T6314] ? __pfx___sys_bpf+0x10/0x10 [ 146.354269][ T6314] ? rt_mutex_slowunlock+0x1cb/0x300 [ 146.354312][ T6314] ? ksys_write+0x248/0x270 [ 146.354342][ T6314] ? __pfx_ksys_write+0x10/0x10 [ 146.354375][ T6314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.354396][ T6314] __x64_sys_bpf+0x7c/0x90 [ 146.354417][ T6314] do_syscall_64+0x15f/0xf80 [ 146.354438][ T6314] ? trace_irq_disable+0x3b/0x140 [ 146.354459][ T6314] ? clear_bhb_loop+0x40/0x90 [ 146.354483][ T6314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.354501][ T6314] RIP: 0033:0x7f46f20bc819 [ 146.354528][ T6314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.354543][ T6314] RSP: 002b:00007f46f0316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.354563][ T6314] RAX: ffffffffffffffda RBX: 00007f46f2335fa0 RCX: 00007f46f20bc819 [ 146.354577][ T6314] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 146.354588][ T6314] RBP: 00007f46f0316090 R08: 0000000000000000 R09: 0000000000000000 [ 146.354600][ T6314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.354610][ T6314] R13: 00007f46f2336038 R14: 00007f46f2335fa0 R15: 00007ffc9331b768 [ 146.354638][ T6314] [ 146.531537][ T6317] hsr0: entered promiscuous mode [ 146.658212][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'. [ 147.012905][ T32] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 147.172317][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 147.172348][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 147.219959][ T32] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 147.219991][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.220012][ T32] usb 1-1: Product: syz [ 147.220026][ T32] usb 1-1: Manufacturer: syz [ 147.220042][ T32] usb 1-1: SerialNumber: syz [ 147.260388][ T32] usb 1-1: config 0 descriptor?? [ 147.286896][ T32] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 147.342902][ T823] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 147.348506][ T6327] FAULT_INJECTION: forcing a failure. [ 147.348506][ T6327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.348535][ T6327] CPU: 1 UID: 0 PID: 6327 Comm: syz.3.95 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.348562][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 147.348573][ T6327] Call Trace: [ 147.348581][ T6327] [ 147.348590][ T6327] dump_stack_lvl+0xe8/0x150 [ 147.348618][ T6327] should_fail_ex+0x46b/0x600 [ 147.348645][ T6327] _copy_to_user+0x31/0xb0 [ 147.348673][ T6327] simple_read_from_buffer+0xe1/0x170 [ 147.348721][ T6327] proc_fail_nth_read+0x1be/0x230 [ 147.348754][ T6327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.348786][ T6327] ? rw_verify_area+0x2ac/0x4e0 [ 147.348817][ T6327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.348854][ T6327] vfs_read+0x212/0xa80 [ 147.348894][ T6327] ? __pfx_vfs_read+0x10/0x10 [ 147.348921][ T6327] ? __sys_bpf+0x6fa/0x950 [ 147.348949][ T6327] ? __pfx___sys_bpf+0x10/0x10 [ 147.348984][ T6327] ? kmem_cache_free+0x187/0x6c0 [ 147.349030][ T6327] ksys_read+0x156/0x270 [ 147.349062][ T6327] ? __pfx_ksys_read+0x10/0x10 [ 147.349100][ T6327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.349123][ T6327] do_syscall_64+0x15f/0xf80 [ 147.349148][ T6327] ? clear_bhb_loop+0x40/0x90 [ 147.349180][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.349201][ T6327] RIP: 0033:0x7f46f207d04e [ 147.349219][ T6327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.349236][ T6327] RSP: 002b:00007f46f0315fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 147.349258][ T6327] RAX: ffffffffffffffda RBX: 00007f46f03166c0 RCX: 00007f46f207d04e [ 147.349272][ T6327] RDX: 000000000000000f RSI: 00007f46f03160a0 RDI: 0000000000000004 [ 147.349284][ T6327] RBP: 00007f46f0316090 R08: 0000000000000000 R09: 0000000000000000 [ 147.349296][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.349308][ T6327] R13: 00007f46f2336038 R14: 00007f46f2335fa0 R15: 00007ffc9331b768 [ 147.349338][ T6327] [ 147.594839][ T823] usb 3-1: Using ep0 maxpacket: 32 [ 147.644271][ T823] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 147.644302][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.644323][ T823] usb 3-1: Product: syz [ 147.644339][ T823] usb 3-1: Manufacturer: syz [ 147.644354][ T823] usb 3-1: SerialNumber: syz [ 147.727857][ T823] usb 3-1: config 0 descriptor?? [ 147.769579][ T823] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 148.472878][ T823] gspca_ov534_9: reg_w failed -110 [ 149.070224][ T32] usb 1-1: USB disconnect, device number 10 [ 149.073127][ T823] gspca_ov534_9: Unknown sensor 0000 [ 149.073204][ T823] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 151.347012][ T10] usb 3-1: USB disconnect, device number 9 [ 151.642316][ T6345] loop3: detected capacity change from 0 to 1764 [ 152.252054][ T6351] loop4: detected capacity change from 0 to 40427 [ 152.367730][ T6351] F2FS-fs (loop4): invalid crc value [ 152.546850][ T6351] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 152.560589][ T6351] F2FS-fs (loop4): Start checkpoint disabled! [ 152.621652][ T6351] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 152.645703][ T6351] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 152.963118][ T6358] loop1: detected capacity change from 0 to 2048 [ 152.964281][ T6358] udf: Bad value for 'bs' [ 153.314584][ T5917] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 153.337171][ T6363] overlayfs: failed to resolve './file2': -2 [ 153.377978][ T6364] netlink: 21 bytes leftover after parsing attributes in process `syz.3.100'. [ 153.467505][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.469520][ T5917] usb 1-1: config 119 has an invalid interface number: 120 but max is 0 [ 153.469536][ T5917] usb 1-1: config 119 has no interface number 0 [ 153.469556][ T5917] usb 1-1: config 119 interface 120 has no altsetting 0 [ 153.599841][ T5917] usb 1-1: New USB device found, idVendor=0408, idProduct=4035, bcdDevice=65.3b [ 153.599936][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.599992][ T5917] usb 1-1: Product: syz [ 153.600035][ T5917] usb 1-1: Manufacturer: syz [ 153.600084][ T5917] usb 1-1: SerialNumber: syz [ 153.748680][ T6367] netlink: 68 bytes leftover after parsing attributes in process `syz.2.107'. [ 155.142609][ T5917] usb 1-1: can't set config #119, error -71 [ 155.169818][ T5917] usb 1-1: USB disconnect, device number 11 [ 155.581650][ T6371] loop2: detected capacity change from 0 to 256 [ 155.762567][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.110'. [ 155.824203][ T1489] kworker/u8:13: attempt to access beyond end of device [ 155.824203][ T1489] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.899027][ T1489] CPU: 0 UID: 0 PID: 1489 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 155.899059][ T1489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.899073][ T1489] Workqueue: writeback wb_workfn (flush-7:4) [ 155.899118][ T1489] Call Trace: [ 155.899126][ T1489] [ 155.899136][ T1489] dump_stack_lvl+0xe8/0x150 [ 155.899164][ T1489] f2fs_stop_checkpoint+0x383/0x540 [ 155.899195][ T1489] f2fs_write_end_io+0x1274/0x1740 [ 155.899248][ T1489] __submit_merged_bio+0x256/0x6a0 [ 155.899283][ T1489] __submit_merged_write_cond+0x3c9/0x4e0 [ 155.899318][ T1489] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 155.899369][ T1489] f2fs_write_data_pages+0x287e/0x34f0 [ 155.899438][ T1489] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.899511][ T1489] ? lockdep_hardirqs_on+0x7a/0x110 [ 155.899538][ T1489] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 155.899572][ T1489] ? __lock_acquire+0x6b5/0x2cf0 [ 155.899646][ T1489] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.899677][ T1489] do_writepages+0x32e/0x550 [ 155.899715][ T1489] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 155.899763][ T1489] __writeback_single_inode+0x133/0x10e0 [ 155.899794][ T1489] ? rt_spin_unlock+0x160/0x200 [ 155.899830][ T1489] writeback_sb_inodes+0x97f/0x1980 [ 155.899877][ T1489] ? lockdep_hardirqs_on+0x7a/0x110 [ 155.899910][ T1489] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 155.899980][ T1489] ? rcu_is_watching+0x15/0xb0 [ 155.900030][ T1489] wb_writeback+0x445/0xb00 [ 155.900061][ T1489] ? queue_io+0x1d1/0x440 [ 155.900095][ T1489] ? __pfx_wb_writeback+0x10/0x10 [ 155.900149][ T1489] wb_workfn+0x3fd/0xf20 [ 155.900191][ T1489] ? look_up_lock_class+0x57/0x110 [ 155.900228][ T1489] ? __pfx_wb_workfn+0x10/0x10 [ 155.900264][ T1489] ? do_raw_spin_unlock+0xf5/0x210 [ 155.900291][ T1489] ? process_one_work+0x8b7/0x1710 [ 155.900312][ T1489] ? process_one_work+0x8b7/0x1710 [ 155.900343][ T1489] ? process_one_work+0x8b7/0x1710 [ 155.900361][ T1489] process_one_work+0x9a3/0x1710 [ 155.900401][ T1489] ? __pfx_process_one_work+0x10/0x10 [ 155.900418][ T1489] ? do_raw_spin_lock+0x12b/0x2f0 [ 155.900455][ T1489] worker_thread+0xba8/0x11e0 [ 155.900485][ T1489] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 155.900508][ T1489] ? __kthread_parkme+0x7a/0x1f0 [ 155.900532][ T1489] ? __kthread_parkme+0x19c/0x1f0 [ 155.900560][ T1489] kthread+0x388/0x470 [ 155.900586][ T1489] ? __pfx_worker_thread+0x10/0x10 [ 155.900604][ T1489] ? __pfx_kthread+0x10/0x10 [ 155.900631][ T1489] ret_from_fork+0x514/0xb70 [ 155.900655][ T1489] ? __pfx_ret_from_fork+0x10/0x10 [ 155.900676][ T1489] ? __switch_to+0xc79/0x1410 [ 155.900708][ T1489] ? __pfx_kthread+0x10/0x10 [ 155.900734][ T1489] ret_from_fork_asm+0x1a/0x30 [ 155.900774][ T1489] [ 155.900817][ T6371] exFAT-fs (loop2): error, The cluster chain has a loop [ 155.900847][ T6371] exFAT-fs (loop2): Filesystem has been set read-only [ 155.900857][ T6371] exFAT-fs (loop2): failed to count the number of clusters in root [ 155.900867][ T6371] exFAT-fs (loop2): failed to recognize exfat type [ 155.938127][ T1489] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 156.732137][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 158.873892][ T823] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 159.037696][ T823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.056188][ T823] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 159.056216][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.056235][ T823] usb 2-1: Product: syz [ 159.056249][ T823] usb 2-1: Manufacturer: syz [ 159.056261][ T823] usb 2-1: SerialNumber: syz [ 159.321473][ T823] usb 2-1: config 0 descriptor?? [ 159.340663][ T823] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 159.340855][ T823] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 159.340904][ T823] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 159.414795][ T823] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 159.414882][ T823] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 159.414986][ T823] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 159.415068][ T823] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 159.415162][ T823] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 159.489380][ T823] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 159.510992][ T823] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 159.521000][ T823] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 159.521094][ T823] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 159.521166][ T823] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 159.521255][ T823] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 159.568828][ T823] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 159.600609][ T823] usb 2-1: USB disconnect, device number 3 [ 159.640176][ T823] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 159.667741][ T823] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 159.670476][ T823] keyspan 2-1:0.0: device disconnected [ 162.206941][ T6415] netlink: 132 bytes leftover after parsing attributes in process `syz.4.120'. [ 163.423860][ T6418] loop0: detected capacity change from 0 to 131072 [ 163.521851][ T6418] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 163.827832][ T6437] loop3: detected capacity change from 0 to 256 [ 163.832312][ T6437] exfat: Deprecated parameter 'namecase' [ 163.832349][ T6437] exfat: Deprecated parameter 'namecase' [ 163.982931][ T6418] XFS (loop0): Starting recovery (logdev: internal) [ 164.021084][ T6437] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 164.045213][ T6435] loop1: detected capacity change from 0 to 32768 [ 164.049405][ T6435] btrfs: Deprecated parameter 'usebackuproot' [ 164.049421][ T6435] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 164.058325][ T6435] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.125 (6435) [ 164.109162][ T6435] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.109188][ T6435] BTRFS info (device loop1): using crc32c checksum algorithm [ 164.143217][ T6418] XFS (loop0): Ending recovery (logdev: internal) [ 164.327889][ T3634] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 164.330769][ T6435] BTRFS error (device loop1): failed to load root extent [ 164.330806][ T6435] BTRFS warning (device loop1): try to load backup roots slot 1 [ 164.332051][ T3603] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 164.332166][ T6435] BTRFS warning (device loop1): couldn't read tree root [ 164.332185][ T6435] BTRFS warning (device loop1): try to load backup roots slot 2 [ 164.334962][ T197] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 164.335253][ T6435] BTRFS warning (device loop1): couldn't read tree root [ 164.335316][ T6435] BTRFS warning (device loop1): try to load backup roots slot 3 [ 164.432496][ T6435] BTRFS info (device loop1): rebuilding free space tree [ 164.517841][ T5978] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 164.605706][ T6435] BTRFS info (device loop1): checking UUID tree [ 164.653953][ T6435] BTRFS info (device loop1): enabling ssd optimizations [ 164.653977][ T6435] BTRFS info (device loop1): using spread ssd allocation scheme [ 164.653993][ T6435] BTRFS info (device loop1): turning on async discard [ 164.654007][ T6435] BTRFS info (device loop1): enabling free space tree [ 164.654022][ T6435] BTRFS info (device loop1): force clearing of disk cache [ 164.654036][ T6435] BTRFS info (device loop1): enabling auto defrag [ 164.654050][ T6435] BTRFS info (device loop1): trying to use backup root at mount time [ 164.654066][ T6435] BTRFS info (device loop1): force zlib compression, level 3 [ 164.727314][ T5978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.727337][ T5978] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.727357][ T5978] usb 5-1: config 1 has no interface number 0 [ 164.727396][ T5978] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.727474][ T5978] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 164.727498][ T5978] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 164.727527][ T5978] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.732143][ T5978] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.732178][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.732197][ T5978] usb 5-1: Product: syz [ 164.732210][ T5978] usb 5-1: Manufacturer: syz [ 164.732222][ T5978] usb 5-1: SerialNumber: syz [ 164.828527][ T6435] FAULT_INJECTION: forcing a failure. [ 164.828527][ T6435] name failslab, interval 1, probability 0, space 0, times 1 [ 164.828605][ T6435] CPU: 0 UID: 0 PID: 6435 Comm: syz.1.125 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.828627][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.828655][ T6435] Call Trace: [ 164.828673][ T6435] [ 164.828698][ T6435] dump_stack_lvl+0xe8/0x150 [ 164.828748][ T6435] should_fail_ex+0x46b/0x600 [ 164.828774][ T6435] should_failslab+0xa8/0x100 [ 164.828831][ T6435] __kmalloc_node_noprof+0xe7/0x7f0 [ 164.828905][ T6435] ? __vmalloc_node_range_noprof+0x5ef/0x1750 [ 164.828984][ T6435] __vmalloc_node_range_noprof+0x5ef/0x1750 [ 164.829087][ T6435] ? __lock_acquire+0x6b5/0x2cf0 [ 164.829204][ T6435] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.829305][ T6435] ? do_raw_spin_lock+0x12b/0x2f0 [ 164.829366][ T6435] ? __pfx_ima_read_file+0x10/0x10 [ 164.829458][ T6435] ? kernel_read_file+0x3f3/0x6a0 [ 164.829512][ T6435] vmalloc_noprof+0xb2/0xe0 [ 164.829577][ T6435] ? kernel_read_file+0x3f3/0x6a0 [ 164.829628][ T6435] kernel_read_file+0x3f3/0x6a0 [ 164.829673][ T6435] ? reacquire_held_locks+0x104/0x190 [ 164.829765][ T6435] ? __pfx_kernel_read_file+0x10/0x10 [ 164.829788][ T6435] ? rt_spin_unlock+0x14f/0x200 [ 164.829833][ T6435] __se_sys_finit_module+0x439/0x750 [ 164.829900][ T6435] ? __pfx___se_sys_finit_module+0x10/0x10 [ 164.829990][ T6435] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 164.830098][ T6435] ? __pfx_ksys_write+0x10/0x10 [ 164.830191][ T6435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.830266][ T6435] do_syscall_64+0x15f/0xf80 [ 164.830303][ T6435] ? trace_irq_disable+0x3b/0x140 [ 164.830358][ T6435] ? clear_bhb_loop+0x40/0x90 [ 164.830424][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.830472][ T6435] RIP: 0033:0x7fe66a13c819 [ 164.830518][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.830565][ T6435] RSP: 002b:00007fe668396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 164.830631][ T6435] RAX: ffffffffffffffda RBX: 00007fe66a3b5fa0 RCX: 00007fe66a13c819 [ 164.830684][ T6435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 164.830718][ T6435] RBP: 00007fe668396090 R08: 0000000000000000 R09: 0000000000000000 [ 164.830747][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.830775][ T6435] R13: 00007fe66a3b6038 R14: 00007fe66a3b5fa0 R15: 00007ffc12925308 [ 164.830837][ T6435] [ 164.831263][ T6435] syz.1.125: vmalloc error: size 40960, failed to allocated page array size 80, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 164.831897][ T6435] CPU: 0 UID: 0 PID: 6435 Comm: syz.1.125 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.831919][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.831930][ T6435] Call Trace: [ 164.831937][ T6435] [ 164.831945][ T6435] dump_stack_lvl+0xe8/0x150 [ 164.832026][ T6435] warn_alloc+0x263/0x3e0 [ 164.832116][ T6435] ? dump_stack_lvl+0x103/0x150 [ 164.832175][ T6435] ? lockdep_hardirqs_on+0x7a/0x110 [ 164.832235][ T6435] ? __pfx_warn_alloc+0x10/0x10 [ 164.832325][ T6435] ? __kmalloc_node_noprof+0x395/0x7f0 [ 164.832402][ T6435] ? __vmalloc_node_range_noprof+0x5ef/0x1750 [ 164.832492][ T6435] __vmalloc_node_range_noprof+0xa06/0x1750 [ 164.832570][ T6435] ? __lock_acquire+0x6b5/0x2cf0 [ 164.832701][ T6435] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.832742][ T6435] ? do_raw_spin_lock+0x12b/0x2f0 [ 164.832763][ T6435] ? __pfx_ima_read_file+0x10/0x10 [ 164.832798][ T6435] ? kernel_read_file+0x3f3/0x6a0 [ 164.832835][ T6435] vmalloc_noprof+0xb2/0xe0 [ 164.832903][ T6435] ? kernel_read_file+0x3f3/0x6a0 [ 164.832941][ T6435] kernel_read_file+0x3f3/0x6a0 [ 164.832962][ T6435] ? reacquire_held_locks+0x104/0x190 [ 164.833028][ T6435] ? __pfx_kernel_read_file+0x10/0x10 [ 164.833063][ T6435] ? rt_spin_unlock+0x14f/0x200 [ 164.833142][ T6435] __se_sys_finit_module+0x439/0x750 [ 164.833207][ T6435] ? __pfx___se_sys_finit_module+0x10/0x10 [ 164.833303][ T6435] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 164.833420][ T6435] ? __pfx_ksys_write+0x10/0x10 [ 164.833500][ T6435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.833560][ T6435] do_syscall_64+0x15f/0xf80 [ 164.833600][ T6435] ? trace_irq_disable+0x3b/0x140 [ 164.833662][ T6435] ? clear_bhb_loop+0x40/0x90 [ 164.833745][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.833818][ T6435] RIP: 0033:0x7fe66a13c819 [ 164.833868][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.833915][ T6435] RSP: 002b:00007fe668396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 164.833962][ T6435] RAX: ffffffffffffffda RBX: 00007fe66a3b5fa0 RCX: 00007fe66a13c819 [ 164.833984][ T6435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 164.833996][ T6435] RBP: 00007fe668396090 R08: 0000000000000000 R09: 0000000000000000 [ 164.834008][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.834020][ T6435] R13: 00007fe66a3b6038 R14: 00007fe66a3b5fa0 R15: 00007ffc12925308 [ 164.834068][ T6435] [ 164.834200][ T6435] Mem-Info: [ 164.834250][ T6435] active_anon:27145 inactive_anon:0 isolated_anon:0 [ 164.834250][ T6435] active_file:19208 inactive_file:40260 isolated_file:0 [ 164.834250][ T6435] unevictable:768 dirty:164 writeback:0 [ 164.834250][ T6435] slab_reclaimable:12194 slab_unreclaimable:101216 [ 164.834250][ T6435] mapped:30275 shmem:21871 pagetables:1252 [ 164.834250][ T6435] sec_pagetables:0 bounce:0 [ 164.834250][ T6435] kernel_misc_reclaimable:0 [ 164.834250][ T6435] free:1267457 free_pcp:24353 free_cma:0 [ 164.834386][ T6435] Node 0 active_anon:108580kB inactive_anon:0kB active_file:76832kB inactive_file:160836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121100kB dirty:656kB writeback:0kB shmem:85948kB kernel_stack:14132kB pagetables:4864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 164.834544][ T6435] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 164.834653][ T6435] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.834805][ T6435] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 164.834941][ T6435] Node 0 DMA32 free:1122712kB boost:0kB min:3916kB low:6440kB high:8964kB reserved_highatomic:0KB free_highatomic:0KB active_anon:108580kB inactive_anon:0kB active_file:76832kB inactive_file:160836kB unevictable:1536kB writepending:656kB zspages:0kB present:3129332kB managed:2554488kB mlocked:0kB bounce:0kB free_pcp:97404kB local_pcp:73720kB free_cma:0kB [ 164.835051][ T6435] lowmem_reserve[]: 0 0 1 1 1 [ 164.835125][ T6435] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1224kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 164.835325][ T6435] lowmem_reserve[]: 0 0 0 0 0 [ 164.835417][ T6435] Node 1 Normal free:3931756kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.835591][ T6435] lowmem_reserve[]: 0 0 0 0 0 [ 164.835691][ T6435] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 164.836056][ T6435] Node 0 DMA32: 1431*4kB (UM) 1268*8kB (UM) 550*16kB (UME) 178*32kB (UME) 190*64kB (UM) 44*128kB (UME) 21*256kB (UME) 10*512kB (UME) 1*1024kB (M) 5*2048kB (UME) 257*4096kB (M) = 1122588kB [ 164.836431][ T6435] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 164.836758][ T6435] Node 1 Normal: 5*4kB (UM) 13*8kB (UM) 9*16kB (UM) 11*32kB (UM) 4*64kB (UM) 6*128kB (UM) 2*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3931756kB [ 164.837191][ T6435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.837246][ T6435] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.837292][ T6435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.837323][ T6435] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.837368][ T6435] 81359 total pagecache pages [ 164.837397][ T6435] 0 pages in swap cache [ 164.837404][ T6435] Free swap = 124996kB [ 164.837412][ T6435] Total swap = 124996kB [ 164.837443][ T6435] 2097051 pages RAM [ 164.837457][ T6435] 0 pages HighMem/MovableOnly [ 164.837478][ T6435] 426509 pages reserved [ 164.837498][ T6435] 0 pages cma reserved [ 164.848268][ T38] audit: type=1800 audit(1776648884.312:2): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.125" name="bus" dev="loop1" ino=257 res=0 errno=0 [ 164.993123][ T6446] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.157026][ T5831] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 166.295199][ T6446] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.503643][ T5978] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 166.503697][ T5978] cdc_ncm 5-1:1.1: bind() failure [ 166.621076][ T5978] usb 5-1: USB disconnect, device number 9 [ 166.654444][ T5827] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.136698][ T6475] loop2: detected capacity change from 0 to 1024 [ 167.635737][ T6477] loop3: detected capacity change from 0 to 4096 [ 167.638593][ T6477] ntfs3: Bad value for 'uid' [ 167.638610][ T6477] ntfs3: Bad value for 'uid' [ 167.712997][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 167.811470][ T6477] loop3: detected capacity change from 0 to 1024 [ 167.812182][ T6477] hfsplus: Unknown parameter ''i' [ 167.868934][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.868956][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.868997][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 167.869017][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.935101][ T6477] syz.3.134 (6477) used greatest stack depth: 18528 bytes left [ 168.041667][ T10] usb 5-1: config 0 descriptor?? [ 168.121256][ T6489] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 168.143732][ T6489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.174792][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 168.175186][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 168.437533][ T6491] FAULT_INJECTION: forcing a failure. [ 168.437533][ T6491] name failslab, interval 1, probability 0, space 0, times 0 [ 168.437567][ T6491] CPU: 0 UID: 0 PID: 6491 Comm: syz.3.139 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.437589][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 168.437600][ T6491] Call Trace: [ 168.437608][ T6491] [ 168.437629][ T6491] dump_stack_lvl+0xe8/0x150 [ 168.437659][ T6491] should_fail_ex+0x46b/0x600 [ 168.437701][ T6491] should_failslab+0xa8/0x100 [ 168.437755][ T6491] __kmalloc_noprof+0xdf/0x7b0 [ 168.437786][ T6491] ? kfree+0x4d/0x6c0 [ 168.437815][ T6491] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 168.437855][ T6491] tomoyo_realpath_from_path+0xe3/0x5d0 [ 168.437890][ T6491] ? tomoyo_domain+0xd7/0x130 [ 168.437930][ T6491] ? tomoyo_path_number_perm+0x219/0x630 [ 168.437957][ T6491] tomoyo_path_number_perm+0x246/0x630 [ 168.437987][ T6491] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 168.438012][ T6491] ? __lock_acquire+0x6b5/0x2cf0 [ 168.438047][ T6491] ? do_raw_spin_lock+0x12b/0x2f0 [ 168.438113][ T6491] ? __fget_files+0x2a/0x420 [ 168.438144][ T6491] ? __fget_files+0x2a/0x420 [ 168.438171][ T6491] ? __fget_files+0x3a6/0x420 [ 168.438198][ T6491] ? __fget_files+0x2a/0x420 [ 168.438230][ T6491] security_file_ioctl+0xc3/0x2a0 [ 168.438257][ T6491] __se_sys_ioctl+0x47/0x170 [ 168.438296][ T6491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.438322][ T6491] do_syscall_64+0x15f/0xf80 [ 168.438347][ T6491] ? trace_irq_disable+0x3b/0x140 [ 168.438374][ T6491] ? clear_bhb_loop+0x40/0x90 [ 168.438402][ T6491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.438425][ T6491] RIP: 0033:0x7f46f20bc819 [ 168.438445][ T6491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.438464][ T6491] RSP: 002b:00007f46f0316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.438487][ T6491] RAX: ffffffffffffffda RBX: 00007f46f2335fa0 RCX: 00007f46f20bc819 [ 168.438503][ T6491] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000005 [ 168.438517][ T6491] RBP: 00007f46f0316090 R08: 0000000000000000 R09: 0000000000000000 [ 168.438530][ T6491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.438543][ T6491] R13: 00007f46f2336038 R14: 00007f46f2335fa0 R15: 00007ffc9331b768 [ 168.438578][ T6491] [ 168.450386][ T6491] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.459514][ T6491] loop3: detected capacity change from 0 to 7 [ 168.728412][ T6491] Dev loop3: unable to read RDB block 7 [ 168.728464][ T6491] loop3: AHDI p1 p2 [ 168.728490][ T6491] loop3: partition table partially beyond EOD, truncated [ 168.728731][ T6491] loop3: p1 start 1684369968 is beyond EOD, truncated [ 168.894721][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 168.914135][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 168.914230][ T10] usb 5-1: media controller created [ 169.024308][ T6495] FAULT_INJECTION: forcing a failure. [ 169.024308][ T6495] name failslab, interval 1, probability 0, space 0, times 0 [ 169.024343][ T6495] CPU: 1 UID: 0 PID: 6495 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 169.024367][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.024379][ T6495] Call Trace: [ 169.024388][ T6495] [ 169.024398][ T6495] dump_stack_lvl+0xe8/0x150 [ 169.024428][ T6495] should_fail_ex+0x46b/0x600 [ 169.024469][ T6495] should_failslab+0xa8/0x100 [ 169.024522][ T6495] __kmalloc_noprof+0xdf/0x7b0 [ 169.024553][ T6495] ? kfree+0x4d/0x6c0 [ 169.024580][ T6495] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 169.024619][ T6495] tomoyo_realpath_from_path+0xe3/0x5d0 [ 169.024652][ T6495] ? tomoyo_domain+0xd7/0x130 [ 169.024688][ T6495] ? tomoyo_path_number_perm+0x219/0x630 [ 169.024715][ T6495] tomoyo_path_number_perm+0x246/0x630 [ 169.024744][ T6495] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 169.024780][ T6495] ? __lock_acquire+0x6b5/0x2cf0 [ 169.024814][ T6495] ? do_raw_spin_lock+0x12b/0x2f0 [ 169.024877][ T6495] ? __fget_files+0x2a/0x420 [ 169.024907][ T6495] ? __fget_files+0x2a/0x420 [ 169.024934][ T6495] ? __fget_files+0x3a6/0x420 [ 169.024959][ T6495] ? __fget_files+0x2a/0x420 [ 169.024991][ T6495] security_file_ioctl+0xc3/0x2a0 [ 169.025019][ T6495] __se_sys_ioctl+0x47/0x170 [ 169.025050][ T6495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.025074][ T6495] do_syscall_64+0x15f/0xf80 [ 169.025094][ T6495] ? trace_irq_disable+0x3b/0x140 [ 169.025115][ T6495] ? clear_bhb_loop+0x40/0x90 [ 169.025137][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.025154][ T6495] RIP: 0033:0x7efeb8d7c819 [ 169.025171][ T6495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.025186][ T6495] RSP: 002b:00007efeb6fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.025207][ T6495] RAX: ffffffffffffffda RBX: 00007efeb8ff5fa0 RCX: 00007efeb8d7c819 [ 169.025220][ T6495] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000004 [ 169.025232][ T6495] RBP: 00007efeb6fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 169.025244][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.025254][ T6495] R13: 00007efeb8ff6038 R14: 00007efeb8ff5fa0 R15: 00007ffd6ed94178 [ 169.025284][ T6495] [ 169.294871][ T6495] ERROR: Out of memory at tomoyo_realpath_from_path. [ 169.295403][ T6495] loop3: detected capacity change from 0 to 7 [ 169.309639][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.344309][ T6495] Dev loop3: unable to read RDB block 7 [ 169.344336][ T6495] loop3: AHDI p3 p4 [ 169.344363][ T6495] loop3: partition table partially beyond EOD, truncated [ 169.344624][ T6495] loop3: p3 start 1684369968 is beyond EOD, truncated [ 169.491059][ T6503] FAULT_INJECTION: forcing a failure. [ 169.491059][ T6503] name failslab, interval 1, probability 0, space 0, times 0 [ 169.491108][ T6503] CPU: 0 UID: 0 PID: 6503 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 169.491131][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.491143][ T6503] Call Trace: [ 169.491151][ T6503] [ 169.491159][ T6503] dump_stack_lvl+0xe8/0x150 [ 169.491186][ T6503] should_fail_ex+0x46b/0x600 [ 169.491213][ T6503] should_failslab+0xa8/0x100 [ 169.491246][ T6503] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 169.491280][ T6503] ? __alloc_skb+0x1d0/0x7d0 [ 169.491305][ T6503] ? ipv4_default_advmss+0x20/0x340 [ 169.491338][ T6503] __alloc_skb+0x1d0/0x7d0 [ 169.491369][ T6503] tcp_stream_alloc_skb+0x3f/0x5c0 [ 169.491401][ T6503] ? __asan_memset+0x22/0x50 [ 169.491428][ T6503] tcp_connect+0x15a9/0x53a0 [ 169.491473][ T6503] ? lockdep_hardirqs_on+0x7a/0x110 [ 169.491499][ T6503] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 169.491536][ T6503] ? __pfx_tcp_connect+0x10/0x10 [ 169.491565][ T6503] ? rt_spin_unlock+0x14f/0x200 [ 169.491609][ T6503] ? __asan_memset+0x22/0x50 [ 169.491640][ T6503] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 169.491662][ T6503] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 169.491696][ T6503] ? sk_setup_caps+0x9ef/0xc40 [ 169.491727][ T6503] ? sk_setup_caps+0x29/0xc40 [ 169.491758][ T6503] tcp_v4_connect+0x10f7/0x19b0 [ 169.491779][ T6503] ? __local_bh_enable+0x1e1/0x2f0 [ 169.491819][ T6503] ? __pfx_tcp_v4_connect+0x10/0x10 [ 169.491838][ T6503] ? mptcp_token_new_connect+0x15c/0x820 [ 169.491880][ T6503] mptcp_connect+0x56b/0x830 [ 169.491907][ T6503] __inet_stream_connect+0x25a/0xdd0 [ 169.491948][ T6503] ? __pfx___inet_stream_connect+0x10/0x10 [ 169.491988][ T6503] ? __kasan_kmalloc+0x93/0xb0 [ 169.492019][ T6503] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 169.492049][ T6503] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 169.492086][ T6503] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 169.492127][ T6503] mptcp_sendmsg_fastopen+0x17d/0x580 [ 169.492159][ T6503] mptcp_sendmsg+0x1b0c/0x1dc0 [ 169.492184][ T6503] ? __lock_acquire+0x6b5/0x2cf0 [ 169.492228][ T6503] ? aa_sk_perm+0x703/0x950 [ 169.492258][ T6503] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 169.492280][ T6503] ? __pfx_aa_sk_perm+0x10/0x10 [ 169.492308][ T6503] ? inet_sendmsg+0x2f4/0x370 [ 169.492336][ T6503] ? aa_sock_msg_perm+0x122/0x200 [ 169.492364][ T6503] ? __pfx_inet_sendmsg+0x10/0x10 [ 169.492391][ T6503] sock_sendmsg_nosec+0xf9/0x150 [ 169.492415][ T6503] ____sys_sendmsg+0x55c/0x870 [ 169.492450][ T6503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.492489][ T6503] ? import_iovec+0x73/0xa0 [ 169.492518][ T6503] ___sys_sendmsg+0x2a5/0x360 [ 169.492545][ T6503] ? __lock_acquire+0x6b5/0x2cf0 [ 169.492576][ T6503] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.492611][ T6503] ? kstrtouint+0x6e/0xe0 [ 169.492676][ T6503] ? __fget_files+0x2a/0x420 [ 169.492699][ T6503] ? __fget_files+0x3a6/0x420 [ 169.492732][ T6503] __sys_sendmmsg+0x282/0x4e0 [ 169.492765][ T6503] ? __pfx___sys_sendmmsg+0x10/0x10 [ 169.492801][ T6503] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 169.492843][ T6503] ? ksys_write+0x248/0x270 [ 169.492873][ T6503] ? __pfx_ksys_write+0x10/0x10 [ 169.492908][ T6503] __x64_sys_sendmmsg+0xa0/0xc0 [ 169.492935][ T6503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.492961][ T6503] do_syscall_64+0x15f/0xf80 [ 169.492982][ T6503] ? trace_irq_disable+0x3b/0x140 [ 169.493005][ T6503] ? clear_bhb_loop+0x40/0x90 [ 169.493029][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.493048][ T6503] RIP: 0033:0x7fdd69cdc819 [ 169.493066][ T6503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.493081][ T6503] RSP: 002b:00007fdd67f2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 169.493101][ T6503] RAX: ffffffffffffffda RBX: 00007fdd69f55fa0 RCX: 00007fdd69cdc819 [ 169.493115][ T6503] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 169.493126][ T6503] RBP: 00007fdd67f2e090 R08: 0000000000000000 R09: 0000000000000000 [ 169.493138][ T6503] R10: 000000002004c000 R11: 0000000000000246 R12: 0000000000000001 [ 169.493149][ T6503] R13: 00007fdd69f56038 R14: 00007fdd69f55fa0 R15: 00007ffc54eae138 [ 169.493179][ T6503] [ 170.087627][ T6513] loop3: detected capacity change from 0 to 8 [ 170.160207][ T6515] loop0: detected capacity change from 0 to 128 [ 170.196947][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 170.197026][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 170.273527][ T6515] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.285587][ T6515] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.372061][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 170.613734][ T6513] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 170.613804][ T6513] unable to read xattr id index table [ 171.033027][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 171.033049][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 171.065063][ T10] usb 5-1: USB disconnect, device number 10 [ 172.169466][ T6537] FAULT_INJECTION: forcing a failure. [ 172.169466][ T6537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.169498][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz.3.153 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.169519][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.169530][ T6537] Call Trace: [ 172.169537][ T6537] [ 172.169545][ T6537] dump_stack_lvl+0xe8/0x150 [ 172.169570][ T6537] should_fail_ex+0x46b/0x600 [ 172.169596][ T6537] prepare_alloc_pages+0x22a/0x6b0 [ 172.169634][ T6537] __alloc_frozen_pages_noprof+0x12f/0x380 [ 172.169657][ T6537] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.169680][ T6537] ? __pfx_policy_nodemask+0x10/0x10 [ 172.169711][ T6537] ? __lock_acquire+0x6b5/0x2cf0 [ 172.169743][ T6537] alloc_pages_mpol+0xd1/0x380 [ 172.169777][ T6537] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 172.169812][ T6537] vma_alloc_folio_noprof+0xe1/0x1e0 [ 172.169845][ T6537] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 172.169877][ T6537] ? __pte_offset_map+0x29/0x200 [ 172.169908][ T6537] do_pte_missing+0x822/0x2950 [ 172.169941][ T6537] handle_mm_fault+0xdb5/0x14c0 [ 172.169972][ T6537] ? handle_mm_fault+0xed/0x14c0 [ 172.170003][ T6537] ? __pfx_handle_mm_fault+0x10/0x10 [ 172.170049][ T6537] ? follow_page_pte+0xbc8/0xe40 [ 172.170086][ T6537] ? __pfx_follow_page_pte+0x10/0x10 [ 172.170126][ T6537] __get_user_pages+0x168f/0x2570 [ 172.170183][ T6537] __gup_longterm_locked+0xdcf/0x1630 [ 172.170216][ T6537] ? rcu_is_watching+0x15/0xb0 [ 172.170273][ T6537] ? gup_fast_fallback+0x20d/0x2040 [ 172.170303][ T6537] ? sanity_check_pinned_pages+0x7af/0x870 [ 172.170341][ T6537] gup_fast_fallback+0x1cf3/0x2040 [ 172.170400][ T6537] ? rcu_is_watching+0x15/0xb0 [ 172.170433][ T6537] ? __pfx_gup_fast_fallback+0x10/0x10 [ 172.170473][ T6537] ? is_valid_gup_args+0x11f/0x200 [ 172.170505][ T6537] ? pin_user_pages_fast+0x4d/0xb0 [ 172.170537][ T6537] rds_info_getsockopt+0x20e/0x400 [ 172.170578][ T6537] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 172.170614][ T6537] ? __might_fault+0xaf/0x130 [ 172.170651][ T6537] ? rds_getsockopt+0x2c6/0x500 [ 172.170679][ T6537] ? __pfx_rds_getsockopt+0x10/0x10 [ 172.170706][ T6537] do_sock_getsockopt+0x51d/0x7e0 [ 172.170742][ T6537] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 172.170790][ T6537] ? __fget_files+0x3a6/0x420 [ 172.170817][ T6537] ? __fget_files+0x2a/0x420 [ 172.170850][ T6537] __x64_sys_getsockopt+0x1aa/0x250 [ 172.170887][ T6537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.170911][ T6537] do_syscall_64+0x15f/0xf80 [ 172.170935][ T6537] ? trace_irq_disable+0x3b/0x140 [ 172.170961][ T6537] ? clear_bhb_loop+0x40/0x90 [ 172.170988][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.171010][ T6537] RIP: 0033:0x7f46f20bc819 [ 172.171029][ T6537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.171059][ T6537] RSP: 002b:00007f46f0316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 172.171080][ T6537] RAX: ffffffffffffffda RBX: 00007f46f2335fa0 RCX: 00007f46f20bc819 [ 172.171095][ T6537] RDX: 0000000000002716 RSI: 0000200000000114 RDI: 0000000000000004 [ 172.171107][ T6537] RBP: 00007f46f0316090 R08: 0000200000000000 R09: 0000000000000000 [ 172.171120][ T6537] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 172.171132][ T6537] R13: 00007f46f2336038 R14: 00007f46f2335fa0 R15: 00007ffc9331b768 [ 172.171164][ T6537] [ 175.201089][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 175.534991][ T6578] loop3: detected capacity change from 0 to 256 [ 176.691591][ T6576] loop2: detected capacity change from 0 to 131072 [ 176.779455][ T6576] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 176.964634][ T5831] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.051382][ T6576] XFS (loop2): Starting recovery (logdev: internal) [ 177.102015][ T6576] XFS (loop2): Ending recovery (logdev: internal) [ 179.225640][ T5828] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 179.584693][ T6603] FAULT_INJECTION: forcing a failure. [ 179.584693][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 179.584725][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: syz.4.156 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.584756][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 179.584767][ T6603] Call Trace: [ 179.584775][ T6603] [ 179.584783][ T6603] dump_stack_lvl+0xe8/0x150 [ 179.584807][ T6603] should_fail_ex+0x46b/0x600 [ 179.584832][ T6603] should_failslab+0xa8/0x100 [ 179.584867][ T6603] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 179.584916][ T6603] ? __alloc_skb+0x1d0/0x7d0 [ 179.584941][ T6603] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.584972][ T6603] __alloc_skb+0x1d0/0x7d0 [ 179.584998][ T6603] ? format_decode+0x60f/0xe10 [ 179.585033][ T6603] alloc_skb_with_frags+0xc8/0x760 [ 179.585064][ T6603] ? vsnprintf+0xdf1/0xee0 [ 179.585102][ T6603] ? __lock_acquire+0x6b5/0x2cf0 [ 179.585135][ T6603] sock_alloc_send_pskb+0x884/0x9a0 [ 179.585187][ T6603] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 179.585218][ T6603] ? ipv6_addr_label+0x2f/0x240 [ 179.585245][ T6603] ? ipv6_addr_label+0x2f/0x240 [ 179.585279][ T6603] __ip6_append_data+0x2baf/0x3e90 [ 179.585334][ T6603] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 179.585389][ T6603] ? __pfx___ip6_append_data+0x10/0x10 [ 179.585424][ T6603] ? __pfx_ip6_mtu+0x10/0x10 [ 179.585458][ T6603] ? __lock_acquire+0x6b5/0x2cf0 [ 179.585490][ T6603] ip6_make_skb+0x2df/0x350 [ 179.585526][ T6603] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 179.585561][ T6603] ? __pfx_ip6_make_skb+0x10/0x10 [ 179.585619][ T6603] ? ip6_dst_hoplimit+0x65/0x3e0 [ 179.585649][ T6603] ? ip6_dst_hoplimit+0x65/0x3e0 [ 179.585684][ T6603] udpv6_sendmsg+0x1db8/0x25c0 [ 179.585735][ T6603] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 179.585782][ T6603] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 179.585808][ T6603] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 179.585859][ T6603] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 179.585890][ T6603] ? inet_send_prepare+0x1b9/0x270 [ 179.585923][ T6603] ? inet6_sendmsg+0xe4/0x120 [ 179.585951][ T6603] ? __pfx_inet6_sendmsg+0x10/0x10 [ 179.585976][ T6603] sock_sendmsg_nosec+0x90/0x150 [ 179.586002][ T6603] ____sys_sendmsg+0x55c/0x870 [ 179.586039][ T6603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.586077][ T6603] ? import_iovec+0x73/0xa0 [ 179.586103][ T6603] ___sys_sendmsg+0x2a5/0x360 [ 179.586139][ T6603] ? __lock_acquire+0x6b5/0x2cf0 [ 179.586163][ T6603] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.586189][ T6603] ? kstrtouint+0x6e/0xe0 [ 179.586234][ T6603] ? __fget_files+0x2a/0x420 [ 179.586254][ T6603] ? __fget_files+0x3a6/0x420 [ 179.586282][ T6603] __sys_sendmmsg+0x282/0x4e0 [ 179.586309][ T6603] ? __pfx___sys_sendmmsg+0x10/0x10 [ 179.586339][ T6603] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 179.586374][ T6603] ? ksys_write+0x248/0x270 [ 179.586402][ T6603] ? __pfx_ksys_write+0x10/0x10 [ 179.586438][ T6603] __x64_sys_sendmmsg+0xa0/0xc0 [ 179.586466][ T6603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.586487][ T6603] do_syscall_64+0x15f/0xf80 [ 179.586508][ T6603] ? trace_irq_disable+0x3b/0x140 [ 179.586531][ T6603] ? clear_bhb_loop+0x40/0x90 [ 179.586556][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.586576][ T6603] RIP: 0033:0x7fd54909c819 [ 179.586595][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.586610][ T6603] RSP: 002b:00007fd5472f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 179.586627][ T6603] RAX: ffffffffffffffda RBX: 00007fd549315fa0 RCX: 00007fd54909c819 [ 179.586638][ T6603] RDX: 0000000000000002 RSI: 0000200000006b80 RDI: 0000000000000003 [ 179.586648][ T6603] RBP: 00007fd5472f6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.586657][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.586665][ T6603] R13: 00007fd549316038 R14: 00007fd549315fa0 R15: 00007ffedb7bb608 [ 179.586689][ T6603] [ 180.441625][ T6607] loop3: detected capacity change from 0 to 512 [ 180.449709][ T6607] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 180.449724][ T6607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.484258][ T6607] EXT4-fs (loop3): 1 truncate cleaned up [ 180.486322][ T6607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.036620][ T6615] fuse: Bad value for 'rootmode' [ 181.313896][ T6010] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 181.473171][ T6010] usb 2-1: Using ep0 maxpacket: 16 [ 181.475549][ T6010] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 181.475573][ T6010] usb 2-1: config 0 has no interface number 0 [ 181.475621][ T6010] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 181.475649][ T6010] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 181.503704][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.534722][ T6010] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 181.534749][ T6010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.534769][ T6010] usb 2-1: Product: syz [ 181.534782][ T6010] usb 2-1: Manufacturer: syz [ 181.534802][ T6010] usb 2-1: SerialNumber: syz [ 181.622337][ T6010] usb 2-1: config 0 descriptor?? [ 181.623288][ T6617] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.625471][ T6617] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.833400][ T6617] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.833539][ T6617] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.869707][ T6010] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 181.869997][ T6010] asix 2-1:0.34: probe with driver asix failed with error -32 [ 181.909491][ T6622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.169'. [ 181.932461][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 181.986718][ T6623] netlink: 'syz.3.169': attribute type 10 has an invalid length. [ 182.011808][ T6623] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.030159][ T6623] bond0: (slave team0): Enslaving as an active interface with an up link [ 183.122906][ T6619] loop4: detected capacity change from 0 to 32768 [ 183.409445][ T5901] usb 2-1: USB disconnect, device number 4 [ 189.522848][ T6662] loop0: detected capacity change from 0 to 32768 [ 189.523905][ T6662] btrfs: Deprecated parameter 'usebackuproot' [ 189.523924][ T6662] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 189.525172][ T6662] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.179 (6662) [ 189.542241][ T6662] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.542268][ T6662] BTRFS info (device loop0): using crc32c checksum algorithm [ 189.734753][ T3616] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 189.734873][ T6662] BTRFS error (device loop0): failed to load root extent [ 189.734912][ T6662] BTRFS warning (device loop0): try to load backup roots slot 1 [ 189.735719][ T3616] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 189.735817][ T6662] BTRFS warning (device loop0): couldn't read tree root [ 189.735839][ T6662] BTRFS warning (device loop0): try to load backup roots slot 2 [ 189.737061][ T3616] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 189.737138][ T6662] BTRFS warning (device loop0): couldn't read tree root [ 189.737157][ T6662] BTRFS warning (device loop0): try to load backup roots slot 3 [ 189.838264][ T6662] BTRFS info (device loop0): rebuilding free space tree [ 189.946488][ T6662] BTRFS info (device loop0): checking UUID tree [ 189.948599][ T6662] BTRFS info (device loop0): enabling ssd optimizations [ 189.948636][ T6662] BTRFS info (device loop0): using spread ssd allocation scheme [ 189.948655][ T6662] BTRFS info (device loop0): turning on async discard [ 189.948671][ T6662] BTRFS info (device loop0): enabling free space tree [ 189.948688][ T6662] BTRFS info (device loop0): force clearing of disk cache [ 189.948705][ T6662] BTRFS info (device loop0): enabling auto defrag [ 189.948722][ T6662] BTRFS info (device loop0): trying to use backup root at mount time [ 189.948740][ T6662] BTRFS info (device loop0): force zlib compression, level 3 [ 189.975956][ T5901] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 190.099636][ T38] audit: type=1800 audit(1776648909.612:3): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.179" name="bus" dev="loop0" ino=257 res=0 errno=0 [ 190.196680][ T6683] loop2: detected capacity change from 0 to 16 [ 190.219857][ T5901] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 190.219876][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.268869][ T5901] usb 2-1: config 0 descriptor?? [ 190.284172][ T5901] hub 2-1:0.0: bad descriptor, ignoring hub [ 190.284204][ T5901] hub 2-1:0.0: probe with driver hub failed with error -5 [ 190.341643][ T5901] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 190.502306][ T5901] gp8psk: usb in 128 operation failed. [ 190.677939][ T6683] erofs (device loop2): mounted with root inode @ nid 36. [ 190.896148][ T5901] gp8psk: usb in 146 operation failed. [ 190.896167][ T5901] gp8psk: failed to get FW version [ 190.898700][ T5901] gp8psk: usb in 149 operation failed. [ 190.898715][ T5901] gp8psk: failed to get FPGA version [ 191.899504][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.918261][ T6683] syz.2.182: attempt to access beyond end of device [ 191.918261][ T6683] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 191.921310][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.040639][ T6683] syz.2.182: attempt to access beyond end of device [ 192.040639][ T6683] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 192.090227][ T38] audit: type=1800 audit(1776648911.582:4): pid=6683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.182" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 192.123077][ T5901] gp8psk: usb out operation failed. [ 192.123092][ T5901] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 192.123134][ T5901] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 192.363991][ T5831] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.398017][ T5901] usb 2-1: USB disconnect, device number 5 [ 194.849589][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.849687][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.603120][ T6711] loop4: detected capacity change from 0 to 262144 [ 195.616405][ T6711] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.188 (6711) [ 195.650158][ T6711] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 195.650179][ T6711] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 195.858236][ T3616] BTRFS warning (device loop4): checksum verify failed on logical 30654464 mirror 1 wanted 0x6191332ca3bfabbd found 0xbae7729e8e882fe8 level 0 [ 195.863692][ T56] BTRFS warning (device loop4): checksum verify failed on logical 30654464 mirror 2 wanted 0x6191332ca3bfabbd found 0x289c4fff53903711 level 0 [ 195.863976][ T6711] BTRFS warning (device loop4): couldn't read tree root [ 195.909888][ T6711] BTRFS error (device loop4): open_ctree failed: -5 [ 196.116320][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 196.116337][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 196.461121][ T5816] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 196.624811][ T5816] usb 1-1: config 9 has an invalid interface number: 181 but max is 0 [ 196.624841][ T5816] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 196.624854][ T5816] usb 1-1: config 9 has no interface number 0 [ 196.624882][ T5816] usb 1-1: config 9 interface 181 altsetting 44 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 196.624900][ T5816] usb 1-1: config 9 interface 181 has no altsetting 0 [ 196.627399][ T5816] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e310, bcdDevice=34.b6 [ 196.627416][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.627429][ T5816] usb 1-1: Product: syz [ 196.627437][ T5816] usb 1-1: Manufacturer: syz [ 196.627446][ T5816] usb 1-1: SerialNumber: syz [ 197.026032][ T6727] tmpfs: Unknown parameter 'ítol' [ 197.220911][ T5816] em28xx 1-1:9.181: audio device (eb1a:e310): interface 181, class 1 [ 197.253054][ T5816] usb 1-1: USB disconnect, device number 12 [ 197.803155][ T6751] cgroup: Invalid name [ 198.072851][ T5816] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 198.181472][ T6756] loop2: detected capacity change from 0 to 512 [ 198.257008][ T5816] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 198.257036][ T5816] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 198.257102][ T5816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.257119][ T5816] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 198.258334][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.442922][ T5816] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 199.442949][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.539979][ T5816] usb 4-1: config 0 descriptor?? [ 199.570477][ T6756] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 199.818075][ T6769] loop0: detected capacity change from 0 to 32768 [ 199.866229][ T5816] usb 4-1: language id specifier not provided by device, defaulting to English [ 199.886621][ T6769] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.200 (6769) [ 199.915361][ T6769] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.915384][ T6769] BTRFS info (device loop0): using sha256 checksum algorithm [ 200.009061][ T6756] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.198: invalid indirect mapped block 2683928664 (level 1) [ 200.009092][ T6756] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 200.023627][ C1] EXT4-fs (loop2): initial error at time 1776648919: ext4_free_branches:1023: inode 13 [ 200.023673][ C1] EXT4-fs (loop2): last error at time 1776648919: ext4_free_branches:1023: inode 13 [ 200.199856][ T6769] BTRFS info (device loop0): rebuilding free space tree [ 200.385696][ T6769] BTRFS info (device loop0): enabling ssd optimizations [ 200.385716][ T6769] BTRFS info (device loop0): using spread ssd allocation scheme [ 200.385730][ T6769] BTRFS info (device loop0): enabling free space tree [ 200.385742][ T6769] BTRFS info (device loop0): force clearing of disk cache [ 200.385753][ T6769] BTRFS info (device loop0): enabling auto defrag [ 200.385766][ T6769] BTRFS info (device loop0): max_inline set to 0 [ 200.520704][ T6756] EXT4-fs (loop2): Remounting filesystem read-only [ 200.665405][ T6756] EXT4-fs (loop2): 1 truncate cleaned up [ 200.777564][ T6756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.948006][ T6756] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 201.028443][ T6756] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 201.620278][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.829957][ T5816] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 201.854747][ T5816] usb 4-1: USB disconnect, device number 6 [ 203.677054][ T6793] loop3: detected capacity change from 0 to 262144 [ 203.679013][ T6793] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.203 (6793) [ 203.919047][ T6793] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 203.919079][ T6793] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 203.919102][ T6793] BTRFS error (device loop3): superblock checksum mismatch [ 203.919240][ T6793] BTRFS error (device loop3): open_ctree failed: -22 [ 204.522090][ T5962] udevd[5962]: incorrect btrfs checksum on /dev/loop3 [ 204.886232][ T6805] loop2: detected capacity change from 0 to 4096 [ 204.904623][ T6805] ntfs3: Bad value for 'uid' [ 204.904639][ T6805] ntfs3: Bad value for 'uid' [ 205.440213][ T1190] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 208.325930][ T5831] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.155878][ T5816] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 209.303355][ T5816] usb 5-1: Using ep0 maxpacket: 32 [ 209.312294][ T5816] usb 5-1: unable to get BOS descriptor or descriptor too short [ 209.322011][ T5816] usb 5-1: config 4 has an invalid interface number: 17 but max is 0 [ 209.322035][ T5816] usb 5-1: config 4 has no interface number 0 [ 209.322077][ T5816] usb 5-1: config 4 interface 17 has no altsetting 0 [ 209.355985][ T5816] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=7d.2a [ 209.356016][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.356039][ T5816] usb 5-1: Product: syz [ 209.356055][ T5816] usb 5-1: Manufacturer: syz [ 209.356080][ T5816] usb 5-1: SerialNumber: syz [ 209.839851][ T6829] loop2: detected capacity change from 0 to 131072 [ 209.875042][ T6829] F2FS-fs (loop2): Test dummy encryption mode enabled [ 209.884644][ T6829] F2FS-fs (loop2): invalid crc value [ 210.210386][ T6829] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 210.262080][ T6829] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 210.318145][ T6829] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 210.383369][ T6829] F2FS-fs (loop2): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 210.433179][ T6836] loop4: detected capacity change from 0 to 512 [ 210.608446][ T6836] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 210.681551][ T5816] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 210.690358][ T5816] gspca_sn9c2028: read1 error -71 [ 210.692227][ T5816] gspca_sn9c2028: read1 error -71 [ 210.692597][ T5816] gspca_sn9c2028: read1 error -71 [ 210.692675][ T5816] sn9c2028 5-1:4.17: probe with driver sn9c2028 failed with error -71 [ 210.843765][ T5816] usb 5-1: USB disconnect, device number 11 [ 211.297103][ T6855] loop0: detected capacity change from 0 to 512 [ 211.835668][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 211.835708][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 211.835731][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 211.906395][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 212.609194][ T6864] loop0: detected capacity change from 0 to 8 [ 214.014089][ T6864] SQUASHFS error: lzo decompression failed, data probably corrupt [ 214.014117][ T6864] SQUASHFS error: Failed to read block 0x28d: -5 [ 214.014130][ T6864] SQUASHFS error: Unable to read metadata cache entry [28b] [ 214.014147][ T6864] SQUASHFS error: Unable to read inode 0x11f [ 214.471853][ T6864] kvm: emulating exchange as write [ 214.733085][ T5816] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 214.896008][ T5816] usb 4-1: Using ep0 maxpacket: 32 [ 214.929465][ T5816] usb 4-1: config 10 has an invalid interface number: 251 but max is 0 [ 214.929503][ T5816] usb 4-1: config 10 has no interface number 0 [ 214.929552][ T5816] usb 4-1: config 10 interface 251 has no altsetting 0 [ 214.957554][ T5816] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= 5.ff [ 214.957582][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.957602][ T5816] usb 4-1: Product: syz [ 214.957616][ T5816] usb 4-1: Manufacturer: syz [ 214.957630][ T5816] usb 4-1: SerialNumber: syz [ 215.461225][ T6881] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.230'. [ 215.461251][ T6881] FAULT_INJECTION: forcing a failure. [ 215.461251][ T6881] name failslab, interval 1, probability 0, space 0, times 0 [ 215.461277][ T6881] CPU: 1 UID: 0 PID: 6881 Comm: syz.1.230 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 215.461298][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 215.461309][ T6881] Call Trace: [ 215.461316][ T6881] [ 215.461324][ T6881] dump_stack_lvl+0xe8/0x150 [ 215.461349][ T6881] should_fail_ex+0x46b/0x600 [ 215.461375][ T6881] should_failslab+0xa8/0x100 [ 215.461407][ T6881] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 215.461434][ T6881] ? __alloc_skb+0x1d0/0x7d0 [ 215.461455][ T6881] ? lockdep_hardirqs_on+0x7a/0x110 [ 215.461482][ T6881] __alloc_skb+0x1d0/0x7d0 [ 215.461511][ T6881] __netdev_alloc_skb+0xc0/0x4b0 [ 215.461549][ T6881] ovs_packet_cmd_execute+0x205/0xe70 [ 215.461594][ T6881] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 215.461627][ T6881] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 215.461658][ T6881] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 215.461698][ T6881] genl_family_rcv_msg_doit+0x22a/0x330 [ 215.461736][ T6881] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 215.461778][ T6881] ? bpf_lsm_capable+0x9/0x20 [ 215.461803][ T6881] ? security_capable+0x7e/0x2c0 [ 215.461837][ T6881] genl_rcv_msg+0x61c/0x7a0 [ 215.461874][ T6881] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.461901][ T6881] ? ref_tracker_free+0x673/0x820 [ 215.461922][ T6881] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 215.461953][ T6881] ? ____sys_sendmsg+0x55c/0x870 [ 215.461978][ T6881] ? ___sys_sendmsg+0x2a5/0x360 [ 215.462003][ T6881] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 215.462028][ T6881] ? do_syscall_64+0x15f/0xf80 [ 215.462048][ T6881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.462075][ T6881] netlink_rcv_skb+0x232/0x4b0 [ 215.462100][ T6881] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.462131][ T6881] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.462167][ T6881] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.462192][ T6881] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.462221][ T6881] genl_rcv+0x28/0x40 [ 215.462248][ T6881] netlink_unicast+0x780/0x920 [ 215.462279][ T6881] netlink_sendmsg+0x813/0xb40 [ 215.462314][ T6881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.462341][ T6881] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 215.462373][ T6881] ? aa_sock_msg_perm+0x122/0x200 [ 215.462399][ T6881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.462423][ T6881] sock_sendmsg_nosec+0x112/0x150 [ 215.462445][ T6881] ____sys_sendmsg+0x55c/0x870 [ 215.462478][ T6881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.462533][ T6881] ? import_iovec+0x73/0xa0 [ 215.462561][ T6881] ___sys_sendmsg+0x2a5/0x360 [ 215.462596][ T6881] ? __lock_acquire+0x6b5/0x2cf0 [ 215.462628][ T6881] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.462691][ T6881] ? __fget_files+0x2a/0x420 [ 215.462716][ T6881] ? __fget_files+0x3a6/0x420 [ 215.462751][ T6881] __x64_sys_sendmsg+0x1c3/0x2a0 [ 215.462784][ T6881] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.462822][ T6881] ? __pfx_ksys_write+0x10/0x10 [ 215.462860][ T6881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.462882][ T6881] do_syscall_64+0x15f/0xf80 [ 215.462916][ T6881] ? trace_irq_disable+0x3b/0x140 [ 215.462937][ T6881] ? clear_bhb_loop+0x40/0x90 [ 215.462961][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.462980][ T6881] RIP: 0033:0x7fe66a13c819 [ 215.463015][ T6881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.463032][ T6881] RSP: 002b:00007fe668396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.463052][ T6881] RAX: ffffffffffffffda RBX: 00007fe66a3b5fa0 RCX: 00007fe66a13c819 [ 215.463066][ T6881] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 215.463078][ T6881] RBP: 00007fe668396090 R08: 0000000000000000 R09: 0000000000000000 [ 215.463091][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.463102][ T6881] R13: 00007fe66a3b6038 R14: 00007fe66a3b5fa0 R15: 00007ffc12925308 [ 215.463133][ T6881] [ 216.599772][ T6887] loop0: detected capacity change from 0 to 16 [ 216.827790][ T6887] overlayfs: overlapping lowerdir path [ 220.178879][ T5816] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 220.182916][ T5816] gspca_sunplus: reg_r err -32 [ 220.182986][ T5816] sunplus 4-1:10.251: probe with driver sunplus failed with error -32 [ 222.237965][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 223.280962][ T6913] loop0: detected capacity change from 0 to 2048 [ 223.603902][ T6913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.793777][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.242947][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 224.406334][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.406360][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 224.406410][ T10] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 224.406433][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.623862][ T10] usb 1-1: config 0 descriptor?? [ 224.834017][ T10] Bluetooth: Can't get state to change to load ram patch err [ 224.834037][ T10] Bluetooth: Loading patch file failed [ 224.834062][ T10] ath3k 1-1:0.0: probe with driver ath3k failed with error -121 [ 224.946025][ T6929] loop9: detected capacity change from 0 to 7 [ 224.965022][ T6929] Dev loop9: unable to read RDB block 7 [ 224.965054][ T6929] loop9: AHDI p1 p2 p3 [ 224.965083][ T6929] loop9: partition table partially beyond EOD, truncated [ 224.965305][ T6929] loop9: p1 start 1920169572 is beyond EOD, truncated [ 224.965328][ T6929] loop9: p2 start 1851744889 is beyond EOD, truncated [ 225.387163][ T5148] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 225.387188][ T5148] CPU: 0 UID: 0 PID: 5148 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 225.387210][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 225.387228][ T5148] Workqueue: hci2 hci_rx_work [ 225.387254][ T5148] Call Trace: [ 225.387262][ T5148] [ 225.387272][ T5148] dump_stack_lvl+0xe8/0x150 [ 225.387298][ T5148] sysfs_create_dir_ns+0x271/0x2a0 [ 225.387327][ T5148] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 225.387359][ T5148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 225.387388][ T5148] ? rt_spin_unlock+0x160/0x200 [ 225.387421][ T5148] kobject_add_internal+0x631/0xd10 [ 225.387455][ T5148] kobject_add+0x163/0x240 [ 225.387486][ T5148] ? __pfx_kobject_add+0x10/0x10 [ 225.387519][ T5148] ? get_device_parent+0x370/0x3a0 [ 225.387547][ T5148] device_add+0x408/0xbb0 [ 225.387575][ T5148] hci_conn_add_sysfs+0xd5/0x210 [ 225.387603][ T5148] le_conn_complete_evt+0x10e6/0x16b0 [ 225.387654][ T5148] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 225.387686][ T5148] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 225.387710][ T5148] ? lockdep_hardirqs_on+0x7a/0x110 [ 225.387734][ T5148] ? skb_pull_data+0xfb/0x200 [ 225.387770][ T5148] hci_le_conn_complete_evt+0x187/0x470 [ 225.387807][ T5148] hci_event_packet+0x659/0xef0 [ 225.387837][ T5148] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 225.387866][ T5148] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 225.387892][ T5148] ? __pfx_hci_event_packet+0x10/0x10 [ 225.387915][ T5148] ? rt_spin_unlock+0x14f/0x200 [ 225.387953][ T5148] ? hci_send_to_monitor+0xe2/0x590 [ 225.387988][ T5148] hci_rx_work+0x3ee/0x1040 [ 225.388024][ T5148] ? process_one_work+0x8b7/0x1710 [ 225.388044][ T5148] process_one_work+0x9a3/0x1710 [ 225.388084][ T5148] ? __pfx_process_one_work+0x10/0x10 [ 225.388103][ T5148] ? do_raw_spin_lock+0x12b/0x2f0 [ 225.388161][ T5148] worker_thread+0xba8/0x11e0 [ 225.388194][ T5148] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 225.388221][ T5148] ? __kthread_parkme+0x7a/0x1f0 [ 225.388246][ T5148] ? __kthread_parkme+0x19c/0x1f0 [ 225.388277][ T5148] kthread+0x388/0x470 [ 225.388306][ T5148] ? __pfx_worker_thread+0x10/0x10 [ 225.388327][ T5148] ? __pfx_kthread+0x10/0x10 [ 225.388357][ T5148] ret_from_fork+0x514/0xb70 [ 225.388383][ T5148] ? __pfx_ret_from_fork+0x10/0x10 [ 225.388407][ T5148] ? __switch_to+0xc79/0x1410 [ 225.388441][ T5148] ? __pfx_kthread+0x10/0x10 [ 225.388471][ T5148] ret_from_fork_asm+0x1a/0x30 [ 225.388514][ T5148] [ 225.388772][ T5148] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 225.388815][ T5148] Bluetooth: hci2: failed to register connection device [ 225.895599][ T6937] comedi comedi1: pcl730: I/O base address or length out of range [ 227.677275][ T6010] usb 4-1: USB disconnect, device number 7 [ 227.835634][ T6949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.927547][ T37] usb 1-1: USB disconnect, device number 13 [ 230.930631][ T6986] FAULT_INJECTION: forcing a failure. [ 230.930631][ T6986] name failslab, interval 1, probability 0, space 0, times 0 [ 230.930664][ T6986] CPU: 0 UID: 0 PID: 6986 Comm: syz.1.254 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 230.930686][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 230.930698][ T6986] Call Trace: [ 230.930705][ T6986] [ 230.930713][ T6986] dump_stack_lvl+0xe8/0x150 [ 230.930737][ T6986] should_fail_ex+0x46b/0x600 [ 230.930763][ T6986] should_failslab+0xa8/0x100 [ 230.930794][ T6986] kmem_cache_alloc_noprof+0x87/0x680 [ 230.930822][ T6986] ? dst_alloc+0x105/0x170 [ 230.930855][ T6986] dst_alloc+0x105/0x170 [ 230.930887][ T6986] ip6_blackhole_route+0x59/0x340 [ 230.930918][ T6986] xfrm_lookup_route+0xd7/0x1c0 [ 230.930945][ T6986] rawv6_sendmsg+0xe1d/0x18e0 [ 230.930995][ T6986] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 230.931046][ T6986] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.931071][ T6986] ? sock_rps_record_flow+0x19/0x350 [ 230.931123][ T6986] ? inet_sendmsg+0x2f4/0x370 [ 230.931149][ T6986] ? aa_sock_msg_perm+0x122/0x200 [ 230.931175][ T6986] ? __pfx_inet_sendmsg+0x10/0x10 [ 230.931200][ T6986] sock_sendmsg_nosec+0xf9/0x150 [ 230.931224][ T6986] ____sys_sendmsg+0x55c/0x870 [ 230.931256][ T6986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.931290][ T6986] ? import_iovec+0x73/0xa0 [ 230.931316][ T6986] ___sys_sendmsg+0x2a5/0x360 [ 230.931341][ T6986] ? __lock_acquire+0x6b5/0x2cf0 [ 230.931372][ T6986] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.931431][ T6986] ? __fget_files+0x2a/0x420 [ 230.931454][ T6986] ? __fget_files+0x3a6/0x420 [ 230.931488][ T6986] __x64_sys_sendmsg+0x1c3/0x2a0 [ 230.931519][ T6986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.931556][ T6986] ? __pfx_ksys_write+0x10/0x10 [ 230.931592][ T6986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.931614][ T6986] do_syscall_64+0x15f/0xf80 [ 230.931653][ T6986] ? trace_irq_disable+0x3b/0x140 [ 230.931678][ T6986] ? clear_bhb_loop+0x40/0x90 [ 230.931723][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.931745][ T6986] RIP: 0033:0x7fe66a13c819 [ 230.931765][ T6986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.931782][ T6986] RSP: 002b:00007fe668396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.931823][ T6986] RAX: ffffffffffffffda RBX: 00007fe66a3b5fa0 RCX: 00007fe66a13c819 [ 230.931840][ T6986] RDX: 0000000000040810 RSI: 0000200000000580 RDI: 0000000000000003 [ 230.931855][ T6986] RBP: 00007fe668396090 R08: 0000000000000000 R09: 0000000000000000 [ 230.931869][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.931882][ T6986] R13: 00007fe66a3b6038 R14: 00007fe66a3b5fa0 R15: 00007ffc12925308 [ 230.931918][ T6986] [ 231.479737][ T6985] loop0: detected capacity change from 0 to 2048 [ 231.708674][ T6989] loop1: detected capacity change from 0 to 8 [ 231.797465][ T6989] netlink: 'syz.1.257': attribute type 29 has an invalid length. [ 231.812617][ T6989] netlink: 'syz.1.257': attribute type 29 has an invalid length. [ 231.825485][ T6989] netlink: 'syz.1.257': attribute type 29 has an invalid length. [ 231.880984][ T6989] SQUASHFS error: Unable to read inode 0xe3 [ 232.790191][ T6995] netlink: 'syz.0.258': attribute type 7 has an invalid length. [ 232.791295][ T6995] netlink: 'syz.0.258': attribute type 8 has an invalid length. [ 233.366774][ T7000] loop1: detected capacity change from 0 to 1024 [ 233.608266][ T7003] loop0: detected capacity change from 0 to 4096 [ 233.893024][ T7003] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 233.915148][ T823] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 233.944632][ T7003] ntfs3(loop0): Failed to load $Extend (-22). [ 233.944654][ T7003] ntfs3(loop0): Failed to initialize $Extend. [ 234.184126][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 235.206473][ T823] usb 4-1: Using ep0 maxpacket: 16 [ 235.224748][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.224778][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.224814][ T823] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 235.224834][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.336253][ T823] usb 4-1: config 0 descriptor?? [ 235.523049][ T37] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 235.706711][ T37] usb 5-1: Using ep0 maxpacket: 8 [ 235.717788][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.730864][ T37] usb 5-1: config 117 has an invalid interface number: 163 but max is 0 [ 235.731126][ T37] usb 5-1: config 117 has no interface number 0 [ 235.731164][ T37] usb 5-1: config 117 interface 163 altsetting 162 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 235.731185][ T37] usb 5-1: config 117 interface 163 has no altsetting 0 [ 235.780606][ T37] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 235.780632][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.780654][ T37] usb 5-1: Product: syz [ 235.780663][ T37] usb 5-1: Manufacturer: syz [ 235.780673][ T37] usb 5-1: SerialNumber: syz [ 235.844571][ T5901] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 236.003735][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 236.004289][ T823] usb 4-1: language id specifier not provided by device, defaulting to English [ 236.007134][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.007167][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.007433][ T5901] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 236.007460][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.084944][ T5901] usb 3-1: config 0 descriptor?? [ 236.108243][ T5901] hub 3-1:0.0: USB hub found [ 236.188503][ T7015] loop4: detected capacity change from 0 to 512 [ 236.208228][ T823] letsketch 0003:6161:4D15.0003: Device info:  [ 236.221326][ T7015] EXT4-fs: quotafile must be on filesystem root [ 236.290215][ T7018] process 'syz.2.255' launched './file0' with NULL argv: empty string added [ 236.409801][ T823] letsketch 0003:6161:4D15.0003: Device info: ï“¿ [ 236.419931][ T5901] hub 3-1:0.0: 1 port detected [ 236.722183][ T823] usb 4-1: Max retries (5) exceeded reading string descriptor 202 [ 236.722379][ T823] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -71 [ 236.838554][ T823] usb 4-1: USB disconnect, device number 8 [ 236.938491][ T37] f81534a_ctrl 5-1:117.163: failed to enable ports: -71 [ 236.938546][ T37] f81534a_ctrl 5-1:117.163: probe with driver f81534a_ctrl failed with error -71 [ 237.040945][ T37] usb 5-1: USB disconnect, device number 12 [ 237.220305][ T5901] hub 3-1:0.0: activate --> -90 [ 237.639132][ T7018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.639707][ T7018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.663170][ T37] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 237.767551][ T5816] usb 3-1: USB disconnect, device number 10 [ 237.767648][ T5901] usb 3-1-port1: cannot reset (err = -71) [ 237.768170][ T5901] usb 3-1-port1: attempt power cycle [ 237.827215][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 237.845498][ T37] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 237.845529][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.845550][ T37] usb 4-1: Product: syz [ 237.845566][ T37] usb 4-1: Manufacturer: syz [ 237.845582][ T37] usb 4-1: SerialNumber: syz [ 237.886421][ T37] usb 4-1: config 0 descriptor?? [ 237.898948][ T37] gspca_main: spca508-2.14.0 probing 041e:4018 [ 238.107832][ T37] gspca_spca508: reg_read err -32 [ 238.157499][ T7026] loop3: detected capacity change from 0 to 256 [ 238.245683][ T37] gspca_spca508: reg_read err -71 [ 238.251650][ T37] gspca_spca508: reg_read err -71 [ 238.252051][ T37] gspca_spca508: reg_read err -71 [ 238.252541][ T37] gspca_spca508: reg_read err -71 [ 238.264643][ T37] gspca_spca508: reg write: error -71 [ 238.264729][ T37] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 238.391522][ T37] usb 4-1: USB disconnect, device number 9 [ 239.240397][ T5901] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 240.389034][ T5901] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 240.389068][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.389080][ T5901] usb 1-1: Product: syz [ 240.389090][ T5901] usb 1-1: Manufacturer: syz [ 240.389099][ T5901] usb 1-1: SerialNumber: syz [ 240.455188][ T5901] usb 1-1: config 0 descriptor?? [ 240.699651][ T5901] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 240.743609][ T7063] FAULT_INJECTION: forcing a failure. [ 240.743609][ T7063] name failslab, interval 1, probability 0, space 0, times 0 [ 240.743640][ T7063] CPU: 0 UID: 0 PID: 7063 Comm: syz.1.280 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 240.743661][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 240.743681][ T7063] Call Trace: [ 240.743698][ T7063] [ 240.743706][ T7063] dump_stack_lvl+0xe8/0x150 [ 240.743734][ T7063] should_fail_ex+0x46b/0x600 [ 240.743760][ T7063] should_failslab+0xa8/0x100 [ 240.743792][ T7063] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 240.743820][ T7063] ? alloc_vmap_area+0x229/0x1480 [ 240.743851][ T7063] alloc_vmap_area+0x229/0x1480 [ 240.743891][ T7063] ? __pfx_alloc_vmap_area+0x10/0x10 [ 240.743920][ T7063] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 240.743957][ T7063] ? __get_vm_area_node+0x171/0x350 [ 240.743982][ T7063] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 240.744009][ T7063] __get_vm_area_node+0x226/0x350 [ 240.744043][ T7063] __vmalloc_node_range_noprof+0x36a/0x1750 [ 240.744072][ T7063] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 240.744101][ T7063] ? __lock_acquire+0x6b5/0x2cf0 [ 240.744147][ T7063] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.744176][ T7063] ? __lock_acquire+0x6b5/0x2cf0 [ 240.744206][ T7063] ? _parse_integer_limit+0x192/0x1e0 [ 240.744242][ T7063] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 240.744265][ T7063] __vmalloc_noprof+0xd2/0x120 [ 240.744291][ T7063] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 240.744318][ T7063] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 240.744347][ T7063] bpf_prog_alloc+0x3c/0x1a0 [ 240.744375][ T7063] bpf_prog_load+0x779/0x1a10 [ 240.744410][ T7063] ? __pfx_bpf_prog_load+0x10/0x10 [ 240.744435][ T7063] ? __might_fault+0xaf/0x130 [ 240.744476][ T7063] ? bpf_lsm_bpf+0x9/0x20 [ 240.744500][ T7063] ? security_bpf+0x7e/0x2d0 [ 240.744526][ T7063] __sys_bpf+0x618/0x950 [ 240.744552][ T7063] ? __pfx___sys_bpf+0x10/0x10 [ 240.744572][ T7063] ? rt_mutex_slowunlock+0x1cb/0x300 [ 240.744617][ T7063] ? ksys_write+0x248/0x270 [ 240.744647][ T7063] ? __pfx_ksys_write+0x10/0x10 [ 240.744681][ T7063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.744703][ T7063] __x64_sys_bpf+0x7c/0x90 [ 240.744725][ T7063] do_syscall_64+0x15f/0xf80 [ 240.744745][ T7063] ? trace_irq_disable+0x3b/0x140 [ 240.744768][ T7063] ? clear_bhb_loop+0x40/0x90 [ 240.744792][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.744812][ T7063] RIP: 0033:0x7fe66a13c819 [ 240.744830][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.744846][ T7063] RSP: 002b:00007fe668396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.744866][ T7063] RAX: ffffffffffffffda RBX: 00007fe66a3b5fa0 RCX: 00007fe66a13c819 [ 240.744880][ T7063] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005 [ 240.744892][ T7063] RBP: 00007fe668396090 R08: 0000000000000000 R09: 0000000000000000 [ 240.744904][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.744915][ T7063] R13: 00007fe66a3b6038 R14: 00007fe66a3b5fa0 R15: 00007ffc12925308 [ 240.744985][ T7063] [ 240.752081][ T7063] syz.1.280: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 240.752146][ T7063] CPU: 0 UID: 0 PID: 7063 Comm: syz.1.280 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 240.752170][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 240.752183][ T7063] Call Trace: [ 240.752190][ T7063] [ 240.752197][ T7063] dump_stack_lvl+0xe8/0x150 [ 240.752223][ T7063] warn_alloc+0x263/0x3e0 [ 240.752254][ T7063] ? kasan_quarantine_put+0xbb/0x1f0 [ 240.752276][ T7063] ? __pfx_warn_alloc+0x10/0x10 [ 240.752300][ T7063] ? __get_vm_area_node+0x23f/0x350 [ 240.752320][ T7063] ? __get_vm_area_node+0x171/0x350 [ 240.752340][ T7063] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 240.752362][ T7063] ? __get_vm_area_node+0x23f/0x350 [ 240.752387][ T7063] __vmalloc_node_range_noprof+0x38f/0x1750 [ 240.752413][ T7063] ? __lock_acquire+0x6b5/0x2cf0 [ 240.752450][ T7063] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.752474][ T7063] ? __lock_acquire+0x6b5/0x2cf0 [ 240.752497][ T7063] ? _parse_integer_limit+0x192/0x1e0 [ 240.752527][ T7063] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 240.752546][ T7063] __vmalloc_noprof+0xd2/0x120 [ 240.752570][ T7063] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 240.752591][ T7063] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 240.752612][ T7063] bpf_prog_alloc+0x3c/0x1a0 [ 240.752634][ T7063] bpf_prog_load+0x779/0x1a10 [ 240.752660][ T7063] ? __pfx_bpf_prog_load+0x10/0x10 [ 240.752679][ T7063] ? __might_fault+0xaf/0x130 [ 240.752710][ T7063] ? bpf_lsm_bpf+0x9/0x20 [ 240.752729][ T7063] ? security_bpf+0x7e/0x2d0 [ 240.752748][ T7063] __sys_bpf+0x618/0x950 [ 240.752767][ T7063] ? __pfx___sys_bpf+0x10/0x10 [ 240.752783][ T7063] ? rt_mutex_slowunlock+0x1cb/0x300 [ 240.752817][ T7063] ? ksys_write+0x248/0x270 [ 240.752841][ T7063] ? __pfx_ksys_write+0x10/0x10 [ 240.752866][ T7063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.752883][ T7063] __x64_sys_bpf+0x7c/0x90 [ 240.752899][ T7063] do_syscall_64+0x15f/0xf80 [ 240.752916][ T7063] ? trace_irq_disable+0x3b/0x140 [ 240.752944][ T7063] ? clear_bhb_loop+0x40/0x90 [ 240.752962][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.752977][ T7063] RIP: 0033:0x7fe66a13c819 [ 240.752991][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.753005][ T7063] RSP: 002b:00007fe668396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.753020][ T7063] RAX: ffffffffffffffda RBX: 00007fe66a3b5fa0 RCX: 00007fe66a13c819 [ 240.753031][ T7063] RDX: 0000000000000094 RSI: 0000200000000640 RDI: 0000000000000005 [ 240.753041][ T7063] RBP: 00007fe668396090 R08: 0000000000000000 R09: 0000000000000000 [ 240.753051][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.753060][ T7063] R13: 00007fe66a3b6038 R14: 00007fe66a3b5fa0 R15: 00007ffc12925308 [ 240.753082][ T7063] [ 240.758549][ T7063] Mem-Info: [ 240.758567][ T7063] active_anon:28566 inactive_anon:0 isolated_anon:0 [ 240.758567][ T7063] active_file:21311 inactive_file:40019 isolated_file:0 [ 240.758567][ T7063] unevictable:768 dirty:191 writeback:0 [ 240.758567][ T7063] slab_reclaimable:12328 slab_unreclaimable:99665 [ 240.758567][ T7063] mapped:30550 shmem:22987 pagetables:1238 [ 240.758567][ T7063] sec_pagetables:0 bounce:0 [ 240.758567][ T7063] kernel_misc_reclaimable:0 [ 240.758567][ T7063] free:1287248 free_pcp:2466 free_cma:0 [ 240.758640][ T7063] Node 0 active_anon:114264kB inactive_anon:0kB active_file:85244kB inactive_file:159872kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122200kB dirty:764kB writeback:0kB shmem:90412kB kernel_stack:13484kB pagetables:4808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 240.758695][ T7063] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 240.758768][ T7063] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.758867][ T7063] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 240.773735][ T7063] Node 0 DMA32 free:1203424kB boost:0kB min:3916kB low:6440kB high:8964kB reserved_highatomic:0KB free_highatomic:0KB active_anon:114064kB inactive_anon:0kB active_file:85244kB inactive_file:159872kB unevictable:1536kB writepending:764kB zspages:0kB present:3129332kB managed:2554488kB mlocked:0kB bounce:0kB free_pcp:8504kB local_pcp:4968kB free_cma:0kB [ 240.773826][ T7063] lowmem_reserve[]: 0 0 1 1 1 [ 240.773881][ T7063] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1224kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 240.773978][ T7063] lowmem_reserve[]: 0 0 0 0 0 [ 240.774048][ T7063] Node 1 Normal free:3930208kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:1476kB local_pcp:1476kB free_cma:0kB [ 240.774148][ T7063] lowmem_reserve[]: 0 0 0 0 0 [ 240.774233][ T7063] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.774440][ T7063] Node 0 DMA32: 860*4kB (UME) 1159*8kB (UM) 650*16kB (UME) 189*32kB (U) 47*64kB (UE) 403*128kB (UME) 220*256kB (UM) 91*512kB (UM) 31*1024kB (M) 11*2048kB (UME) 235*4096kB (UM) = 1203496kB [ 240.774724][ T7063] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 240.774893][ T7063] Node 1 Normal: 3*4kB (U) 1*8kB (U) 2*16kB (U) 1*32kB (U) 1*64kB (U) 2*128kB (U) 1*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3930260kB [ 240.790372][ T7063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.790420][ T7063] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.790456][ T7063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.790473][ T7063] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.790490][ T7063] 84235 total pagecache pages [ 240.790498][ T7063] 0 pages in swap cache [ 240.790512][ T7063] Free swap = 124996kB [ 240.790532][ T7063] Total swap = 124996kB [ 240.790553][ T7063] 2097051 pages RAM [ 240.790572][ T7063] 0 pages HighMem/MovableOnly [ 240.790595][ T7063] 426509 pages reserved [ 240.790614][ T7063] 0 pages cma reserved [ 241.902115][ T7066] loop2: detected capacity change from 0 to 164 [ 242.142487][ T7066] Unable to read rock-ridge attributes [ 242.212979][ T6010] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 242.379036][ T6010] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 242.379082][ T6010] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 242.379102][ T6010] usb 2-1: config 171 has no interface number 0 [ 242.379157][ T6010] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 242.379183][ T6010] usb 2-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 242.382333][ T6010] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 242.382359][ T6010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.382380][ T6010] usb 2-1: Product: syz [ 242.382394][ T6010] usb 2-1: Manufacturer: syz [ 242.382408][ T6010] usb 2-1: SerialNumber: syz [ 242.462937][ T823] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 242.470034][ T7069] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 242.622792][ T823] usb 3-1: Using ep0 maxpacket: 8 [ 242.631363][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.631499][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.631542][ T823] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 242.631830][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.689748][ T823] usb 3-1: config 0 descriptor?? [ 242.700088][ T5901] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 242.728075][ T5901] usb 1-1: USB disconnect, device number 14 [ 243.150589][ T6010] ath6kl: Failed to submit usb control message: -71 [ 243.150640][ T6010] ath6kl: unable to send the bmi data to the device: -71 [ 243.150658][ T6010] ath6kl: Unable to send get target info: -71 [ 243.188071][ T6010] ath6kl: Failed to init ath6kl core: -71 [ 243.204103][ T6010] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 243.240996][ T7066] Unable to read rock-ridge attributes [ 243.268578][ T823] logitech 0003:046D:C20E.0004: rdesc size test failed for formula gp [ 243.272598][ T823] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 243.272632][ T823] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 243.272655][ T823] logitech 0003:046D:C20E.0004: unknown main item tag 0x2 [ 243.272679][ T823] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 243.281007][ T823] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 243.281037][ T823] logitech 0003:046D:C20E.0004: unknown main item tag 0x0 [ 243.281062][ T823] logitech 0003:046D:C20E.0004: unbalanced collection at end of report description [ 243.337189][ T823] logitech 0003:046D:C20E.0004: parse failed [ 243.337305][ T823] logitech 0003:046D:C20E.0004: probe with driver logitech failed with error -22 [ 243.343073][ T6010] usb 2-1: USB disconnect, device number 6 [ 243.523544][ T7066] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 243.603319][ T7066] Unable to read rock-ridge attributes [ 243.603375][ T7066] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 243.725901][ T5915] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 243.973944][ T823] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 244.163089][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 244.180193][ T5915] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 244.180221][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.180241][ T5915] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 244.180264][ T5915] usb 5-1: config 0 has no interface number 0 [ 244.180308][ T5915] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 244.188573][ T5915] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 244.188676][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.188744][ T5915] usb 5-1: Product: syz [ 244.188795][ T5915] usb 5-1: Manufacturer: syz [ 244.188815][ T5915] usb 5-1: SerialNumber: syz [ 244.212929][ T7096] loop3: detected capacity change from 0 to 64 [ 244.263634][ T7096] minix: Unknown parameter '8' [ 244.303340][ T823] usb 1-1: Using ep0 maxpacket: 16 [ 244.311965][ T5915] usb 5-1: config 0 descriptor?? [ 244.325385][ T823] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 244.325415][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.325438][ T823] usb 1-1: Product: syz [ 244.325454][ T823] usb 1-1: Manufacturer: syz [ 244.325471][ T823] usb 1-1: SerialNumber: syz [ 244.394633][ T823] usb 1-1: config 0 descriptor?? [ 244.414053][ T823] gspca_main: spca508-2.14.0 probing 041e:4018 [ 244.446507][ T5915] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 244.534295][ T37] usb 3-1: USB disconnect, device number 15 [ 244.683794][ T5816] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 244.714744][ T823] gspca_spca508: reg_read err -32 [ 244.831609][ T7089] loop0: detected capacity change from 0 to 256 [ 244.842927][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 244.843924][ T5816] usb 4-1: no configurations [ 244.843940][ T5816] usb 4-1: can't read configurations, error -22 [ 244.890350][ T823] gspca_spca508: reg_read err -71 [ 244.890757][ T823] gspca_spca508: reg_read err -71 [ 244.891147][ T823] gspca_spca508: reg_read err -71 [ 244.891588][ T823] gspca_spca508: reg_read err -71 [ 244.910146][ T823] gspca_spca508: reg write: error -71 [ 244.910227][ T823] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 244.943865][ T823] usb 1-1: USB disconnect, device number 15 [ 244.947182][ T2393] pvrusb2: Invalid write control endpoint [ 244.975236][ T5816] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 245.065611][ T2393] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 245.065638][ T2393] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 245.133212][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 245.163719][ T5816] usb 4-1: no configurations [ 245.163732][ T5816] usb 4-1: can't read configurations, error -22 [ 245.165053][ T5816] usb usb4-port1: attempt power cycle [ 245.542833][ T5816] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 245.570502][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 245.571392][ T5816] usb 4-1: no configurations [ 245.571409][ T5816] usb 4-1: can't read configurations, error -22 [ 245.692931][ T5816] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 245.713608][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 245.714130][ T5816] usb 4-1: no configurations [ 245.714142][ T5816] usb 4-1: can't read configurations, error -22 [ 245.715500][ T5816] usb usb4-port1: unable to enumerate USB device [ 247.446928][ T6010] usb 5-1: USB disconnect, device number 13 [ 247.732965][ T823] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 247.733145][ T37] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 247.887477][ T823] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 247.891923][ T823] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 247.891948][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.891967][ T823] usb 3-1: Product: syz [ 247.891981][ T823] usb 3-1: Manufacturer: syz [ 247.891995][ T823] usb 3-1: SerialNumber: syz [ 247.904388][ T37] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 247.904412][ T37] usb 4-1: config 0 has no interface number 0 [ 247.904457][ T37] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 247.904492][ T37] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 247.976494][ T37] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 247.976523][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.976542][ T37] usb 4-1: Product: syz [ 247.976556][ T37] usb 4-1: Manufacturer: syz [ 247.976571][ T37] usb 4-1: SerialNumber: syz [ 248.035485][ T823] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 248.062439][ T37] usb 4-1: config 0 descriptor?? [ 248.066524][ T7110] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 248.067142][ T7110] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 248.279068][ T7110] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 248.279200][ T7110] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 248.492865][ T37] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 248.492895][ T37] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 248.546987][ T7114] loop4: detected capacity change from 0 to 32768 [ 248.549990][ T7114] btrfs: Unknown parameter '@' [ 248.673538][ T7112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.296'. [ 248.697767][ T37] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 248.698519][ T37] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 248.727055][ T5829] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 248.873040][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 248.905742][ T5829] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 248.905775][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.905797][ T5829] usb 2-1: Product: syz [ 248.905813][ T5829] usb 2-1: Manufacturer: syz [ 248.905829][ T5829] usb 2-1: SerialNumber: syz [ 249.026285][ T5829] usb 2-1: config 0 descriptor?? [ 249.029318][ T823] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 249.083483][ T5829] gspca_main: spca508-2.14.0 probing 041e:4018 [ 249.144495][ T823] usb 3-1: USB disconnect, device number 16 [ 249.264355][ T5829] gspca_spca508: reg_read err -32 [ 249.298825][ T7118] loop1: detected capacity change from 0 to 256 [ 249.587486][ T5829] gspca_spca508: reg_read err -71 [ 249.587959][ T5829] gspca_spca508: reg_read err -71 [ 249.588337][ T5829] gspca_spca508: reg_read err -71 [ 249.588803][ T5829] gspca_spca508: reg_read err -71 [ 249.597239][ T5829] gspca_spca508: reg write: error -71 [ 249.597318][ T5829] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 249.641590][ T5829] usb 2-1: USB disconnect, device number 7 [ 249.930871][ T7114] loop4: detected capacity change from 0 to 32768 [ 249.937978][ T7114] btrfs: Unknown parameter '@' [ 250.051789][ T7128] loop2: detected capacity change from 0 to 4096 [ 250.076439][ T7128] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 250.341228][ T7128] ntfs3(loop2): ino=19, mi_enum_attr [ 250.477218][ T5915] usb 4-1: USB disconnect, device number 14 [ 250.581596][ T7140] fuse: Bad value for 'fd' [ 250.660860][ T7145] warning: `syz.2.300' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 250.760931][ T7144] loop1: detected capacity change from 0 to 4096 [ 250.800199][ T7128] ntfs3(loop2): failed to convert "c46c" to iso8859-4 [ 250.837282][ T7128] ntfs3(loop2): ino=20, mi_enum_attr [ 250.978215][ T7144] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 251.055449][ T7144] ntfs3(loop1): Failed to load $Extend (-22). [ 251.055476][ T7144] ntfs3(loop1): Failed to initialize $Extend. [ 252.623415][ T5915] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 252.696899][ T5816] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 252.710172][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 252.783193][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 252.787147][ T5915] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 252.787172][ T5915] usb 1-1: config 0 has no interface number 0 [ 252.787213][ T5915] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 252.791541][ T5915] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 252.791567][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.791587][ T5915] usb 1-1: Product: syz [ 252.791600][ T5915] usb 1-1: Manufacturer: syz [ 252.791614][ T5915] usb 1-1: SerialNumber: syz [ 252.873005][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 252.874497][ T7164] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 252.896671][ T5816] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 252.896701][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 252.896795][ T5816] usb 2-1: Product: syz [ 252.896810][ T5816] usb 2-1: SerialNumber: syz [ 252.899799][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 252.899826][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.899845][ T10] usb 4-1: Product: syz [ 252.899858][ T10] usb 4-1: Manufacturer: syz [ 252.899872][ T10] usb 4-1: SerialNumber: syz [ 253.036679][ T10] usb 4-1: config 0 descriptor?? [ 253.036941][ T5816] usb 2-1: config 0 descriptor?? [ 253.183651][ T5915] usb 1-1: config 0 descriptor?? [ 253.189783][ T7153] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 253.257223][ T10] gspca_main: spca508-2.14.0 probing 041e:4018 [ 253.259469][ T10] gspca_spca508: reg_read err -32 [ 253.280641][ T7155] loop3: detected capacity change from 0 to 256 [ 253.417913][ T10] gspca_spca508: reg_read err -71 [ 253.418424][ T10] gspca_spca508: reg_read err -71 [ 253.431193][ T10] gspca_spca508: reg_read err -71 [ 253.438777][ T10] gspca_spca508: reg_read err -71 [ 253.439280][ T10] gspca_spca508: reg write: error -71 [ 253.439444][ T10] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 253.500593][ T7153] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 253.572268][ T10] usb 4-1: USB disconnect, device number 15 [ 253.876312][ T5915] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 253.876614][ T5915] asix 1-1:0.188: probe with driver asix failed with error -61 [ 254.586678][ T5816] ldusb 2-1:0.0: Interrupt in endpoint not found [ 254.638099][ T5816] usb 2-1: USB disconnect, device number 8 [ 255.122829][ T32] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 255.133130][ T823] usb 1-1: USB disconnect, device number 16 [ 255.285090][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 255.285126][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.285165][ T32] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 255.285183][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.290016][ T32] usb 2-1: config 0 descriptor?? [ 255.449067][ T7184] loop2: detected capacity change from 0 to 256 [ 255.450594][ T7184] exfat: Deprecated parameter 'namecase' [ 255.450724][ T7184] exfat: Deprecated parameter 'utf8' [ 255.456494][ T7184] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 255.542645][ T7184] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 255.652817][ T823] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 255.695700][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.696529][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.844146][ T823] usb 1-1: device descriptor read/64, error -71 [ 256.082819][ T823] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 256.232140][ T823] usb 1-1: device descriptor read/64, error -71 [ 256.359352][ T823] usb usb1-port1: attempt power cycle [ 256.840636][ T7186] loop3: detected capacity change from 0 to 131072 [ 256.945213][ T823] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 256.964324][ T823] usb 1-1: device descriptor read/8, error -71 [ 256.998881][ T7186] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 257.286548][ T7186] XFS (loop3): Starting recovery (logdev: internal) [ 257.314485][ T7186] XFS (loop3): Ending recovery (logdev: internal) [ 257.447339][ T823] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 257.454358][ T6187] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 257.593846][ T823] usb 1-1: device descriptor read/8, error -71 [ 257.646312][ T6187] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 257.646343][ T6187] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.646365][ T6187] usb 3-1: config 0 has no interface number 0 [ 257.646470][ T6187] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 257.646496][ T6187] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 257.646522][ T6187] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.650612][ T6187] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 257.650640][ T6187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.650717][ T6187] usb 3-1: Product: syz [ 257.650733][ T6187] usb 3-1: Manufacturer: syz [ 257.650748][ T6187] usb 3-1: SerialNumber: syz [ 257.703537][ T823] usb usb1-port1: unable to enumerate USB device [ 257.788787][ T6187] usb 3-1: config 0 descriptor?? [ 257.812050][ T6187] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 257.844857][ T6187] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 257.851422][ T6187] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 258.492740][ T6187] usb 3-1: USB disconnect, device number 17 [ 258.673299][ T6187] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 258.674812][ T6187] cyberjack 3-1:0.69: device disconnected [ 259.181250][ T5842] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 259.377270][ T32] usbhid 2-1:0.0: can't add hid device: -71 [ 260.418791][ T32] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 260.495199][ T32] usb 2-1: USB disconnect, device number 9 [ 260.556386][ T7220] loop1: detected capacity change from 0 to 32768 [ 260.736054][ T7220] JBD2: Ignoring recovery information on journal [ 260.855829][ T7220] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 261.167806][ T823] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 261.334814][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 261.337777][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.337808][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.337845][ T823] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 261.337870][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.395954][ T823] usb 2-1: config 0 descriptor?? [ 261.752905][ T5915] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 261.857140][ T823] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 261.857178][ T823] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 261.893072][ T5915] usb 1-1: device descriptor read/64, error -71 [ 262.019562][ T823] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 262.099628][ T7231] loop2: detected capacity change from 0 to 1024 [ 262.143258][ T5915] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 262.223294][ T823] ft260 0003:0403:6030.0005: failed to retrieve system status [ 262.223613][ T823] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -5 [ 262.267333][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 262.293573][ T5915] usb 1-1: device descriptor read/64, error -71 [ 262.342532][ T7231] hfsplus: bad catalog file entry [ 262.372401][ T7231] hfsplus: bad catalog file entry [ 262.403733][ T5915] usb usb1-port1: attempt power cycle [ 262.726865][ T7240] loop3: detected capacity change from 0 to 32768 [ 262.730877][ T7240] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.330 (7240) [ 262.743180][ T5915] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 262.765281][ T7240] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 262.765314][ T7240] BTRFS info (device loop3): using sha256 checksum algorithm [ 262.790686][ T5915] usb 1-1: device descriptor read/8, error -71 [ 262.924887][ T7240] BTRFS info (device loop3): setting nodatasum [ 262.924905][ T7240] BTRFS info (device loop3): enabling ssd optimizations [ 262.924918][ T7240] BTRFS info (device loop3): turning on async discard [ 262.924929][ T7240] BTRFS info (device loop3): enabling free space tree [ 262.931669][ T67] hfsplus: bad catalog file entry [ 263.013768][ T38] audit: type=1800 audit(1776648982.522:5): pid=7240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.330" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 263.025613][ T5915] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 263.057215][ T5915] usb 1-1: device descriptor read/8, error -71 [ 263.164670][ T5915] usb usb1-port1: unable to enumerate USB device [ 263.300684][ T7263] loop2: detected capacity change from 0 to 64 [ 263.537874][ T5816] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 263.702800][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 263.713264][ T5816] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 263.713327][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.713380][ T5816] usb 4-1: Product: syz [ 263.713413][ T5816] usb 4-1: Manufacturer: syz [ 263.713449][ T5816] usb 4-1: SerialNumber: syz [ 263.830536][ T5816] usb 4-1: config 0 descriptor?? [ 264.042866][ T5816] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 264.622894][ T5829] usb 2-1: USB disconnect, device number 10 [ 264.792158][ T5816] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 264.819441][ T5816] usb 4-1: USB disconnect, device number 16 [ 265.287014][ T6584] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 265.729859][ T38] audit: type=1326 audit(1776648985.232:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=435 compat=0 ip=0x7fd54909d609 code=0x0 [ 265.730008][ T38] audit: type=1326 audit(1776648985.242:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd54909c819 code=0x0 [ 265.735329][ T38] audit: type=1326 audit(1776648985.252:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd54909c819 code=0x0 [ 266.219962][ T5148] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 266.225535][ T60] Bluetooth: hci5: command 0x1003 tx timeout [ 266.425686][ T5827] ocfs2: Unmounting device (7,1) on (node local) [ 267.049404][ T38] audit: type=1326 audit(1776648986.562:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd54909c819 code=0x0 [ 267.541478][ T5842] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.557208][ T7289] loop1: detected capacity change from 0 to 128 [ 267.572804][ T7289] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.575426][ T7289] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 268.961158][ T7299] loop0: detected capacity change from 0 to 1024 [ 269.904187][ T6187] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 270.063779][ T6187] usb 3-1: Using ep0 maxpacket: 16 [ 270.066343][ T6187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.066376][ T6187] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.068828][ T6187] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.068857][ T6187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.068880][ T6187] usb 3-1: Product: syz [ 270.068896][ T6187] usb 3-1: Manufacturer: syz [ 270.068912][ T6187] usb 3-1: SerialNumber: syz [ 270.180538][ T6187] usb 3-1: 0:2 : does not exist [ 270.386270][ T6187] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 270.807281][ T6187] usb 3-1: USB disconnect, device number 18 [ 271.115590][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.326674][ T7317] loop4: detected capacity change from 0 to 512 [ 271.481643][ T5827] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.565264][ T7317] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 274.493119][ T5816] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 274.765620][ T7349] netlink: 108 bytes leftover after parsing attributes in process `syz.4.355'. [ 276.141837][ T5816] usb 2-1: Using ep0 maxpacket: 32 [ 279.163959][ T5816] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 279.163993][ T5816] usb 2-1: can't read configurations, error -71 [ 280.685733][ T7379] loop2: detected capacity change from 0 to 32768 [ 280.832212][ T7379] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.356 (7379) [ 280.869272][ T7379] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.869303][ T7379] BTRFS info (device loop2): using sha256 checksum algorithm [ 280.949902][ T7379] BTRFS info (device loop2): setting nodatasum [ 280.949919][ T7379] BTRFS info (device loop2): enabling ssd optimizations [ 280.949931][ T7379] BTRFS info (device loop2): turning on async discard [ 280.949942][ T7379] BTRFS info (device loop2): enabling free space tree [ 281.101241][ T38] audit: type=1800 audit(1776649000.612:10): pid=7379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.356" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 281.452410][ T7408] loop4: detected capacity change from 0 to 128 [ 281.742836][ T7416] loop4: detected capacity change from 0 to 256 [ 281.873311][ T7416] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 281.980228][ T7416] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 282.054726][ T5978] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 282.233572][ T5978] usb 2-1: config 0 has no interfaces? [ 282.234080][ T7421] loop0: detected capacity change from 0 to 128 [ 282.252353][ T5978] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 282.252379][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.252398][ T5978] usb 2-1: Product: syz [ 282.252411][ T5978] usb 2-1: Manufacturer: syz [ 282.252425][ T5978] usb 2-1: SerialNumber: syz [ 282.295732][ T5978] usb 2-1: config 0 descriptor?? [ 282.447830][ T5828] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 282.586308][ T823] usb 2-1: USB disconnect, device number 13 [ 282.856275][ T7434] overlay: ./file1 is not a directory [ 282.908108][ T7434] overlay: ./file1 is not a directory [ 282.971697][ T7440] loop4: detected capacity change from 0 to 128 [ 283.104004][ T7440] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.107414][ T7440] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.398044][ T7448] overlayfs: failed to resolve './file0': -2 [ 285.399321][ T7460] FAULT_INJECTION: forcing a failure. [ 285.399321][ T7460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.399357][ T7460] CPU: 1 UID: 0 PID: 7460 Comm: syz.2.371 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 285.399380][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 285.399393][ T7460] Call Trace: [ 285.399401][ T7460] [ 285.399410][ T7460] dump_stack_lvl+0xe8/0x150 [ 285.399439][ T7460] should_fail_ex+0x46b/0x600 [ 285.399467][ T7460] _copy_from_user+0x2d/0xb0 [ 285.399494][ T7460] input_event_from_user+0xb1/0x290 [ 285.399524][ T7460] ? __pfx_input_event_from_user+0x10/0x10 [ 285.399578][ T7460] ? rt_spin_unlock+0x160/0x200 [ 285.399621][ T7460] evdev_write+0x2ca/0x4c0 [ 285.399648][ T7460] ? get_pid_task+0x20/0x1f0 [ 285.399682][ T7460] ? __pfx_evdev_write+0x10/0x10 [ 285.399717][ T7460] ? rw_verify_area+0x25b/0x4e0 [ 285.399749][ T7460] ? __pfx_evdev_write+0x10/0x10 [ 285.399779][ T7460] vfs_write+0x2a3/0xba0 [ 285.399831][ T7460] ? __pfx_vfs_write+0x10/0x10 [ 285.399863][ T7460] ? do_sys_openat2+0x14c/0x200 [ 285.399886][ T7460] ? kmem_cache_free+0x187/0x6c0 [ 285.399925][ T7460] ? do_sys_openat2+0x14c/0x200 [ 285.399962][ T7460] ksys_write+0x156/0x270 [ 285.399996][ T7460] ? __pfx_ksys_write+0x10/0x10 [ 285.400035][ T7460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.400058][ T7460] do_syscall_64+0x15f/0xf80 [ 285.400081][ T7460] ? trace_irq_disable+0x3b/0x140 [ 285.400105][ T7460] ? clear_bhb_loop+0x40/0x90 [ 285.400131][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.400153][ T7460] RIP: 0033:0x7efeb8d7c819 [ 285.400171][ T7460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.400189][ T7460] RSP: 002b:00007efeb6fb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.400211][ T7460] RAX: ffffffffffffffda RBX: 00007efeb8ff6090 RCX: 00007efeb8d7c819 [ 285.400226][ T7460] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 000000000000000b [ 285.400239][ T7460] RBP: 00007efeb6fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 285.400251][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.400263][ T7460] R13: 00007efeb8ff6128 R14: 00007efeb8ff6090 R15: 00007ffd6ed94178 [ 285.400295][ T7460] [ 286.032633][ T7440] [ 286.032644][ T7440] ====================================================== [ 286.032653][ T7440] WARNING: possible circular locking dependency detected [ 286.032675][ T7440] syzkaller #0 Not tainted [ 286.032685][ T7440] ------------------------------------------------------ [ 286.032692][ T7440] syz.4.368/7440 is trying to acquire lock: [ 286.032704][ T7440] ffff88803a1b4770 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10e0 [ 286.032777][ T7440] [ 286.032777][ T7440] but task is already holding lock: [ 286.032784][ T7440] ffff888035a40cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130 [ 286.032832][ T7440] [ 286.032832][ T7440] which lock already depends on the new lock. [ 286.032832][ T7440] [ 286.032839][ T7440] [ 286.032839][ T7440] the existing dependency chain (in reverse order) is: [ 286.032848][ T7440] [ 286.032848][ T7440] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 286.032876][ T7440] percpu_down_read_internal+0x48/0x1d0 [ 286.032900][ T7440] ext4_writepages+0x205/0x3b0 [ 286.032923][ T7440] do_writepages+0x32e/0x550 [ 286.032949][ T7440] __writeback_single_inode+0x133/0x10e0 [ 286.032972][ T7440] writeback_single_inode+0x488/0xd60 [ 286.032990][ T7440] write_inode_now+0x1c2/0x290 [ 286.033006][ T7440] iput+0x8c1/0xe80 [ 286.033027][ T7440] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 286.033048][ T7440] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 286.033071][ T7440] __ext4_expand_extra_isize+0x30d/0x400 [ 286.033093][ T7440] __ext4_mark_inode_dirty+0x45c/0x710 [ 286.033121][ T7440] ext4_evict_inode+0x986/0x10e0 [ 286.033148][ T7440] evict+0x61e/0xb10 [ 286.033176][ T7440] ext4_orphan_cleanup+0xc38/0x1470 [ 286.033203][ T7440] ext4_fill_super+0x59bb/0x62d0 [ 286.033226][ T7440] get_tree_bdev_flags+0x431/0x4f0 [ 286.033255][ T7440] vfs_get_tree+0x92/0x2a0 [ 286.033283][ T7440] do_new_mount+0x341/0xd30 [ 286.033312][ T7440] __se_sys_mount+0x31d/0x420 [ 286.033335][ T7440] do_syscall_64+0x15f/0xf80 [ 286.033358][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.033379][ T7440] [ 286.033379][ T7440] -> #0 (sb_internal){.+.+}-{0:0}: [ 286.033405][ T7440] __lock_acquire+0x15a5/0x2cf0 [ 286.033431][ T7440] lock_acquire+0x106/0x350 [ 286.033454][ T7440] percpu_down_read_internal+0x48/0x1d0 [ 286.033476][ T7440] ext4_evict_inode+0x426/0x10e0 [ 286.033503][ T7440] evict+0x61e/0xb10 [ 286.033530][ T7440] ext4_ext_migrate+0xe11/0x1130 [ 286.033553][ T7440] ext4_ioctl+0x2355/0x4b40 [ 286.033590][ T7440] __se_sys_ioctl+0xff/0x170 [ 286.033638][ T7440] do_syscall_64+0x15f/0xf80 [ 286.033661][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.033682][ T7440] [ 286.033682][ T7440] other info that might help us debug this: [ 286.033682][ T7440] [ 286.033690][ T7440] Possible unsafe locking scenario: [ 286.033690][ T7440] [ 286.033697][ T7440] CPU0 CPU1 [ 286.033704][ T7440] ---- ---- [ 286.033711][ T7440] lock(&sbi->s_writepages_rwsem); [ 286.033727][ T7440] lock(sb_internal); [ 286.033743][ T7440] lock(&sbi->s_writepages_rwsem); [ 286.033760][ T7440] rlock(sb_internal); [ 286.033775][ T7440] [ 286.033775][ T7440] *** DEADLOCK *** [ 286.033775][ T7440] [ 286.033781][ T7440] 3 locks held by syz.4.368/7440: [ 286.033795][ T7440] #0: ffff88803a1b4480 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x210 [ 286.033862][ T7440] #1: ffff88805f69ee70 (&sb->s_type->i_mutex_key#11){++++}-{4:4}, at: ext4_ioctl+0x234d/0x4b40 [ 286.033926][ T7440] #2: ffff888035a40cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130 [ 286.033980][ T7440] [ 286.033980][ T7440] stack backtrace: [ 286.033993][ T7440] CPU: 1 UID: 0 PID: 7440 Comm: syz.4.368 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 286.034018][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 286.034049][ T7440] Call Trace: [ 286.034058][ T7440] [ 286.034068][ T7440] dump_stack_lvl+0xe8/0x150 [ 286.034095][ T7440] print_circular_bug+0x2e1/0x300 [ 286.034134][ T7440] check_noncircular+0x12e/0x150 [ 286.034173][ T7440] __lock_acquire+0x15a5/0x2cf0 [ 286.034209][ T7440] ? __lock_acquire+0x6b5/0x2cf0 [ 286.034241][ T7440] ? __asan_memset+0x22/0x50 [ 286.034271][ T7440] ? ext4_evict_inode+0x426/0x10e0 [ 286.034302][ T7440] lock_acquire+0x106/0x350 [ 286.034331][ T7440] ? ext4_evict_inode+0x426/0x10e0 [ 286.034371][ T7440] percpu_down_read_internal+0x48/0x1d0 [ 286.034397][ T7440] ? ext4_evict_inode+0x426/0x10e0 [ 286.034429][ T7440] ext4_evict_inode+0x426/0x10e0 [ 286.034459][ T7440] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 286.034486][ T7440] ? reacquire_held_locks+0x104/0x190 [ 286.034521][ T7440] ? rt_spin_lock+0x1e0/0x400 [ 286.034556][ T7440] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 286.034598][ T7440] ? __pfx_ext4_evict_inode+0x10/0x10 [ 286.034629][ T7440] ? rt_spin_unlock+0x14f/0x200 [ 286.034665][ T7440] ? rt_spin_unlock+0x160/0x200 [ 286.034698][ T7440] ? __pfx_ext4_evict_inode+0x10/0x10 [ 286.034730][ T7440] evict+0x61e/0xb10 [ 286.034768][ T7440] ? __pfx_evict+0x10/0x10 [ 286.034800][ T7440] ? rt_spin_unlock+0x160/0x200 [ 286.034833][ T7440] ? iput+0xb25/0xe80 [ 286.034864][ T7440] ext4_ext_migrate+0xe11/0x1130 [ 286.034902][ T7440] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 286.034930][ T7440] ? lockdep_hardirqs_on+0x7a/0x110 [ 286.034958][ T7440] ? rwbase_write_lock+0x568/0x730 [ 286.034994][ T7440] ext4_ioctl+0x2355/0x4b40 [ 286.035028][ T7440] ? __pfx_ext4_ioctl+0x10/0x10 [ 286.035059][ T7440] ? is_bpf_text_address+0x292/0x2b0 [ 286.035091][ T7440] ? is_bpf_text_address+0x26/0x2b0 [ 286.035123][ T7440] ? kernel_text_address+0xa5/0xe0 [ 286.035158][ T7440] ? __kernel_text_address+0xd/0x30 [ 286.035192][ T7440] ? unwind_get_return_address+0x4d/0x90 [ 286.035221][ T7440] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 286.035248][ T7440] ? arch_stack_walk+0xfb/0x150 [ 286.035283][ T7440] ? stack_trace_save+0xa9/0x100 [ 286.035307][ T7440] ? __pfx_stack_trace_save+0x10/0x10 [ 286.035332][ T7440] ? kasan_save_free_info+0x46/0x50 [ 286.035358][ T7440] ? stack_depot_save_flags+0x33/0x810 [ 286.035387][ T7440] ? kasan_save_track+0x4f/0x80 [ 286.035415][ T7440] ? kasan_save_track+0x3e/0x80 [ 286.035445][ T7440] ? kasan_save_free_info+0x46/0x50 [ 286.035469][ T7440] ? __kasan_slab_free+0x5c/0x80 [ 286.035499][ T7440] ? kfree+0x1c5/0x6c0 [ 286.035528][ T7440] ? tomoyo_path_number_perm+0x501/0x630 [ 286.035553][ T7440] ? security_file_ioctl+0xc3/0x2a0 [ 286.035586][ T7440] ? __se_sys_ioctl+0x47/0x170 [ 286.035619][ T7440] ? do_syscall_64+0x15f/0xf80 [ 286.035644][ T7440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.035678][ T7440] ? file_ioctl+0x279/0x870 [ 286.035715][ T7440] ? __pfx_file_ioctl+0x10/0x10 [ 286.035757][ T7440] ? kasan_quarantine_put+0xbb/0x1f0 [ 286.035791][ T7440] ? tomoyo_path_number_perm+0x219/0x630 [ 286.035818][ T7440] ? tomoyo_path_number_perm+0x219/0x630 [ 286.035846][ T7440] ? do_vfs_ioctl+0x117b/0x1540 [ 286.035883][ T7440] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 286.035924][ T7440] ? do_futex+0x333/0x420 [ 286.035968][ T7440] ? __fget_files+0x2a/0x420 [ 286.035997][ T7440] ? __fget_files+0x2a/0x420 [ 286.036024][ T7440] ? __fget_files+0x3a6/0x420 [ 286.036051][ T7440] ? __fget_files+0x2a/0x420 [ 286.036080][ T7440] ? bpf_lsm_file_ioctl+0x9/0x20 [ 286.036107][ T7440] ? __pfx_ext4_ioctl+0x10/0x10 [ 286.036137][ T7440] __se_sys_ioctl+0xff/0x170 [ 286.036172][ T7440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.036196][ T7440] do_syscall_64+0x15f/0xf80 [ 286.036220][ T7440] ? trace_irq_disable+0x3b/0x140 [ 286.036246][ T7440] ? clear_bhb_loop+0x40/0x90 [ 286.036284][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.036306][ T7440] RIP: 0033:0x7fd54909c819 [ 286.036326][ T7440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.036347][ T7440] RSP: 002b:00007fd5472f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.036381][ T7440] RAX: ffffffffffffffda RBX: 00007fd549315fa0 RCX: 00007fd54909c819 [ 286.036398][ T7440] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 286.036411][ T7440] RBP: 00007fd549132c91 R08: 0000000000000000 R09: 0000000000000000 [ 286.036425][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.036437][ T7440] R13: 00007fd549316038 R14: 00007fd549315fa0 R15: 00007ffedb7bb608 [ 286.036461][ T7440] [ 286.717054][ T5832] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.