last executing test programs: 4m5.597726185s ago: executing program 2 (id=304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x8, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4m4.885671006s ago: executing program 2 (id=307): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0xec, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23c0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x66}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x965}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000040}, 0x4002004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000780)=ANY=[@ANYRES64], 0x78) 4m3.436816529s ago: executing program 2 (id=311): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="2000330040bc0100ffffffffffff0802110000005050505047e6ba2aac0146c00600cd00000000000800270003000000080026006c0900000800a1000001"], 0x5c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x3c008010) 4m3.151478251s ago: executing program 2 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="2000330040bc0100ffffffffffff0802110000005050505047e6ba2aac0146c00600cd00000000000800270003000000080026006c0900000800a1000001"], 0x5c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x3c008010) (fail_nth: 1) 4m2.674500472s ago: executing program 2 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x6, 0x4, 0x8, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04001625009eea88445f32c6dab446060100000008000600", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x80804}, 0x40084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000811, &(0x7f0000000540)=ANY=[@ANYBLOB='keep_last_dots,dmask=00000000000000000000104,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=koi8-u,fmask=00000000000000000000005,discard,allow_utime=00000000000000000000002,iocharset=macceltic,allow_utime=00000000000000000000004,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c857466382c6f626a5f6c6f775f4ad7696d652c666f00"/34, @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,dont_appraise,smackfsroot=fowner<,\x00'], 0x1, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5") r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x0, 0x0, 0x8ffff) read$FUSE(r7, &(0x7f0000020b80)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000680)=ANY=[], 0x508) linkat(r4, &(0x7f0000000240)='./file1\x00', r7, &(0x7f0000000480)='./file0\x00', 0x1400) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000140)={@dev, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@loopback, @local, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2, 0x6, 0x3, 0x500, 0x800, 0x120020, r8}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000b4004b0400000000fedbdf257a000000", @ANYRES32=0x0, @ANYBLOB="40180000000000001c0012800b00010062726964676500000c0002800800040000000000"], 0x3c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYRES16=r2, @ANYRES16=r10, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRESOCT=0x0, @ANYBLOB="2000330040bc0100ffffffffffff0802110000005050505047e6ba2aac0146c00600cd00000000000800270003000000080026006c0900000800a1000001"], 0x5c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x3c008010) 4m2.082522268s ago: executing program 2 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x29e782}) io_uring_enter(r3, 0x3518, 0xaddf, 0x6, 0x0, 0x0) 3m46.925493514s ago: executing program 32 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x29e782}) io_uring_enter(r3, 0x3518, 0xaddf, 0x6, 0x0, 0x0) 3m29.294467008s ago: executing program 3 (id=394): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x1c2e, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) recvfrom$x25(r1, &(0x7f0000000280)=""/163, 0xa3, 0x80000120, &(0x7f0000000100), 0x12) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) 3m28.115062579s ago: executing program 3 (id=396): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0x58000, 0x2, 0x7ff, 0x3, 0x0, [{0x5, 0x4, 0x64, '\x00', 0xf5}, {0x1b, 0xf4, 0x9, '\x00', 0x8}, {0x5, 0x9, 0x6, '\x00', 0xb8}, {0xb, 0x46, 0x81, '\x00', 0x4}, {0xf9, 0x10, 0x1, '\x00', 0x8}, {0x0, 0x9, 0x4, '\x00', 0x4}, {0x1, 0x82, 0x8, '\x00', 0xb9}, {0x8, 0x2, 0x2, '\x00', 0x6}, {0x5, 0x7, 0x18, '\x00', 0xe}, {0x31, 0x9, 0x21, '\x00', 0x9f}, {0x8, 0x8, 0xf8, '\x00', 0x5}, {0x6, 0x6, 0x7, '\x00', 0xe8}, {0x7, 0x3, 0x3, '\x00', 0x7a}, {0x4, 0xd5, 0x6, '\x00', 0x5}, {0x1, 0xfc, 0x6, '\x00', 0xf7}, {0xff, 0x6, 0x4, '\x00', 0xc}, {0x2, 0x5, 0xa, '\x00', 0x5}, {0x7f, 0x9, 0x2, '\x00', 0xb9}, {0x7, 0xaa, 0x3, '\x00', 0x81}, {0x76, 0xd0, 0x80, '\x00', 0x2}, {0x8, 0x3, 0x1, '\x00', 0xb0}, {0x1, 0xf, 0x5, '\x00', 0x5}, {0x77, 0x9, 0x7, '\x00', 0x81}, {0x9, 0x4, 0x25, '\x00', 0xa}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x3, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) r3 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001, 0x4c092, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 3m26.588395105s ago: executing program 3 (id=399): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$inet6(0xa, 0x2, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) io_uring_setup(0x1b7b, &(0x7f0000000380)={0x0, 0x20c89e, 0xc000, 0x3, 0x20002f7}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xb, 0x0, 0xfd, 0x3, 0x3, 0x8df, 0x6, 0x1}}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x2a08411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0, 0x2c8, &(0x7f0000000d40)="$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") 3m20.93624666s ago: executing program 3 (id=407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x84000000) syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4, 0x550c, &(0x7f00000089c0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000040400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10002, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x6100204) ppoll(&(0x7f00000000c0)=[{r1, 0x2000}, {r1}], 0x2, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)='\x00!', 0x2}], 0x1, 0x73a, 0x1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001a00010000000080fbdbdf250a808000000000000000000008001900", @ANYRES32=0x0, @ANYBLOB="05001b2006f4ff00"], 0x2c}}, 0x20000050) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1700000019000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="f69c96dc4e42661f6d6aefb741b01fd2585206dc63c66c1d400e55649d28b64faaf7448d43af6209edb395d9e0f1aba2cacee664f9d4fd9072cffba2aa5b73bffaff09e54dc4d0214f5a00fbfa6d5a8aa814150000000000000004253cc718e880f794d03a76bef101865589eac3c2b0415108191e68afc9c0aae3660ad1ef2f084aa48efc8adf7ad83511b958", @ANYRES64=0x0], 0x20) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x90, ""/144}) 3m17.559487226s ago: executing program 3 (id=414): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$inet6(0xa, 0x2, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) io_uring_setup(0x1b7b, &(0x7f0000000380)={0x0, 0x20c89e, 0xc000, 0x3, 0x20002f7}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xb, 0x0, 0xfd, 0x3, 0x3, 0x8df, 0x6, 0x1}}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x2a08411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0, 0x2c8, &(0x7f0000000d40)="$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") 3m14.278351778s ago: executing program 3 (id=418): openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) memfd_create(&(0x7f0000000380)='\xb9\x00\x00\x00*\x87\xc4\xab\xba\x97\xd9n\x1eZ\x12\xf6\x19me\x82\x98|\"\xda\xdb\xe5k`W\xcdFC \xe3\x0e\xfd\xb0%\x13/\x97Ya\xdb\xf49\xb7\x84\xfe\x88\xf0\x0fc\'7\x16\x9d\r\xfak\xef\xd7\x0e\xf0\xf1\xd4\x85\'f\x87\xd9%wh4\xfe\xfe\xcbt\xdb\xf9\xa3\xa1\xf8\x83\xfe\xd8\x967#E\xfeI\x82\x90\x80\xe30\xfeEV\x8a\xe5\x7f\xb3\xe0\x8b$k1\xd2\x05E\xb1\x02\xae0\xb5\x12\xc1-\x14}\xfe\x05s\x03C\xac@.\xfci\xfc\xaad\xe0\xac0K~G\x06,\xe8\xb8\xb7\x80;7\xd0\xad]o\x8e\xee>-\xe1\\v\xdad\x9f\xea\xf8\x01\x93=\x88\xa6\x8e\x1bf\xb6Z\x109\x9c\xce\f;\xbb\x9dS\x94 \xca\xe3\xb6\xd9i%\x87\x80\x90.\x1d\x81Y\xc3\x8b;\x8cJ\x83\xf5:\x18\bQ\xf17', 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pipe(&(0x7f0000000100)) creat(&(0x7f0000000040)='./bus\x00', 0x183) open(&(0x7f0000000340)='./bus\x00', 0x24c27f, 0x20) memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x95\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19\x833\x15\xc0\xcd\xa8', 0x1) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ef, &(0x7f00000001c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3m13.499027392s ago: executing program 33 (id=418): openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) memfd_create(&(0x7f0000000380)='\xb9\x00\x00\x00*\x87\xc4\xab\xba\x97\xd9n\x1eZ\x12\xf6\x19me\x82\x98|\"\xda\xdb\xe5k`W\xcdFC \xe3\x0e\xfd\xb0%\x13/\x97Ya\xdb\xf49\xb7\x84\xfe\x88\xf0\x0fc\'7\x16\x9d\r\xfak\xef\xd7\x0e\xf0\xf1\xd4\x85\'f\x87\xd9%wh4\xfe\xfe\xcbt\xdb\xf9\xa3\xa1\xf8\x83\xfe\xd8\x967#E\xfeI\x82\x90\x80\xe30\xfeEV\x8a\xe5\x7f\xb3\xe0\x8b$k1\xd2\x05E\xb1\x02\xae0\xb5\x12\xc1-\x14}\xfe\x05s\x03C\xac@.\xfci\xfc\xaad\xe0\xac0K~G\x06,\xe8\xb8\xb7\x80;7\xd0\xad]o\x8e\xee>-\xe1\\v\xdad\x9f\xea\xf8\x01\x93=\x88\xa6\x8e\x1bf\xb6Z\x109\x9c\xce\f;\xbb\x9dS\x94 \xca\xe3\xb6\xd9i%\x87\x80\x90.\x1d\x81Y\xc3\x8b;\x8cJ\x83\xf5:\x18\bQ\xf17', 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pipe(&(0x7f0000000100)) creat(&(0x7f0000000040)='./bus\x00', 0x183) open(&(0x7f0000000340)='./bus\x00', 0x24c27f, 0x20) memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x95\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19\x833\x15\xc0\xcd\xa8', 0x1) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ef, &(0x7f00000001c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 10.722623006s ago: executing program 4 (id=845): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100c000, &(0x7f00000001c0)={[{@clone_children}], [{@appraise}, {@uid_lt={'uid<', r0}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000240)=@rc, 0x80, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/3, 0x3}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000500)=""/50, 0x32}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001640)=""/4096, 0x1000}, 0x20) setns(0xffffffffffffffff, 0x8000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000002680)={0x2, 0x4e23, @empty}, 0x10) close_range(r1, r1, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r2 = open(&(0x7f00000026c0)='./file0\x00', 0x20000, 0x140) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002780)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f0000002880)=0xe8) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004000)={0x0, 0x0}, &(0x7f0000004040)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004080)={0x0, 0x0, 0x0}, &(0x7f00000040c0)=0xc) sendmsg$netlink(r2, &(0x7f0000004180)={&(0x7f0000002700)=@proc={0x10, 0x0, 0x25dfdbfd, 0x400000}, 0xc, &(0x7f0000003f80)=[{&(0x7f0000002740)={0x10, 0x10, 0x100, 0x70bd26, 0x25dfdbff}, 0x10}, {&(0x7f00000028c0)={0x200, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, "", [@generic="3507749bfa21ab60d5245c1b362256fb44ada209354c6cab4240c34c5f6ed4fe57accfe7af07510f3bbf544c6f0030a5636f0892376df27abb2d238aca9b600d7300243d65897f240d8f60925dd57523815ce84d19d404e3e54d6b0135b1", @generic="ffb5feb5afdaf50141eb4ed3de77a71bd1b1917bd798f50b7ec9b6f7b5e14f02e69223f700ec59b50b291a3c874f1c181c441215d6d717065dd9f5a64e91bcc4d1dd95b22c67e6e8701dedc87d88a22cf83045fd4b8ed8ce491b3530aac3eb6aac5f24569499f31558394b1a465f5ef1a85fcd8fdff37aca43513ae8c738822cc06db0dc20cc2d4ec354b08d6e4c5cf06ee1d77036269fb298db5f0debe0bb6fad3921b4bfc9ac0f5a515a70e28b041fb4c2b757b86c4988b5ab89cf4de92b", @typed={0x60, 0xc8, 0x0, 0x0, @binary="752dc8179abe7b9a518289adcf577f36701df902f1e3de4bfc2234fca46de8e21d27099c4cbb66cfa6e23897e79f7d90e9c7e9f55bdef59f672799cb8594246784cf71ad4aacb170e5eeabbf936eb1b51658d189cdf8d7ebef162567"}, @typed={0x8, 0x87, 0x0, 0x0, @uid=r4}, @nested={0x66, 0x8, 0x0, 0x1, [@generic="83d0dffb37f3d9141a508a5b0fa88289b12a4206f01f0c9f780931b27e049f770f5ba1b1467ead1ded4218f3fa57d33a69c23a75974803ae94524ae513fa63acc27ae13ac126c2e24d2fabaca85e", @typed={0x8, 0x1a, 0x0, 0x0, @uid=r0}, @nested={0x4, 0x10b}, @nested={0x4, 0x60}, @nested={0x4, 0x8}]}]}, 0x200}, {&(0x7f0000002ac0)={0x20, 0x16, 0x200, 0x70bd2c, 0x25dfdbff, "", [@typed={0x10, 0x136, 0x0, 0x0, @binary="97986414410c126ada8ed2f4"}]}, 0x20}, {&(0x7f0000002b00)={0x1450, 0x30, 0x10, 0x70bd2a, 0x25dfdbff, "", [@generic="dbf30a69d1ed5208ff4c7e6f840f94f8838068d145554d44853e18ed2da34500287ae887d22e24814b738bcff0f59fa2908db3cb710926ce5311065d64d8b411d52ae820f8f82e145bccba8cee932877e5c4", @nested={0x19f, 0x6, 0x0, 0x1, [@typed={0x5, 0x1b, 0x0, 0x0, @str='\x00'}, @generic="80bf7250ba1c79c7e2d909dddb8ecf7624", @generic="d833d20f5d2ff70b572bcf592ec2fd1433d1", @nested={0x4, 0x28}, @generic="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", @nested={0x4, 0x67}, @typed={0x8, 0x2f, 0x0, 0x0, @u32=0x10001}, @typed={0xc, 0x5c, 0x0, 0x0, @u64=0x2}, @generic="c150955e9ddc4549c46f5088e636fc43f2e8f9757dae7cb64c4d974241d6d5b533c3c85f6b752e3e300713ab2323f30eb068b169c9efe0bcb9318cd157b075a8a3c9065040d2cf5d2aa7bb8a0a53f0dfc4c93fb60467793c"]}, @nested={0x10d1, 0xb6, 0x0, 0x1, [@generic="aea5cd3ce121e4bccdc20893acc4a0e90198ceae0f5ee30210cccaac550db2e8fbdee7c523803e086c5ec01f4e9fb67a9734b4655fb53383b2db2fb349230bc0d36f9c1b730e71659225af78d6b0bd2c401605293c1f9a5fbe795ed0cbddb27097888ecdc93c6f19f3bea8b6290ff23065b20ba0eb3a2fdedea1722d6113dff73eae69386062a35d99cc58ef09040e445993dc68874c7f5734ee5198435a743ff6fca8e8939c9470be16d00c636d926feca378bb7ba7b4b590", @nested={0x4, 0x119}, @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0x10f}, @generic="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"]}, @nested={0xe0, 0x121, 0x0, 0x1, [@generic="1780a7d7deb2a1c3341d3949610cd3fd5be4db7bc6bec875169e0ad7c5854f0319748723e51f98dc38fd49c253a6bd806fce662c972a36ee23b7c050261bbe7255e70cdb0dc6b2e890fe0f420a0f8b1acc82f885c448d028cea3679d9d1304960726a7d69c3b2e07633f6162050b93703a7e4e12e688a733f6093ac82723eb8a2745d1eea6c3574ad469050338a06f4c183e015349a133ae2c67c1a7a9a5086f3472d002344003b3ca2f27bf58ef", @generic="d66caf468e8478c8d8d431167b9f30cb0b0c58e406f77de6b5c08b34f0f5b1eb108294f070bc86cb43811b348dd2"]}, @generic="e9b2d3ec6c94d4fe793d0105ad2df8e1ec947787cc688a65423a369b1f7baa678c1bca2d88377fa3e3ceb97824727fa290844a5e24df61dbe2ea5e7e0e72cd642f1441b0840a8f07efb52c6ef74f73a30812dd058fbd96d32fc2a39066d9de26d2756d8cdc8a6627b9b4f5831c477e93df5e8fb6480af2c1544c71f496c4859656aba63b7f19ca50c0cae9426657", @nested={0xc, 0x126, 0x0, 0x1, [@typed={0x8, 0x3d, 0x0, 0x0, @fd}]}]}, 0x1450}], 0x4, &(0x7f0000004100)=[@rights={{0x24, 0x1, 0x1, [r5, r1, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, r0, r8}}}], 0x48, 0x4040}, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000041c0)={0x6, 'batadv_slave_0\x00', {0x3}, 0x9}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000004200)={0x0, 0x33baf30, 0x20}, &(0x7f0000004240)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000004280)={r9, 0x800}, 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000042c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$SNDCTL_SEQ_NRSYNTHS(r10, 0x8004510a, &(0x7f0000004300)) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000004340)={0x2, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000004380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r10, 0x40082102, &(0x7f0000004400)=r11) r12 = syz_create_resource$binfmt(&(0x7f0000004440)='./file0\x00') execveat$binfmt(r10, r12, &(0x7f0000004500)={[&(0x7f0000004480)='*),\x00', &(0x7f00000044c0)=',#*^#\x00']}, &(0x7f00000046c0)={[&(0x7f0000004540)='#[(*\xe8]\'+\x00', &(0x7f0000004580)='@-\'&!$\x00', &(0x7f00000045c0)='#]\xcd$\\$+\\\x00', &(0x7f0000004600)='-{/\x93\x00', &(0x7f0000004640)='}!$\x00', &(0x7f0000004680)='unconfined_u']}, 0x1000) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000004700)={0x2, 0x0, [{0xc0000001, 0x7, 0x2, 0x7, 0x1, 0x7, 0x9}, {0x2, 0x0, 0x6, 0x7, 0x9, 0x7, 0x400}]}) read$FUSE(r2, &(0x7f0000004780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r10, &(0x7f00000067c0)={0xa0, 0x0, r13, {{0x5, 0x3, 0x104de0000000000, 0x6, 0x7ff, 0x8, {0x0, 0x101, 0x9, 0x1000, 0x4, 0x0, 0xffff, 0x5, 0x2, 0x2000, 0x5, r7, r8, 0x8, 0x80}}, {0x0, 0x4}}}, 0xa0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000006940)={&(0x7f0000006880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006900)={&(0x7f00000068c0)={0x20, 0x0, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x800) io_uring_enter(r1, 0x2d11, 0xd16e, 0x0, &(0x7f0000006980)={[0x7f]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000006a40)={'syztnl2\x00', &(0x7f00000069c0)={'ip6tnl0\x00', r3, 0x29, 0x1, 0x7, 0xfffe0000, 0x46, @mcast1, @dev={0xfe, 0x80, '\x00', 0x17}, 0x80, 0x700, 0x6, 0x401}}) 10.067390184s ago: executing program 4 (id=847): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$inet6(0xa, 0x2, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) io_uring_setup(0x1b7b, &(0x7f0000000380)={0x0, 0x20c89e, 0xc000, 0x3, 0x20002f7}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xb, 0x0, 0xfd, 0x3, 0x3, 0x8df, 0x6, 0x1}}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x2a08411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0, 0x2c8, &(0x7f0000000d40)="$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") 9.145682714s ago: executing program 0 (id=851): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, 0xb, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48}, 0x44000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='sotrce', &(0x7f0000000180)='#\x00\x00\x00\x00\x00\x00\x00\x00\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xcc:rC\xb3=\x17\x02/x\x84=\x17\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+\x00:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xa5o\xf4K\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\x00\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9B\xd2\x140x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)={0x38, r5, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fd15213977"}]}]}, 0x38}}, 0x20000010) syz_open_pts(0xffffffffffffffff, 0x2) 6.44945525s ago: executing program 0 (id=867): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e2000004e2300000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff01000000000000001a000000000001000000082b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb0c0015005b0735003b00"/200], 0x110}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@flushpolicy={0x150, 0x1d, 0x8, 0x70bd26, 0x25dfdbfe, "", [@algo_comp={0xe2, 0x3, {{'lzs\x00'}, 0x4d0, "b7e286db57a2b46c3b2aae59de7751e898a267e03e52e76bf0760ca741cb8aa8d6744f232c4602cd832115377005e1917acc6aef0941eebfb2450f37824a34df2f492c7c878e9888e918b7d28916638106569f78747997faa4d52274f4f9b932b40572b9b7dbc1c1259f4425ca49e851db2fcd5083f06bfee22e6217b8d43dd5f66a72b95903334925a3dac3bbef57ca2e62e1d3a20e3b4ee659"}}, @user_kmaddress={0x2c, 0x13, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x2}}, @extra_flags={0x8, 0x18, 0x7}, @lastused={0xc, 0xf, 0x5}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd25, 0x70bd28, 0x70bd28, 0x10}}]}, 0x150}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getgid() socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdir(0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r3, 0x230d}, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x86c9460748f085ce}) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1009}], 0x1, 0x8000007) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6(0xa, 0xa, 0x4400) sendmmsg$inet6(r6, &(0x7f0000002c00)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x9, @mcast1, 0xa4a}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="001000007762000029000000080000001dde000000000000369c81777b28be2132f2a2d47ea41ec2b02145eccf9a823033a47ed12ac8ce116535955a72fa617995b307cd8457baf20c64b9227463956f34a1f37356aff1540d4860211304725623ae3101f94f5209eb3246cd6aece8eaac64d87272c9232005608f34f93e12b8ad82af5d88a2cb6fc3637508bc955837c33a997f1743b79ddb02ee98a7db9d5720da49568a0832f98543b4df812308d95665627ebdd54ec8c46d"], 0x18}}], 0x1, 0x24008010) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) unshare(0x2000800) 5.513791541s ago: executing program 5 (id=860): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48}, 0x44000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='sotrce', &(0x7f0000000180)='#\x00\x00\x00\x00\x00\x00\x00\x00\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xcc:rC\xb3=\x17\x02/x\x84=\x17\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+\x00:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xa5o\xf4K\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\x00\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9B\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) io_uring_setup(0x1b7b, &(0x7f0000000380)={0x0, 0x20c89e, 0xc000, 0x3, 0x20002f7}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xb, 0x0, 0xfd, 0x3, 0x3, 0x8df, 0x6, 0x1}}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x2a08411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0, 0x2c8, &(0x7f0000000d40)="$eJzs3E9rHGUYAPBnspt2W5DkUCmK2BEvnkJa8b5BEqgGFCWI4sFgtyg7sdCFQPbQpCe/hOI30KMHL4KCePHgFxBBouDF3kSEld2Z/ZfuP627W8Lvd9l33+d5Zp6ZHfLOIbzvPXNQv3WncfvBg9OoPJtEuRrV+CtiPVaiFLmTAADOkz9brfijlVt2LwDAYjza+p/MoyUAYM5mXP9fzz+OF9UWADBH09f/S4tuCQCYszfffufVrd3d7TfStBJx8PHh3uFe57O77N+ODyOLWmzGWvwdUbwqfFVEWzs3d7c307Zf12Pv4LioPz7cy/97cKuoX2l/We/Vd942Wq3WtZ2byfb1NDdcvxqXi/qfLkctbsRaXHmovnP+GyPrL8QLz/fPHxuxFj++H3cii1vtxgfq711P05df202jHAP1Fzt5Hf1XoNLArXvlypPVhfxGAAAAAAAAAAAAAAAAAAAAAACcPxtpz8j9ezY2xsXz+q2B/YHKMbQ/T6W7v87myP15yvF0ebnXDgAAAAAAAAAAAAAAAAAAAI+LxlGzvp+t5l9Osqx2N58ZGnz0/effjAn1B6c/nLw1LadZT4rzng0lQ/0Mhb6deMD/PHjiuV8+GZ9zP+n1EytjcpIzM9UYzikVx/iXjX197czMu6UZjpOcjApV2mX9mUpxl6e3UZrS6nenHzz1YuPqS6NzSvEov86liTmlcaHVMY9WZ/D7Wlws4sOh+2PPVdz1mNbzFxMupxz/70P78KB71VOTr35a3f/y3s+/zXbkZI5/cwAAAAAAAAAAAAAAAAAAgNEaR816ZdlNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCSNY6a9f0sq12Io+ZnkWW1u92ZiYOdGXJ6g2VfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/BMAAP//T3Z4iw==") 5.361056398s ago: executing program 0 (id=862): gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=") open(0x0, 0x145142, 0x141) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000002c0)=""/44, 0x2c) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ftruncate(r1, 0x2007ffb) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x1, @loopback, 0xfffffffc}, 0x1c) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 5.124563398s ago: executing program 5 (id=863): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000240)=@ax25={{0x3, @bcast}, [@rose, @default, @rose, @remote, @remote, @default, @remote, @default]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f0000000680)=""/155, 0x9b}, {&(0x7f0000000740)=""/165, 0xa5}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000001c0)}, {&(0x7f0000000800)=""/192, 0xc0}, {&(0x7f0000000a00)=""/220, 0xdc}], 0x7}, 0x7}], 0x1, 0x1, &(0x7f00000008c0)={0x0, 0x989680}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r6 = socket(0x1e, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x203d) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r7, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x9, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, {0x400000, 0x9, 0x0, 0x3ff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x1, {0x1, 0x400000, 0x1000000, 0x105, 0x3fa, 0x3, {0x6, 0x10003, 0x0, 0xfe2b25d, 0xffffffffffffffff, 0xfffffffffffffff7, 0x2, 0x5, 0xfffffffd, 0x8000, 0x2000007, r9, 0x0, 0x28, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) 4.604603791s ago: executing program 4 (id=864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newrule={0x48, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x9}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e24}}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000001c0)={[], [{@uid_eq={'uid', 0x3d, r2}}, {@obj_role={'obj_role', 0x3d, 'btrfs\x00'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x18) r4 = socket(0x10, 0x2, 0x0) r5 = epoll_create1(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0xa0179e08}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000200)="033a5920a18933f54928a40ff4edebbbe45cf08722fe8e3f8b5bf3b09002a6e320d73679df3053dd58d04476b1d7b45151", 0x31) epoll_wait(r5, &(0x7f00000002c0)=[{}, {}], 0x2, 0xdc7) fallocate(r3, 0x0, 0x0, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003480)={{}, 0x0, 0x2, @unused=[0x101, 0x5, 0x3, 0xe], @subvolid=0x3}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x8000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000090300000a60000000060a01a4222be0d1ade722000a00fffd0900010073797a31000000003400048030000180080001006f73660024000280050002000600000008000140000000140500020002000000080003405e1500010900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0xc010}, 0x24000000) 3.92271724s ago: executing program 1 (id=865): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000019300)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000019340)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="02002cbd7000fddbdf25020000000c0009800800010001000100740006806e000300db38d61f6c44e2de8041815997aeb43009fc7c732c30d7d4ba5f16b60dfea9d103bf7f0a0e0a1fd8b91ead9591de650a955e05aa4082cae8e633ce022a88b74ea4f23511130ad05df3636b3aa688bd2a42b0df4be00870c17b5be2af1ff7950000c47b807adf02f598d3a68e433364e2ca077f71c506cfe366"], 0x94}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", 0xffffffffffffffff, 0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)={[{@auto_da_alloc}, {@grpid}, {@noblock_validity}, {@debug}]}, 0x2c, 0x516, &(0x7f0000000740)="$eJzs3c9vG1kdAPCvnV9umm6ysIcFAVuWhYKq2om7G632wnJBQqvVIi2cEGqjxI2i2HEUO6UJkUjPXJGoxAn+BA5IHJB64s4NblzKAalABWqQEPJq7HGbOHFiNXHcxp+PNPJ7MxN/v8/SvBc/2/MCGFpXI2I3IsYj4nZETKf7M+kWH7a25LynT3YW957sLGai0fj0n6PpmTuL7fPbLqfPmYv4JKlPHBG3trW9ulAulzbSeqFeWS/UtrZvrFQWlkvLpbVicX5ufvb9m+8Vz6ytb1V++/i7Kx/98A+///KjP+1+66dJzt9OjyVtO7NA+7Rel7GY2rcveeU+6kewARhJ2zM+6ER4IdmI+FxEvJ2Wn8kNLicAoL8ajeloTO+vd5fp4RwA4OWXvOefikw2n77/n4psNp9vzuHl3ojJbLlaq1+/U91cW4rmHNZMjGXvrJRLs+lc4UyMZZL6XLP8vF7sqN+MiNcj4hcTl5r1/GK1vDSof3oAYMhd7hj//zPRGv974BMCAHiVGckBYPgcHv/HBpIHAHB+vP8HgOGzb/w/6re6AMAFlOv47T8AcPGdOP//Zvzsx+eTCgBwTnz+DwBD5fsff5xsjb30/tdLd7c2V6t3byyVaqv5yuZifrG6sZ5frlaXm/fsqZz0fOVqdX3u3di8V6iXavVCbWv7VqW6uVa/1byv962SHxYAwOC9/tbDv2QiYveDS80t2ms5+EIAXHgucxheI4NOABiY0UEnAAyM+Xggc8Lxrl8RetD9by6dIh+g/659ocv8//H/G/y/cT7pAX1k/h+G1+nm/80ewKvM/D8Mr0YjYz1/ABgyPbyD9xVBuOBe+PN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGGJTzS2TzadrgU9FNpvPR1yJiJkYy9xZKZdmI+K1iPjzxNhEUp8bdNIAwCll/55J1/+6Nv3OVOfR8cx/J5qPEfGTX336y3sL9frGXLL/X8/21x+k+4tHBpjofxsAgH1GO3e0x+n2ON5e3/fpk53F9naeCT7+Tmtx0STuXrq1U28ln4uxiJj8d+ZAYzJntDDx7v2IeLOz/dlnx2fSlU874yexr/QtfjRbOHUgfvZA/GzzWOsxeS0+fwa5wLB5mPQ/Hx51/WXjavMxvf4yBzvTXPz8cOf6Atr9316js/9rXe+fXMk1+5qj+r+rvcZ494/f63rs/kjji6MRe4f63/aK0Llm6aj47/QY/69f+srb3Y41fh1xLY6L3yoV6pX1Qm1r+8ZKZWG5tFxaKxbn5+Zn37/5XrHQnKMutGeqD/vHB9df697+iMku8XMntP/rPbb/N/+7/aOvHhP/m187Kn423jgmfjImfqPH+AuTv+u6fHcSf6lL+0cPxB8/8HfJvus9xn/0t+2lHk8FAM5BbWt7daFcLm0onLaQ69czX35JGqhwTGEkyu35qJcin1MXBtwxAX33/KIfdCYAAAAAAAAAAAAAAEA3tR+kt/zr44/hBt1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq7PAgAA//+iDcmp") socket$inet6_tcp(0xa, 0x1, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000100)='./file1\x00') ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f00000008000700090000000800080008000000080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 3.202541411s ago: executing program 5 (id=866): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) syz_open_dev$vim2m(0x0, 0x6, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x1, @loopback, 0xfffffffc}, 0x1c) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.490568882s ago: executing program 0 (id=868): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x35}}}}}]}}]}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000005, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) readv(r4, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r4, 0x5502) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r5, 0x1, 0x8, 0x2000402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000340)={0x1, 0x2, 0x8, &(0x7f0000000080)={0x20, "99b0c060b2894bad57b35ba01c80b6007672a0d49c052dd5a376ce819d21605590"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0xeeee8000, 0x5f9, 0xb3, 0xfffffa90, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xe}, {0x8, 0xb, 0x72, '\x00', 0x4}, {0x0, 0x7f, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xf7, 0x50, 0x7f, '\x00', 0x7}, {0x0, 0x0, 0x2}, {0x9, 0x5, 0xb, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x4}, {0xa, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x9, 0x4, 0x3, '\x00', 0x4}, {0x4, 0x7, 0x19, '\x00', 0xff}, {0x1, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x4, 0x1, 0x96, '\x00', 0x6}, {0xb, 0x0, 0x6, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0xff}, {0x6c, 0x19, 0x4, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x80}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0xff, 0x0, '\x00', 0x1}, {0x3, 0x81, 0x6, '\x00', 0x7}, {0x97, 0x9, 0x3, '\x00', 0x68}, {0x6, 0x8, 0xdf}]}}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000740)={"0bd13af7e222d7b82977a894bcf2d741b99f8f02da617b9ad94014424a83db0314f34fdfe9a260e953f1aaf3610eec4c839a08a42b569d1e59b5520d8ad988ecacf773bc8c1855c13291a20986512ff73d4967f734679cb88ac4c1013a6d38828f96b71019283ce07d08bbb370738322ffae7a0afc79279598c1166ec564d5be5344fc87a5f00ca1354bced1fccde226dcd6e864d8262199e37fda0824cafccbe5f8cd0518aa106eb5f8a0986aca2d05a5eaa0177c72d3caeb3579fd729cfe1e7c8e2bb7a9dcfc32e31c7dd4cb48b11128a933481391a63c788de6306217984ef3aa5c402cf680385d96c065818632f2eb3b976ae7997d793ee5a91e26017c70319748f5b8505ce26e2fc2a50296523adc134596ff6ce79f6b58e5ca0612085af940096fb90cb23a7eac4d0e1f0933ef17dd5b760ed2864d8cc3dca7174f7d10bc4ccde5463f72f0265c673a73a1d7d41a581d8491c8f37615278b543c2c3310ae461a924409d0b5a1a75085d800e69f7351d6f2e058d6323d3ae70c7a1b7961a017dcbd827381d2133be3eda141656239ee6859843e51305726cc2444f1360e65e2993842d09428843f2c50c989084ed7722d34e930873d420e9c9fffda5fedf8370000000000000000885e2e653d083ccc91792e12e3082139763d44f68d1115d8e545444accee3bb38a9fa3b9ff7172868cfaf0a8f22a6939248404db646f2aa405a21b953498132fe3167e4783623451da9253e12187b4086f56bdd827e75a5523e04683335992552fa2cce95d2b23833d57bf2872f9e428b374d049a35636113207f68e34d7f1392c05add0d78b9d999c7a5d47dcbb803bcab54544dbceb73f41d5ac0970883308fecd0edcbb3eea10c1b56c851d13ff248353994d4fc68815b1bf45d202c9944b5cecc4d09a99b422ef51442a8c16e1dbb6a955c4618d592d43cd7e52c206929662f178afe060401868ffaf0db2f1eb3aaeb591be9eae546ae97266315e87487dd399ea4ec20423904c3953376a3ab41853f00b720b270b6ae8fd3cbd6c66e4af6d15bbae6aa085e56a3f8ca4a40117a72209d18e4e31e06389650b8115ef5f1fcd8c2d56b37d66fff06008836e501304a332dd3a9e6eea4f8f8d9e3671edc0abe7788692ba653850e980c36a4d3f60d090a58e34fa033b8e92ce7c19a1730872bd9b58530729400823e68ebb0ab9294bebfcd5404194a9dce119d204e01736b57ef37f7bc11ebf9bbf4d33a35ccebc67a3e38bc092cc208e8d70f33d830d26e16b5adcfb3a8928ececc4273771716dce7a0cd4d6f37f8cf70242fe91f09d9d07745e60c35b93bc343eb27751afc6ffb4693ef290668824287595c20cda170ff582c630e2a5df595cb8b7868b8f28665c7fb592d8763b6a0c3e20154f6400"}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x51, 0xbf, 0x2, 0xc0, 0x6d, 0x9, 0x61, 0x7, 0x90, 0xd}}) ioctl$FIONCLEX(r6, 0x5450) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000305"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.984899954s ago: executing program 5 (id=869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000010140)={{0x4, 0x0, 0x80, {0x0, 0xd000, 0xd000}}, "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", "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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a00080300000026bd7000fbdbdf25010014"], 0x18}}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@nogrpid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4f2, &(0x7f0000000a40)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53773c5cbdf4a583f81fdc8719dbe967b0690a3ed3f314c3e2ceebb3e29d00c2c1053d1e8b32d8a8be1bb9786746e0ee564306c80d7045747165005fa3528b5ac1e35e03b69cb54111dfcebc6d585aacdd57c351ef1aa8050274b122a21b47432f17a0cacfd9524d9cb09029e4daefaea47f8cd5a4f1dee71093ebc076363e14f78dd3b129b4b3ae5a7a085297416f1f1a8aeefa517ed1525ec76469b8b469851cc56c6016d9067dac3de3818856014c98ce8f36dac4d8cdb1f25e3c5de7bdab78066d2418c12e0acde73c05fc80a0658c7fbc52812a8423323a80e8a968e0ace13290fe8f862c1e7233c26f73ca24e5e441dd406e136df3a3996865e0693d955c691c675c3f6191b225d82ea4c6a7b2c1ed690c17768cd2b21ab0ac2ca7673eb9c00d635e146555db84b8a9061c3ca8bbefd2ae2b80f4a09561a098815c1357c4a7bca20712834842f171f5872668e88c7fcfe0bf526adcc84c5b1d7ca1b6486f25a2de3a52546468652e4e1ea8bee54b2f45d25173c2e3539f2a3642d825bdff3684ca6d0236cdd1cf93086b4574c588bb30275bcc87cc28ca453dcd07e3b2de929e898f0db8bb69e3725b2097abfb64d5bd", 0x28e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7b", 0x40}, {&(0x7f0000000cc0)="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", 0x257}], 0x2}}], 0x3, 0x54004) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000007c0)="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", 0xfc) ioctl$SIOCSIFMTU(r6, 0x89b0, 0x0) 1.538627523s ago: executing program 1 (id=870): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xf) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x78}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) 467.01852ms ago: executing program 5 (id=871): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x580, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 248.56131ms ago: executing program 1 (id=872): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48}, 0x44000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='sotrce', &(0x7f0000000180)='#\x00\x00\x00\x00\x00\x00\x00\x00\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xcc:rC\xb3=\x17\x02/x\x84=\x17\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+\x00:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xa5o\xf4K\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\x00\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9B\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) io_uring_setup(0x1b7b, &(0x7f0000000380)={0x0, 0x20c89e, 0xc000, 0x3, 0x20002f7}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xb, 0x0, 0xfd, 0x3, 0x3, 0x8df, 0x6, 0x1}}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x2a08411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0, 0x2c8, &(0x7f0000000d40)="$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") kernel console output (not intermixed with test programs): T59] kworker/u4:4: attempt to access beyond end of device [ 288.584649][ T59] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 288.595016][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.654258][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 288.688258][ T7323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.703757][ T7323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.708263][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 288.713045][ T5080] Bluetooth: hci3: command tx timeout [ 288.735306][ T7323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.773877][ T7323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.793522][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 288.849995][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 290.108918][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.266295][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.301928][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.370975][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.498228][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.587726][ T171] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 290.628866][ T6131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.657835][ T6131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.713100][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.788175][ T171] usb 1-1: Using ep0 maxpacket: 8 [ 290.800499][ T171] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 290.841673][ T171] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.874394][ T171] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.940821][ T171] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.974230][ T171] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.057569][ T171] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 291.081199][ T171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.134425][ T5763] ocfs2: Unmounting device (7,1) on (node local) [ 291.286988][ T59] tipc: Left network mode [ 291.481423][ T171] usb 1-1: GET_CAPABILITIES returned 0 [ 291.505238][ T171] usbtmc 1-1:16.0: can't read capabilities [ 291.695955][ T7623] usb 1-1: usbtmc_ioctl_clear_in_halt returned -32 [ 291.722742][ T171] usb 1-1: USB disconnect, device number 21 [ 292.270228][ T7649] loop4: detected capacity change from 0 to 128 [ 292.351288][ T7649] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 292.425057][ T7652] syz.0.424 (7652): drop_caches: 0 [ 292.831420][ T7649] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.284875][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.301050][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.310828][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.322226][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.330376][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 293.341976][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.371868][ T7660] vlan2: entered allmulticast mode [ 293.485555][ T7660] vlan1: entered allmulticast mode [ 293.491236][ T7660] veth0_vlan: entered allmulticast mode [ 293.726284][ T7660] bridge0: port 3(vlan2) entered blocking state [ 293.810615][ T7660] bridge0: port 3(vlan2) entered disabled state [ 293.826858][ T5080] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 293.833330][ T5080] Bluetooth: hci0: command 0x1407 tx timeout [ 295.426972][ T5771] Bluetooth: hci2: command tx timeout [ 296.574763][ T7660] vlan2: entered promiscuous mode [ 296.632881][ T7660] vlan1: entered promiscuous mode [ 296.699548][ T7660] bridge0: port 3(vlan2) entered blocking state [ 296.706037][ T7660] bridge0: port 3(vlan2) entered forwarding state [ 297.599795][ T5771] Bluetooth: hci2: command tx timeout [ 298.315944][ T7678] netlink: 'syz.0.427': attribute type 12 has an invalid length. [ 298.608642][ T59] hsr_slave_0: left promiscuous mode [ 298.631907][ T59] hsr_slave_1: left promiscuous mode [ 298.641213][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.651821][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.665803][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.696402][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.704843][ T59] bridge_slave_1: left allmulticast mode [ 298.711156][ T59] bridge_slave_1: left promiscuous mode [ 298.722118][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.738431][ T59] bridge_slave_0: left allmulticast mode [ 298.744150][ T59] bridge_slave_0: left promiscuous mode [ 298.750519][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.802728][ T59] veth1_macvtap: left promiscuous mode [ 298.808512][ T59] veth0_macvtap: left promiscuous mode [ 298.814213][ T59] veth1_vlan: left promiscuous mode [ 298.824960][ T59] veth0_vlan: left promiscuous mode [ 298.926850][ T787] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 299.107100][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 299.131281][ T787] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.148555][ T787] usb 2-1: config 0 has no interface number 0 [ 299.158739][ T787] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 299.168291][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.176533][ T787] usb 2-1: Product: syz [ 299.181801][ T787] usb 2-1: Manufacturer: syz [ 299.186464][ T787] usb 2-1: SerialNumber: syz [ 299.204578][ T787] usb 2-1: config 0 descriptor?? [ 299.319214][ T787] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 299.329689][ T787] usb 2-1: selecting invalid altsetting 1 [ 299.335503][ T787] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 299.365377][ T787] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 299.376150][ T787] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 299.384589][ T787] usb 2-1: media controller created [ 299.423014][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.671285][ T5771] Bluetooth: hci2: command tx timeout [ 299.775465][ T59] team0 (unregistering): Port device team_slave_1 removed [ 299.846096][ T59] team0 (unregistering): Port device team_slave_0 removed [ 299.914966][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.981675][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.214508][ T7711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.435'. [ 300.442307][ T7715] FAULT_INJECTION: forcing a failure. [ 300.442307][ T7715] name failslab, interval 1, probability 0, space 0, times 0 [ 300.457358][ T7715] CPU: 0 PID: 7715 Comm: syz.1.436 Not tainted syzkaller #0 [ 300.464707][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.474796][ T7715] Call Trace: [ 300.478292][ T7715] [ 300.481253][ T7715] dump_stack_lvl+0x16c/0x230 [ 300.485992][ T7715] ? show_regs_print_info+0x20/0x20 [ 300.491230][ T7715] ? load_image+0x3b0/0x3b0 [ 300.495760][ T7715] ? __might_sleep+0xe0/0xe0 [ 300.500369][ T7715] ? __lock_acquire+0x7c80/0x7c80 [ 300.505410][ T7715] should_fail_ex+0x39d/0x4d0 [ 300.510116][ T7715] should_failslab+0x9/0x20 [ 300.514645][ T7715] slab_pre_alloc_hook+0x59/0x310 [ 300.519693][ T7715] ? tomoyo_encode+0x28b/0x540 [ 300.524580][ T7715] ? tomoyo_encode+0x28b/0x540 [ 300.529381][ T7715] __kmem_cache_alloc_node+0x53/0x260 [ 300.534783][ T7715] ? tomoyo_encode+0x28b/0x540 [ 300.539583][ T7715] __kmalloc+0xa4/0x240 [ 300.543762][ T7715] tomoyo_encode+0x28b/0x540 [ 300.548387][ T7715] tomoyo_realpath_from_path+0x592/0x5d0 [ 300.554058][ T7715] tomoyo_path_number_perm+0x1ea/0x590 [ 300.559630][ T7715] ? tomoyo_path_number_perm+0x1ba/0x590 [ 300.565284][ T7715] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 300.570766][ T7715] ? ksys_write+0x1c1/0x250 [ 300.575315][ T7715] ? __fget_files+0x28/0x4d0 [ 300.579943][ T7715] security_file_ioctl+0x70/0xa0 [ 300.584906][ T7715] __se_sys_ioctl+0x48/0x170 [ 300.589522][ T7715] do_syscall_64+0x55/0xb0 [ 300.593951][ T7715] ? clear_bhb_loop+0x40/0x90 [ 300.598643][ T7715] ? clear_bhb_loop+0x40/0x90 [ 300.603349][ T7715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.609354][ T7715] RIP: 0033:0x7f18b678f749 [ 300.613793][ T7715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.633425][ T7715] RSP: 002b:00007f18b76fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.641864][ T7715] RAX: ffffffffffffffda RBX: 00007f18b69e5fa0 RCX: 00007f18b678f749 [ 300.649849][ T7715] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 300.657836][ T7715] RBP: 00007f18b76fd090 R08: 0000000000000000 R09: 0000000000000000 [ 300.665824][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.673814][ T7715] R13: 00007f18b69e6038 R14: 00007f18b69e5fa0 R15: 00007ffdae82e838 [ 300.681818][ T7715] [ 300.685957][ T787] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 300.693944][ T787] zl10353_read_register: readreg error (reg=127, ret==-110) [ 300.700780][ T7715] ERROR: Out of memory at tomoyo_realpath_from_path. [ 301.398719][ T59] bond0 (unregistering): Released all slaves [ 301.861258][ T5771] Bluetooth: hci2: command tx timeout [ 302.561245][ T7739] FAULT_INJECTION: forcing a failure. [ 302.561245][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 302.649234][ T7739] CPU: 1 PID: 7739 Comm: syz.1.443 Not tainted syzkaller #0 [ 302.656613][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.666712][ T7739] Call Trace: [ 302.670033][ T7739] [ 302.673005][ T7739] dump_stack_lvl+0x16c/0x230 [ 302.677745][ T7739] ? show_regs_print_info+0x20/0x20 [ 302.683003][ T7739] ? load_image+0x3b0/0x3b0 [ 302.687561][ T7739] ? __might_sleep+0xe0/0xe0 [ 302.692204][ T7739] ? __lock_acquire+0x7c80/0x7c80 [ 302.697284][ T7739] should_fail_ex+0x39d/0x4d0 [ 302.702110][ T7739] should_failslab+0x9/0x20 [ 302.706665][ T7739] slab_pre_alloc_hook+0x59/0x310 [ 302.711828][ T7739] ? __lock_acquire+0x7c80/0x7c80 [ 302.716903][ T7739] kmem_cache_alloc_node+0x60/0x330 [ 302.722160][ T7739] ? __alloc_skb+0x108/0x2c0 [ 302.726892][ T7739] __alloc_skb+0x108/0x2c0 [ 302.731366][ T7739] netlink_sendmsg+0x65b/0xbe0 [ 302.736191][ T7739] ? netlink_getsockopt+0x580/0x580 [ 302.741443][ T7739] ? aa_sock_msg_perm+0x94/0x150 [ 302.746447][ T7739] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 302.751788][ T7739] ? security_socket_sendmsg+0x80/0xa0 [ 302.757298][ T7739] ? netlink_getsockopt+0x580/0x580 [ 302.762644][ T7739] ____sys_sendmsg+0x5bf/0x950 [ 302.767516][ T7739] ? __asan_memset+0x22/0x40 [ 302.772156][ T7739] ? __sys_sendmsg_sock+0x30/0x30 [ 302.777680][ T7739] ? __import_iovec+0x5f2/0x860 [ 302.782707][ T7739] ? import_iovec+0x73/0xa0 [ 302.787271][ T7739] ___sys_sendmsg+0x220/0x290 [ 302.792009][ T7739] ? __sys_sendmsg+0x270/0x270 [ 302.796865][ T7739] ? __lock_acquire+0x7c80/0x7c80 [ 302.801964][ T7739] __se_sys_sendmsg+0x1a5/0x270 [ 302.806951][ T7739] ? __x64_sys_sendmsg+0x80/0x80 [ 302.812078][ T7739] ? lockdep_hardirqs_on+0x98/0x150 [ 302.817339][ T7739] do_syscall_64+0x55/0xb0 [ 302.821816][ T7739] ? clear_bhb_loop+0x40/0x90 [ 302.826546][ T7739] ? clear_bhb_loop+0x40/0x90 [ 302.831278][ T7739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.837222][ T7739] RIP: 0033:0x7f18b678f749 [ 302.841789][ T7739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.861449][ T7739] RSP: 002b:00007f18b76fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.869910][ T7739] RAX: ffffffffffffffda RBX: 00007f18b69e5fa0 RCX: 00007f18b678f749 [ 302.877928][ T7739] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003 [ 302.885942][ T7739] RBP: 00007f18b76fd090 R08: 0000000000000000 R09: 0000000000000000 [ 302.893961][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.901977][ T7739] R13: 00007f18b69e6038 R14: 00007f18b69e5fa0 R15: 00007ffdae82e838 [ 302.910017][ T7739] [ 303.026345][ T7746] loop4: detected capacity change from 0 to 4096 [ 303.157226][ T7746] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 303.380215][ T7752] loop1: detected capacity change from 0 to 32768 [ 303.472691][ T7654] chnl_net:caif_netlink_parms(): no params data found [ 303.481890][ T7752] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 303.630076][ T28] audit: type=1800 audit(1765278414.141:34): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.444" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 303.956233][ T7746] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 304.572376][ T7654] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.590764][ T5763] ocfs2: Unmounting device (7,1) on (node local) [ 304.602323][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.622997][ T7654] bridge_slave_0: entered allmulticast mode [ 304.630857][ T7654] bridge_slave_0: entered promiscuous mode [ 304.645795][ T7654] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.680288][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.706823][ T171] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 304.715001][ T7654] bridge_slave_1: entered allmulticast mode [ 304.745726][ T7654] bridge_slave_1: entered promiscuous mode [ 305.078861][ T171] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.392183][ T7654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.409002][ T171] usb 5-1: New USB device found, idVendor=187f, idProduct=0202, bcdDevice=39.91 [ 305.434291][ T171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.464350][ T171] usb 5-1: Product: syz [ 305.467359][ T7654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.477005][ T171] usb 5-1: Manufacturer: syz [ 305.487102][ T171] usb 5-1: SerialNumber: syz [ 305.502830][ T171] usb 5-1: config 0 descriptor?? [ 305.548173][ T171] smsusb:smsusb_probe: board id=11, interface number 0 [ 305.575969][ T171] smsusb:smsusb_probe: Device initialized with return code -19 [ 305.607233][ T7654] team0: Port device team_slave_0 added [ 305.700517][ T7654] team0: Port device team_slave_1 added [ 305.857242][ T171] usb 5-1: USB disconnect, device number 2 [ 305.900116][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.914190][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.016903][ T7654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.049202][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.056513][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.130974][ T7654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.164936][ T7788] syzkaller0: entered promiscuous mode [ 306.178173][ T7788] syzkaller0: entered allmulticast mode [ 306.324108][ T7654] hsr_slave_0: entered promiscuous mode [ 306.534802][ T7798] loop1: detected capacity change from 0 to 32768 [ 306.543205][ T7654] hsr_slave_1: entered promiscuous mode [ 306.552518][ T7654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.567422][ T7654] Cannot create hsr debugfs directory [ 306.594589][ T7798] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 307.484229][ T5763] ocfs2: Unmounting device (7,1) on (node local) [ 308.079338][ T7654] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 308.120706][ T7654] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 308.180916][ T7654] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 308.238428][ T7654] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.600722][ T7654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.631405][ T7795] loop4: detected capacity change from 0 to 32768 [ 308.685500][ T7654] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.757882][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.765144][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.774013][ T7795] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 308.793381][ T7795] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 308.852579][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.859837][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.934741][ T7850] FAULT_INJECTION: forcing a failure. [ 308.934741][ T7850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.949219][ T7795] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 308.995043][ T171] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 309.018100][ T7850] CPU: 0 PID: 7850 Comm: syz.0.465 Not tainted syzkaller #0 [ 309.025475][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.035583][ T7850] Call Trace: [ 309.038889][ T7850] [ 309.041832][ T7850] dump_stack_lvl+0x16c/0x230 [ 309.046538][ T7850] ? show_regs_print_info+0x20/0x20 [ 309.051766][ T7850] ? load_image+0x3b0/0x3b0 [ 309.056294][ T7850] ? __might_fault+0xaa/0x120 [ 309.060988][ T7850] ? __lock_acquire+0x7c80/0x7c80 [ 309.066027][ T7850] ? __kasan_slab_alloc+0x6c/0x80 [ 309.071073][ T7850] should_fail_ex+0x39d/0x4d0 [ 309.075806][ T7850] strncpy_from_user+0x36/0x2e0 [ 309.080680][ T7850] getname_flags+0xf6/0x500 [ 309.085254][ T7850] __x64_sys_execve+0x78/0xa0 [ 309.089956][ T7850] do_syscall_64+0x55/0xb0 [ 309.094389][ T7850] ? clear_bhb_loop+0x40/0x90 [ 309.099101][ T7850] ? clear_bhb_loop+0x40/0x90 [ 309.103820][ T7850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.109740][ T7850] RIP: 0033:0x7f5e6ed8f749 [ 309.114180][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.133820][ T7850] RSP: 002b:00007f5e6cfd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 309.142252][ T7850] RAX: ffffffffffffffda RBX: 00007f5e6efe6180 RCX: 00007f5e6ed8f749 [ 309.150238][ T7850] RDX: 0000200000000800 RSI: 0000000000000000 RDI: 0000200000000180 [ 309.158220][ T7850] RBP: 00007f5e6cfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 309.166205][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.174188][ T7850] R13: 00007f5e6efe6218 R14: 00007f5e6efe6180 R15: 00007fff95cc3fb8 [ 309.182189][ T7850] [ 309.196793][ T171] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 309.297136][ T171] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 100ms [ 309.321196][ T171] gfs2: fsid=syz:syz.0: jid=0: Done [ 309.340136][ T7795] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 309.375011][ T7795] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 309.558601][ T7845] loop1: detected capacity change from 0 to 32768 [ 309.655374][ T7845] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 309.825179][ T7654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.847273][ T7845] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 310.021071][ T7845] XFS (loop1): Starting recovery (logdev: internal) [ 310.098470][ T7845] XFS (loop1): Ending recovery (logdev: internal) [ 310.167415][ T7845] XFS (loop1): Quotacheck needed: Please wait. [ 310.255235][ T7845] XFS (loop1): Quotacheck: Done. [ 310.547520][ T5763] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 311.492704][ T7654] veth0_vlan: entered promiscuous mode [ 311.548702][ T7654] veth1_vlan: entered promiscuous mode [ 311.648855][ T7654] veth0_macvtap: entered promiscuous mode [ 311.714083][ T28] audit: type=1800 audit(1765278422.231:35): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.472" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 311.735464][ T7654] veth1_macvtap: entered promiscuous mode [ 311.857332][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.894658][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.917312][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.940117][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.956914][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.976561][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.020641][ T7910] FAULT_INJECTION: forcing a failure. [ 312.020641][ T7910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.021643][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.051115][ T7910] CPU: 1 PID: 7910 Comm: syz.1.474 Not tainted syzkaller #0 [ 312.058831][ T7910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.068930][ T7910] Call Trace: [ 312.072249][ T7910] [ 312.075217][ T7910] dump_stack_lvl+0x16c/0x230 [ 312.076890][ T7908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.473'. [ 312.079933][ T7910] ? show_regs_print_info+0x20/0x20 [ 312.094052][ T7910] ? load_image+0x3b0/0x3b0 [ 312.098620][ T7910] ? __lock_acquire+0x7c80/0x7c80 [ 312.103971][ T7910] ? snprintf+0xdb/0x120 [ 312.108269][ T7910] should_fail_ex+0x39d/0x4d0 [ 312.111881][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 312.112984][ T7910] _copy_to_user+0x2f/0xa0 [ 312.126240][ T7910] simple_read_from_buffer+0xe7/0x150 [ 312.131676][ T7910] proc_fail_nth_read+0x1e3/0x250 [ 312.136761][ T7910] ? proc_fault_inject_write+0x340/0x340 [ 312.142456][ T7910] ? fsnotify_perm+0x271/0x5e0 [ 312.147279][ T7910] ? proc_fault_inject_write+0x340/0x340 [ 312.152972][ T7910] vfs_read+0x27e/0x920 [ 312.157185][ T7910] ? kernel_read+0x1e0/0x1e0 [ 312.161827][ T7910] ? bpf_lsm_socket_bind+0x9/0x10 [ 312.166906][ T7910] ? security_socket_bind+0x80/0xa0 [ 312.172151][ T7910] ? __sys_bind+0x32f/0x410 [ 312.176712][ T7910] ? __fdget_pos+0x2ba/0x330 [ 312.181381][ T7910] ksys_read+0x147/0x250 [ 312.185770][ T7910] ? vfs_write+0x940/0x940 [ 312.190262][ T7910] ? lockdep_hardirqs_on+0x98/0x150 [ 312.195521][ T7910] do_syscall_64+0x55/0xb0 [ 312.199980][ T7910] ? clear_bhb_loop+0x40/0x90 [ 312.204719][ T7910] ? clear_bhb_loop+0x40/0x90 [ 312.209445][ T7910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.215389][ T7910] RIP: 0033:0x7f18b678e15c [ 312.219843][ T7910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 312.239493][ T7910] RSP: 002b:00007f18b76fd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.247972][ T7910] RAX: ffffffffffffffda RBX: 00007f18b69e5fa0 RCX: 00007f18b678e15c [ 312.255987][ T7910] RDX: 000000000000000f RSI: 00007f18b76fd0a0 RDI: 0000000000000004 [ 312.264007][ T7910] RBP: 00007f18b76fd090 R08: 0000000000000000 R09: 0000000000000000 [ 312.272027][ T7910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.280044][ T7910] R13: 00007f18b69e6038 R14: 00007f18b69e5fa0 R15: 00007ffdae82e838 [ 312.288078][ T7910] [ 313.194536][ T7908] team0 (unregistering): Port device team_slave_0 removed [ 313.247572][ T7908] team0 (unregistering): Port device team_slave_1 removed [ 313.303227][ T7911] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 313.360108][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.396715][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.417469][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.436816][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.456720][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.476739][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.498657][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.516088][ T7914] netlink: 27 bytes leftover after parsing attributes in process `syz.1.475'. [ 313.605888][ T7654] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.646164][ T7654] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.667965][ T7654] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.717190][ T7654] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.933481][ T7918] loop4: detected capacity change from 0 to 32768 [ 313.960344][ T7920] loop1: detected capacity change from 0 to 2048 [ 314.008343][ T7918] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 314.360225][ T7920] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 314.411253][ T7920] NILFS (loop1): mounting unchecked fs [ 314.459273][ T7920] NILFS (loop1): recovery complete [ 314.466135][ T7928] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.981917][ T6131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.027709][ T6131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.174949][ T6587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.206296][ T7323] ocfs2: Unmounting device (7,4) on (node local) [ 315.208210][ T6587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.387032][ T27] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 316.576913][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 316.614868][ T27] usb 1-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 316.650057][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.685597][ T27] usb 1-1: Product: syz [ 316.735837][ T27] usb 1-1: Manufacturer: syz [ 316.782072][ T27] usb 1-1: SerialNumber: syz [ 316.862762][ T27] usb 1-1: config 0 descriptor?? [ 316.928512][ T7969] netlink: 27 bytes leftover after parsing attributes in process `syz.1.484'. [ 317.029183][ T5080] Bluetooth: hci0: command 0x1407 tx timeout [ 317.035547][ T5771] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 317.133705][ T27] safe_serial 1-1:0.0: safe_serial converter detected [ 317.181155][ T27] usb 1-1: safe_serial converter now attached to ttyUSB0 [ 317.225981][ T27] usb 1-1: USB disconnect, device number 22 [ 317.327735][ T27] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 317.342202][ T7971] netlink: 'syz.5.485': attribute type 4 has an invalid length. [ 317.367583][ T27] safe_serial 1-1:0.0: device disconnected [ 317.376735][ T7971] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.485'. [ 317.430599][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.439266][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.746629][ T7984] loop5: detected capacity change from 0 to 512 [ 317.822708][ T7984] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 318.702162][ T7984] EXT4-fs (loop5): failed to open journal device unknown-block(0,8195) -6 [ 318.842977][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.873149][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.894872][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.919381][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.930560][ T7981] mmap: syz.4.488 (7981): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 318.995228][ T8003] loop1: detected capacity change from 0 to 1024 [ 319.038281][ T8003] EXT4-fs: Ignoring removed bh option [ 319.078102][ T8003] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 319.167140][ T5151] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 319.227608][ T8003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.550768][ T5151] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 319.835695][ T5771] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 319.842294][ T5080] Bluetooth: hci0: command 0x1407 tx timeout [ 319.842878][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.875707][ T8012] netlink: 27 bytes leftover after parsing attributes in process `syz.5.496'. [ 319.971995][ T5151] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 320.023474][ T5151] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 320.054128][ T5151] usb 1-1: Manufacturer: syz [ 320.071899][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.085102][ T5151] usb 1-1: config 0 descriptor?? [ 320.107845][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.266913][ T5151] rc_core: IR keymap rc-hauppauge not found [ 320.279753][ T5151] Registered IR keymap rc-empty [ 320.338462][ T5151] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 320.380514][ T8029] [U]  [ 320.397205][ T5151] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 320.410122][ T8029] [U] K{‘ [ 320.413437][ T8029] [U] ÄT Ž1ĘŔŠŞFĚÇÄFˊÎ`GĘJǘÜGÖĆŻšŹĄ—ŢČOŐŃ/ÜMCÇ [ 320.435547][ T8029] [U] TžŘ–/,~ˆÄœ­‹JŐßĘ}8ÎĘŢ'O1Ü"™7-΂JQœK—¤WşĎQÉ5C%"ŹH12–ŚY“„‰ž€ĘXÍ`ˆ‚ÍČź`+łŰ(ˇÂż!(ÉŰÉZ'ŔTXLNťIŽGĹJ– °ÜÝ­ˇPĹ~÷7Í!‘ŐŇ"بÎ žŞ(Č5ˆOBܤ‡ÍƒJÖ [ 320.466319][ T5151] usb 1-1: USB disconnect, device number 23 [ 320.492354][ T8036] loop4: detected capacity change from 0 to 1024 [ 320.562840][ T8036] EXT4-fs: Ignoring removed orlov option [ 320.642430][ T8029] [U] ąK\&—}6Ł6œXÎHX ĽÔľ„ĚŢ.`¸A“$Ű40|Ďśż9°Řި„ŻŔ ĎU‚Ň4ÔÄŽVBZĂĐ}ĚWÔM”TşŽÍQŸÝÎŚR’ 4”ß [ 320.681773][ T8036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.722691][ T8029] [U] ".H6ŘŢ"ÖKÇ[›‰¤ŒJÁ4ÇŘIN¨™[Z(•„C|TË]Z{Â3ŸC=ť¨XÎԞ˅Î4żW‰)\T‘XJ؏SH{Q;Ěš˘…ÖTÔÇ+‹Ś÷GÍČߎD„.˂ł>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇŮ\G%ŠOź&Z)ľК'¨PUL‚_<Ă ˘Ř°‰ŇŽÔĹ`ŇąTÔÁޜĐËŢ;_Ô"(‘U{7Jœż2X ‘/€'ÝŮCŃĚŐIşŠŔĎHżCŐłžVŚ=‘AIÇ%WźESž RšŸJŠÎœƒÚ”GÂ÷RÁšÍĄHI˜˘œAĎĚ6-ÚDÚV¨Á I"ŘĹNƨ ŢÚASC~4ÁŞš8CŘ*­OO5/ߜJš~ş§ĄW—VK+ŹŽ‰Œ3ČÇY)ŽšM°¸ĆVśĚYQĆ˝€DTRŻOTPEM%F×ĘEJÍA5ĆÔT_-X~ ^AAۂҘ˝QÖĹ [ 320.762823][ T8029] [U] +W‰G?]ŁÓ'A: ťÚ)ŐĎÓ™“' B>T˘ ĄF/™÷<'ČUÓ'–źH§IÉ.+]EŸ.˝-ÉżßżŇ%÷Č>2`ś^Uß8F.Š6¤Ĺ3ÓŘ+ËAžÂŤŤ„°G3ÓPÂÓ6:^0ŔTÉČV÷'EŐTź€ŰÂYC‰NžŢRĎŠŢNČPJ× ;ĆZ†ĘÔŃۑ8!ŻČ\م¸AŘʖ2ÁŁ$Đľ™Â­WI.ÍÇ#ŠČ/BAIźÄ`ĐÁ4J’ÔDÎY@ÓZ„ÜGW÷5ËżBÄ ľŮœ NÓY"VI2ŰĚ [ 320.787388][ T8029] [U] ÔTŚ_K5¸TŹYJĐŢÎ9ĐŐCĘ$BRŸLÚNUL śÜ9WČÝÍ|žGĹ"ʃĆ%ÇÚśĘCŞŘ°śşQÎŮ ŸÇ3‹ĆQŻÔN^HP*˝Ü$ ľ.Î7YÓąœ2ł [ 320.799561][ T8029] [U] ˝?Šß HÜÄ*ŮÁ”Î3͝7Üɍž^#Q"0~‡ ‚Đ(ÉOĎX LŒBŁ,'VÎÓ=‹ÝËCĚSŤ…’G‚SśŢ0•Ö‚‹Ů`˜›žŮ‡Ÿ†=1(÷Ξ™÷P#Ň2DO*Ƀ [ 320.812600][ T8029] [U] ŠSš“Gžľ˛ś“˜GUĐÔD-{¸™Â|&“ŽŸŸŃ2ľ›LŢC_М!`¨ÍOZÖĽ˘Bśł%>ĘRŃśÖWχݎSSÂH"ŁYA4ŁO.šYŮŰď„RTÔśŒBÚ[+/< [ 323.841843][ T8058] dump_stack_lvl+0x16c/0x230 [ 323.846589][ T8058] ? show_regs_print_info+0x20/0x20 [ 323.851849][ T8058] ? load_image+0x3b0/0x3b0 [ 323.856409][ T8058] ? __might_fault+0xaa/0x120 [ 323.861126][ T8058] ? __lock_acquire+0x7c80/0x7c80 [ 323.866200][ T8058] should_fail_ex+0x39d/0x4d0 [ 323.870944][ T8058] _copy_from_user+0x2f/0xe0 [ 323.875592][ T8058] kstrtouint_from_user+0xc2/0x150 [ 323.880769][ T8058] ? kstrtol_from_user+0x150/0x150 [ 323.885930][ T8058] proc_fail_nth_write+0x89/0x240 [ 323.890976][ T8058] ? proc_fail_nth_read+0x250/0x250 [ 323.896291][ T8058] ? proc_fail_nth_read+0x250/0x250 [ 323.901506][ T8058] vfs_write+0x288/0x940 [ 323.905773][ T8058] ? file_end_write+0x250/0x250 [ 323.910645][ T8058] ? __fget_files+0x28/0x4d0 [ 323.915255][ T8058] ? __fget_files+0x44a/0x4d0 [ 323.919991][ T8058] ? __fdget_pos+0x2a3/0x330 [ 323.924598][ T8058] ? ksys_write+0x75/0x250 [ 323.929036][ T8058] ksys_write+0x147/0x250 [ 323.933409][ T8058] ? __ia32_sys_read+0x90/0x90 [ 323.938218][ T8058] ? lockdep_hardirqs_on+0x98/0x150 [ 323.943540][ T8058] do_syscall_64+0x55/0xb0 [ 323.947993][ T8058] ? clear_bhb_loop+0x40/0x90 [ 323.952706][ T8058] ? clear_bhb_loop+0x40/0x90 [ 323.957421][ T8058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.963337][ T8058] RIP: 0033:0x7f6f5398e1ff [ 323.967769][ T8058] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 323.987406][ T8058] RSP: 002b:00007f6f548b5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 323.995845][ T8058] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6f5398e1ff [ 324.003852][ T8058] RDX: 0000000000000001 RSI: 00007f6f548b50a0 RDI: 0000000000000004 [ 324.011941][ T8058] RBP: 00007f6f548b5090 R08: 0000000000000000 R09: 0000000000000000 [ 324.019939][ T8058] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 324.027934][ T8058] R13: 00007f6f53be6038 R14: 00007f6f53be5fa0 R15: 00007ffef58704d8 [ 324.035938][ T8058] [ 324.326939][ T5151] rc_core: IR keymap rc-hauppauge not found [ 324.341817][ T5151] Registered IR keymap rc-empty [ 325.287179][ T8082] loop1: detected capacity change from 0 to 256 [ 325.306355][ T8083] loop5: detected capacity change from 0 to 256 [ 325.329194][ T5151] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 325.405878][ T5151] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input16 [ 325.798627][ T7719] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.857070][ T5151] usb 6-1: USB disconnect, device number 2 [ 326.034382][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.064959][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.306811][ T5080] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 326.313376][ T5080] Bluetooth: hci0: command 0x1407 tx timeout [ 329.400173][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.483135][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.847472][ T8133] netlink: 27 bytes leftover after parsing attributes in process `syz.5.520'. [ 331.449274][ T8138] netlink: 16 bytes leftover after parsing attributes in process `syz.5.521'. [ 331.530327][ T8138] netlink: 'syz.5.521': attribute type 10 has an invalid length. [ 331.658854][ T8138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.681693][ T8138] team0: Port device bond0 added [ 333.032701][ T8164] FAULT_INJECTION: forcing a failure. [ 333.032701][ T8164] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 333.066776][ T8164] CPU: 0 PID: 8164 Comm: syz.0.527 Not tainted syzkaller #0 [ 333.068906][ T8163] loop1: detected capacity change from 0 to 256 [ 333.074120][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.090675][ T8164] Call Trace: [ 333.094018][ T8164] [ 333.096993][ T8164] dump_stack_lvl+0x16c/0x230 [ 333.101743][ T8164] ? show_regs_print_info+0x20/0x20 [ 333.107086][ T8164] ? load_image+0x3b0/0x3b0 [ 333.111639][ T8164] ? __lock_acquire+0x7c80/0x7c80 [ 333.116707][ T8164] ? verify_lock_unused+0x140/0x140 [ 333.121956][ T8164] should_fail_ex+0x39d/0x4d0 [ 333.126698][ T8164] prepare_alloc_pages+0x1e2/0x5f0 [ 333.129510][ T8163] exfat: Deprecated parameter 'namecase' [ 333.131851][ T8164] __alloc_pages+0x127/0x460 [ 333.142129][ T8164] ? zone_statistics+0x170/0x170 [ 333.147126][ T8164] ? mt_find+0x13e/0x5b0 [ 333.151441][ T8164] ? handle_mm_fault+0xd1/0x4920 [ 333.156448][ T8164] __folio_alloc+0x10/0x20 [ 333.160924][ T8164] vma_alloc_folio+0x47a/0x8f0 [ 333.165758][ T8164] handle_mm_fault+0x1a38/0x4920 [ 333.170745][ T8164] ? handle_mm_fault+0xd1/0x4920 [ 333.175764][ T8164] ? numa_migrate_prep+0x350/0x350 [ 333.180938][ T8164] ? __asan_memcpy+0x40/0x70 [ 333.185582][ T8164] ? lock_mm_and_find_vma+0x9c/0x300 [ 333.190923][ T8164] do_user_addr_fault+0x738/0x12e0 [ 333.196101][ T8164] exc_page_fault+0x67/0x110 [ 333.200741][ T8164] asm_exc_page_fault+0x26/0x30 [ 333.205628][ T8164] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 333.211476][ T8164] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 333.231132][ T8164] RSP: 0018:ffffc9000b8e7b50 EFLAGS: 00050206 [ 333.237255][ T8164] RAX: ffffffff841f3e01 RBX: 00000000000000fe RCX: 00000000000000fe [ 333.241547][ T8163] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 333.245374][ T8164] RDX: 0000000000000000 RSI: ffff88805df19000 RDI: 00002000000011c0 [ 333.245394][ T8164] RBP: ffffc9000b8e7c38 R08: ffff88805df190fd R09: 1ffff1100bbe321f [ 333.245409][ T8164] R10: dffffc0000000000 R11: ffffed100bbe3220 R12: 00002000000012be [ 333.281375][ T8164] R13: 00000000000000fe R14: 00002000000011c0 R15: ffff88805df19000 [ 333.289399][ T8164] ? _copy_from_user+0x91/0xe0 [ 333.294221][ T8164] _copy_to_user+0x85/0xa0 [ 333.298685][ T8164] snd_pcm_oss_read2+0x2df/0x3d0 [ 333.303671][ T8164] ? snd_pcm_oss_release+0x240/0x240 [ 333.309009][ T8164] ? snd_pcm_do_prepare+0x230/0x230 [ 333.314266][ T8164] ? snd_pcm_action_nonatomic+0x24a/0x2a0 [ 333.320058][ T8164] snd_pcm_oss_read+0x649/0x8c0 [ 333.324981][ T8164] ? snd_pcm_oss_unregister_minor+0x220/0x220 [ 333.331096][ T8164] vfs_read+0x27e/0x920 [ 333.335302][ T8164] ? kernel_read+0x1e0/0x1e0 [ 333.339934][ T8164] ? __fget_files+0x28/0x4d0 [ 333.344570][ T8164] ? __fget_files+0x44a/0x4d0 [ 333.349298][ T8164] ? __fdget_pos+0x1d8/0x330 [ 333.353926][ T8164] ? ksys_read+0x75/0x250 [ 333.358300][ T8164] ksys_read+0x147/0x250 [ 333.362593][ T8164] ? vfs_write+0x940/0x940 [ 333.367050][ T8164] ? lockdep_hardirqs_on+0x98/0x150 [ 333.372294][ T8164] do_syscall_64+0x55/0xb0 [ 333.376742][ T8164] ? clear_bhb_loop+0x40/0x90 [ 333.381458][ T8164] ? clear_bhb_loop+0x40/0x90 [ 333.386172][ T8164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.392111][ T8164] RIP: 0033:0x7f5e6ed8f749 [ 333.396570][ T8164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.416227][ T8164] RSP: 002b:00007f5e6cff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.424691][ T8164] RAX: ffffffffffffffda RBX: 00007f5e6efe6090 RCX: 00007f5e6ed8f749 [ 333.432700][ T8164] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000003 [ 333.440702][ T8164] RBP: 00007f5e6cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 333.448717][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.456807][ T8164] R13: 00007f5e6efe6128 R14: 00007f5e6efe6090 R15: 00007fff95cc3fb8 [ 333.464828][ T8164] [ 333.702405][ T8174] netlink: 27 bytes leftover after parsing attributes in process `syz.4.529'. [ 334.966577][ T8193] loop4: detected capacity change from 0 to 256 [ 335.755879][ T8203] FAULT_INJECTION: forcing a failure. [ 335.755879][ T8203] name failslab, interval 1, probability 0, space 0, times 0 [ 335.775880][ T8204] FAULT_INJECTION: forcing a failure. [ 335.775880][ T8204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.796436][ T8203] CPU: 0 PID: 8203 Comm: syz.4.537 Not tainted syzkaller #0 [ 335.803820][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.813922][ T8203] Call Trace: [ 335.817236][ T8203] [ 335.820201][ T8203] dump_stack_lvl+0x16c/0x230 [ 335.824926][ T8203] ? show_regs_print_info+0x20/0x20 [ 335.830166][ T8203] ? load_image+0x3b0/0x3b0 [ 335.834731][ T8203] ? __might_sleep+0xe0/0xe0 [ 335.839376][ T8203] ? __lock_acquire+0x7c80/0x7c80 [ 335.844442][ T8203] ? prepend_path+0x4b/0x960 [ 335.849176][ T8203] should_fail_ex+0x39d/0x4d0 [ 335.853886][ T8203] should_failslab+0x9/0x20 [ 335.858423][ T8203] slab_pre_alloc_hook+0x59/0x310 [ 335.863491][ T8203] ? __asan_memcpy+0x40/0x70 [ 335.868125][ T8203] ? tomoyo_encode+0x28b/0x540 [ 335.872943][ T8203] ? tomoyo_encode+0x28b/0x540 [ 335.877842][ T8203] __kmem_cache_alloc_node+0x53/0x260 [ 335.883346][ T8203] ? prepend_path+0x4b/0x960 [ 335.888069][ T8203] ? tomoyo_encode+0x28b/0x540 [ 335.892872][ T8203] __kmalloc+0xa4/0x240 [ 335.897066][ T8203] tomoyo_encode+0x28b/0x540 [ 335.901704][ T8203] tomoyo_realpath_from_path+0x592/0x5d0 [ 335.907422][ T8203] tomoyo_path_number_perm+0x1ea/0x590 [ 335.912926][ T8203] ? tomoyo_path_number_perm+0x1ba/0x590 [ 335.918612][ T8203] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 335.924111][ T8203] ? proc_fail_nth_write+0x1bf/0x240 [ 335.929444][ T8203] ? proc_fail_nth_read+0x250/0x250 [ 335.934730][ T8203] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 335.940788][ T8203] security_file_ioctl+0x70/0xa0 [ 335.945788][ T8203] __se_sys_ioctl+0x48/0x170 [ 335.950424][ T8203] do_syscall_64+0x55/0xb0 [ 335.954869][ T8203] ? clear_bhb_loop+0x40/0x90 [ 335.959596][ T8203] ? clear_bhb_loop+0x40/0x90 [ 335.964411][ T8203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.970361][ T8203] RIP: 0033:0x7f91f958f749 [ 335.974813][ T8203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.994471][ T8203] RSP: 002b:00007f91fa363038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.002993][ T8203] RAX: ffffffffffffffda RBX: 00007f91f97e5fa0 RCX: 00007f91f958f749 [ 336.011016][ T8203] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 336.019039][ T8203] RBP: 00007f91fa363090 R08: 0000000000000000 R09: 0000000000000000 [ 336.027055][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.035159][ T8203] R13: 00007f91f97e6038 R14: 00007f91f97e5fa0 R15: 00007ffd3b57b528 [ 336.043188][ T8203] [ 336.046243][ T8204] CPU: 1 PID: 8204 Comm: syz.5.538 Not tainted syzkaller #0 [ 336.053597][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.063791][ T8204] Call Trace: [ 336.067117][ T8204] [ 336.070086][ T8204] dump_stack_lvl+0x16c/0x230 [ 336.074826][ T8204] ? show_regs_print_info+0x20/0x20 [ 336.080087][ T8204] ? load_image+0x3b0/0x3b0 [ 336.082348][ T8203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 336.084631][ T8204] ? __might_fault+0xaa/0x120 [ 336.084660][ T8204] ? __lock_acquire+0x7c80/0x7c80 [ 336.101113][ T8204] should_fail_ex+0x39d/0x4d0 [ 336.105849][ T8204] _copy_from_user+0x2f/0xe0 [ 336.110495][ T8204] kstrtouint_from_user+0xc2/0x150 [ 336.115666][ T8204] ? kstrtol_from_user+0x150/0x150 [ 336.120851][ T8204] proc_fail_nth_write+0x89/0x240 [ 336.125925][ T8204] ? proc_fail_nth_read+0x250/0x250 [ 336.131172][ T8204] ? proc_fail_nth_read+0x250/0x250 [ 336.136396][ T8204] vfs_write+0x288/0x940 [ 336.140665][ T8204] ? file_end_write+0x250/0x250 [ 336.145545][ T8204] ? __fget_files+0x28/0x4d0 [ 336.150159][ T8204] ? __fget_files+0x44a/0x4d0 [ 336.154868][ T8204] ? __fdget_pos+0x2a3/0x330 [ 336.159491][ T8204] ? ksys_write+0x75/0x250 [ 336.163943][ T8204] ksys_write+0x147/0x250 [ 336.168295][ T8204] ? __ia32_sys_read+0x90/0x90 [ 336.173082][ T8204] ? lockdep_hardirqs_on+0x98/0x150 [ 336.178304][ T8204] do_syscall_64+0x55/0xb0 [ 336.182831][ T8204] ? clear_bhb_loop+0x40/0x90 [ 336.187527][ T8204] ? clear_bhb_loop+0x40/0x90 [ 336.192223][ T8204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.198130][ T8204] RIP: 0033:0x7f6f5398e1ff [ 336.202559][ T8204] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 336.222206][ T8204] RSP: 002b:00007f6f54873030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 336.230639][ T8204] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6f5398e1ff [ 336.238625][ T8204] RDX: 0000000000000001 RSI: 00007f6f548730a0 RDI: 0000000000000009 [ 336.246609][ T8204] RBP: 00007f6f54873090 R08: 0000000000000000 R09: 0000000000000000 [ 336.254594][ T8204] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 336.262584][ T8204] R13: 00007f6f53be6218 R14: 00007f6f53be6180 R15: 00007ffef58704d8 [ 336.270587][ T8204] [ 336.338175][ T8208] loop1: detected capacity change from 0 to 512 [ 336.355619][ T8208] EXT4-fs: Ignoring removed oldalloc option [ 336.383201][ T8208] EXT4-fs: Ignoring removed mblk_io_submit option [ 336.439612][ T8208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 336.489377][ T8208] EXT4-fs (loop1): orphan cleanup on readonly fs [ 336.522532][ T8213] loop2: detected capacity change from 0 to 7 [ 336.541140][ T8208] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 336.561969][ T8213] Dev loop2: unable to read RDB block 7 [ 336.576866][ T8208] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 336.601631][ T8213] loop2: AHDI p2 p3 [ 336.605631][ T8213] loop2: partition table partially beyond EOD, truncated [ 336.627399][ T8208] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.539: Failed to acquire dquot type 1 [ 336.677162][ T8213] loop2: p3 start 335544320 is beyond EOD, truncated [ 336.707576][ T8208] EXT4-fs (loop1): 1 truncate cleaned up [ 336.753543][ T8208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 336.919550][ T8208] ext4: Unknown parameter ';ňÍfFŰ­1t¨äî Ž' [ 337.002270][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.028031][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.040118][ T8226] FAULT_INJECTION: forcing a failure. [ 337.040118][ T8226] name failslab, interval 1, probability 0, space 0, times 0 [ 337.078670][ T8226] CPU: 0 PID: 8226 Comm: syz.0.543 Not tainted syzkaller #0 [ 337.086047][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.096154][ T8226] Call Trace: [ 337.099494][ T8226] [ 337.102478][ T8226] dump_stack_lvl+0x16c/0x230 [ 337.107223][ T8226] ? show_regs_print_info+0x20/0x20 [ 337.112491][ T8226] ? load_image+0x3b0/0x3b0 [ 337.117060][ T8226] ? __might_sleep+0xe0/0xe0 [ 337.121711][ T8226] ? __lock_acquire+0x7c80/0x7c80 [ 337.126788][ T8226] ? prepend_path+0x4b/0x960 [ 337.131432][ T8226] should_fail_ex+0x39d/0x4d0 [ 337.136178][ T8226] should_failslab+0x9/0x20 [ 337.140744][ T8226] slab_pre_alloc_hook+0x59/0x310 [ 337.145827][ T8226] ? __asan_memcpy+0x40/0x70 [ 337.150473][ T8226] ? tomoyo_encode+0x28b/0x540 [ 337.155293][ T8226] ? tomoyo_encode+0x28b/0x540 [ 337.160113][ T8226] __kmem_cache_alloc_node+0x53/0x260 [ 337.165540][ T8226] ? prepend_path+0x4b/0x960 [ 337.170179][ T8226] ? tomoyo_encode+0x28b/0x540 [ 337.174997][ T8226] __kmalloc+0xa4/0x240 [ 337.179210][ T8226] tomoyo_encode+0x28b/0x540 [ 337.183863][ T8226] tomoyo_realpath_from_path+0x592/0x5d0 [ 337.189568][ T8226] tomoyo_path_number_perm+0x1ea/0x590 [ 337.195090][ T8226] ? tomoyo_path_number_perm+0x1ba/0x590 [ 337.200782][ T8226] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 337.206302][ T8226] ? ksys_write+0x1c1/0x250 [ 337.210897][ T8226] ? __fget_files+0x28/0x4d0 [ 337.215559][ T8226] security_file_ioctl+0x70/0xa0 [ 337.220557][ T8226] __se_sys_ioctl+0x48/0x170 [ 337.225196][ T8226] do_syscall_64+0x55/0xb0 [ 337.229676][ T8226] ? clear_bhb_loop+0x40/0x90 [ 337.234400][ T8226] ? clear_bhb_loop+0x40/0x90 [ 337.239120][ T8226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.245059][ T8226] RIP: 0033:0x7f5e6ed8f749 [ 337.249518][ T8226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.269270][ T8226] RSP: 002b:00007f5e6fb45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.277737][ T8226] RAX: ffffffffffffffda RBX: 00007f5e6efe5fa0 RCX: 00007f5e6ed8f749 [ 337.285758][ T8226] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 337.293776][ T8226] RBP: 00007f5e6fb45090 R08: 0000000000000000 R09: 0000000000000000 [ 337.301793][ T8226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.309811][ T8226] R13: 00007f5e6efe6038 R14: 00007f5e6efe5fa0 R15: 00007fff95cc3fb8 [ 337.317850][ T8226] [ 337.321143][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.340669][ T8235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.358805][ T8235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.360772][ T171] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 337.372853][ T8226] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.566748][ T171] usb 5-1: Using ep0 maxpacket: 16 [ 337.574323][ T171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.586134][ T171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.617522][ T171] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 337.636704][ T171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.666618][ T171] usb 5-1: config 0 descriptor?? [ 338.090705][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.107542][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.140777][ T171] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 338.156768][ T171] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 338.167202][ T171] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 338.184615][ T171] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 338.197181][ T171] waltop 0003:172F:0032.0007: unknown main item tag 0x0 [ 338.230204][ T171] waltop 0003:172F:0032.0007: hidraw0: USB HID v0.81 Device [HID 172f:0032] on usb-dummy_hcd.4-1/input0 [ 338.405601][ T171] usb 5-1: USB disconnect, device number 3 [ 338.477433][ T8222] loop4: detected capacity change from 0 to 1024 [ 338.503698][ T8222] EXT4-fs: inline encryption not supported [ 338.593918][ T8222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.768397][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.858217][ T7323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.033427][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 340.790219][ T8290] syzkaller0: entered promiscuous mode [ 340.836858][ T8290] syzkaller0: entered allmulticast mode [ 341.075836][ T8298] loop1: detected capacity change from 0 to 1024 [ 341.102499][ T8279] loop4: detected capacity change from 0 to 32768 [ 341.139586][ T8298] EXT4-fs (loop1): DAX unsupported by block device. [ 341.221439][ T8279] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 341.306822][ T28] audit: type=1800 audit(1765278451.831:37): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.549" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 343.286336][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.556'. [ 346.353244][ T7323] ocfs2: Unmounting device (7,4) on (node local) [ 346.764823][ T8328] loop5: detected capacity change from 0 to 256 [ 347.503305][ T8333] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 347.503510][ T787] IPVS: starting estimator thread 0... [ 347.646912][ T8334] IPVS: using max 19 ests per chain, 45600 per kthread [ 349.103327][ T8316] tipc: Enabling of bearer rejected, failed to enable media [ 350.087305][ T8347] netlink: 27 bytes leftover after parsing attributes in process `syz.1.564'. [ 350.590496][ T8355] loop1: detected capacity change from 0 to 40427 [ 350.642740][ T8355] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 350.651314][ T8355] F2FS-fs (loop1): Image doesn't support compression [ 350.658232][ T8355] F2FS-fs (loop1): Image doesn't support compression [ 350.664961][ T8355] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 350.677193][ T8355] F2FS-fs (loop1): invalid crc value [ 350.688891][ T8355] F2FS-fs (loop1): Found nat_bits in checkpoint [ 350.725444][ T8355] F2FS-fs (loop1): Start checkpoint disabled! [ 350.753997][ T8355] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 351.249517][ T8364] loop5: detected capacity change from 0 to 1024 [ 351.606877][ T8364] hfsplus: xattr searching failed [ 351.663617][ T12] hfsplus: bad catalog folder entry [ 352.401430][ T8387] loop1: detected capacity change from 0 to 256 [ 353.136415][ T8395] loop4: detected capacity change from 0 to 1024 [ 353.181308][ T8395] EXT4-fs (loop4): DAX unsupported by block device. [ 353.507203][ T8403] fuse: Bad value for 'fd' [ 354.118441][ T8419] FAULT_INJECTION: forcing a failure. [ 354.118441][ T8419] name failslab, interval 1, probability 0, space 0, times 0 [ 354.149070][ T8419] CPU: 1 PID: 8419 Comm: syz.1.581 Not tainted syzkaller #0 [ 354.156432][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.166547][ T8419] Call Trace: [ 354.169879][ T8419] [ 354.172835][ T8419] dump_stack_lvl+0x16c/0x230 [ 354.177560][ T8419] ? show_regs_print_info+0x20/0x20 [ 354.182806][ T8419] ? load_image+0x3b0/0x3b0 [ 354.187339][ T8419] ? __might_sleep+0xe0/0xe0 [ 354.191946][ T8419] ? __lock_acquire+0x7c80/0x7c80 [ 354.196990][ T8419] should_fail_ex+0x39d/0x4d0 [ 354.201696][ T8419] should_failslab+0x9/0x20 [ 354.206215][ T8419] slab_pre_alloc_hook+0x59/0x310 [ 354.211351][ T8419] kmem_cache_alloc+0x5a/0x2e0 [ 354.216131][ T8419] ? io_submit_one+0x120/0x1240 [ 354.220999][ T8419] io_submit_one+0x120/0x1240 [ 354.225704][ T8419] ? lookup_ioctx+0x740/0x740 [ 354.230400][ T8419] ? __might_fault+0xaa/0x120 [ 354.235100][ T8419] ? __might_fault+0xc6/0x120 [ 354.239807][ T8419] ? __might_fault+0xaa/0x120 [ 354.244508][ T8419] __se_sys_io_submit+0x194/0x300 [ 354.249551][ T8419] ? __x64_sys_io_submit+0x80/0x80 [ 354.254687][ T8419] ? lockdep_hardirqs_on+0x98/0x150 [ 354.259904][ T8419] do_syscall_64+0x55/0xb0 [ 354.264333][ T8419] ? clear_bhb_loop+0x40/0x90 [ 354.269026][ T8419] ? clear_bhb_loop+0x40/0x90 [ 354.273723][ T8419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.279719][ T8419] RIP: 0033:0x7f18b678f749 [ 354.284156][ T8419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.303782][ T8419] RSP: 002b:00007f18b76dc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 354.312216][ T8419] RAX: ffffffffffffffda RBX: 00007f18b69e6090 RCX: 00007f18b678f749 [ 354.320204][ T8419] RDX: 0000200000000780 RSI: 0000000000000001 RDI: 00007f18b7633000 [ 354.328190][ T8419] RBP: 00007f18b76dc090 R08: 0000000000000000 R09: 0000000000000000 [ 354.336170][ T8419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.344151][ T8419] R13: 00007f18b69e6128 R14: 00007f18b69e6090 R15: 00007ffdae82e838 [ 354.352148][ T8419] [ 354.948921][ T8431] loop4: detected capacity change from 0 to 256 [ 357.031203][ T8435] loop4: detected capacity change from 0 to 32768 [ 357.157216][ T8435] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 357.188942][ T8455] FAULT_INJECTION: forcing a failure. [ 357.188942][ T8455] name failslab, interval 1, probability 0, space 0, times 0 [ 357.256871][ T8455] CPU: 0 PID: 8455 Comm: syz.5.588 Not tainted syzkaller #0 [ 357.264224][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.274298][ T8455] Call Trace: [ 357.277590][ T8455] [ 357.280532][ T8455] dump_stack_lvl+0x16c/0x230 [ 357.285278][ T8455] ? show_regs_print_info+0x20/0x20 [ 357.290502][ T8455] ? load_image+0x3b0/0x3b0 [ 357.295024][ T8455] ? __lock_acquire+0x7c80/0x7c80 [ 357.300068][ T8455] should_fail_ex+0x39d/0x4d0 [ 357.304859][ T8455] should_failslab+0x9/0x20 [ 357.309645][ T8455] slab_pre_alloc_hook+0x59/0x310 [ 357.314691][ T8455] ? sock_kmalloc+0x96/0xf0 [ 357.319316][ T8455] ? sock_kmalloc+0x96/0xf0 [ 357.323841][ T8455] __kmem_cache_alloc_node+0x53/0x260 [ 357.329244][ T8455] ? sock_kmalloc+0x96/0xf0 [ 357.333766][ T8455] __kmalloc+0xa4/0x240 [ 357.337949][ T8455] sock_kmalloc+0x96/0xf0 [ 357.342300][ T8455] af_alg_alloc_areq+0x8d/0x250 [ 357.347179][ T8455] skcipher_recvmsg+0x327/0xd70 [ 357.352079][ T8455] ? skcipher_sendmsg+0xf0/0xf0 [ 357.356954][ T8455] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 357.362255][ T8455] ? security_socket_recvmsg+0x89/0xb0 [ 357.367728][ T8455] ? skcipher_sendmsg+0xf0/0xf0 [ 357.372600][ T8455] ____sys_recvmsg+0x29e/0x5b0 [ 357.377391][ T8455] ? __sys_recvmsg_sock+0x50/0x50 [ 357.382475][ T8455] ? import_iovec+0x73/0xa0 [ 357.387035][ T8455] ___sys_recvmsg+0x1b6/0x510 [ 357.391809][ T8455] ? __sys_recvmsg+0x270/0x270 [ 357.396597][ T8455] ? ksys_write+0x1c1/0x250 [ 357.401133][ T8455] ? __fget_files+0x44a/0x4d0 [ 357.405847][ T8455] __x64_sys_recvmsg+0x1f2/0x2c0 [ 357.410821][ T8455] ? ___sys_recvmsg+0x510/0x510 [ 357.415715][ T8455] ? lockdep_hardirqs_on+0x98/0x150 [ 357.420933][ T8455] do_syscall_64+0x55/0xb0 [ 357.425370][ T8455] ? clear_bhb_loop+0x40/0x90 [ 357.430066][ T8455] ? clear_bhb_loop+0x40/0x90 [ 357.434762][ T8455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.440678][ T8455] RIP: 0033:0x7f6f5398f749 [ 357.445111][ T8455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.464751][ T8455] RSP: 002b:00007f6f548b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 357.473186][ T8455] RAX: ffffffffffffffda RBX: 00007f6f53be5fa0 RCX: 00007f6f5398f749 [ 357.481179][ T8455] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 357.489166][ T8455] RBP: 00007f6f548b5090 R08: 0000000000000000 R09: 0000000000000000 [ 357.497154][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.505157][ T8455] R13: 00007f6f53be6038 R14: 00007f6f53be5fa0 R15: 00007ffef58704d8 [ 357.513158][ T8455] [ 357.565494][ T28] audit: type=1800 audit(1765278468.091:38): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.585" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 358.002029][ T8440] loop1: detected capacity change from 0 to 32768 [ 358.095686][ T8440] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 358.196786][ T8440] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 358.305145][ T28] audit: type=1800 audit(1765278468.831:39): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.584" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 358.356018][ T8469] loop5: detected capacity change from 0 to 64 [ 359.097831][ T8481] loop5: detected capacity change from 0 to 64 [ 362.000468][ T8495] loop5: detected capacity change from 0 to 1024 [ 362.053348][ T8495] EXT4-fs (loop5): DAX unsupported by block device. [ 362.586915][ T5822] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 362.652263][ T7323] ocfs2: Unmounting device (7,4) on (node local) [ 362.807066][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 362.835953][ T5822] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 362.858099][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.866511][ T5822] usb 6-1: Product: syz [ 362.901572][ T5822] usb 6-1: Manufacturer: syz [ 362.906258][ T5822] usb 6-1: SerialNumber: syz [ 362.914726][ T5822] usb 6-1: config 0 descriptor?? [ 362.932575][ T5822] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 362.948237][ T5822] dvb-usb: bulk message failed: -22 (2/0) [ 362.983545][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 363.020318][ T5822] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 363.037228][ T5822] usb 6-1: media controller created [ 363.085576][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.131190][ T8498] dvb-usb: bulk message failed: -22 (3/0) [ 363.166335][ T5822] usb 6-1: selecting invalid altsetting 7 [ 363.182118][ T5822] cxusb: set interface failed [ 363.182217][ T5763] ocfs2: Unmounting device (7,1) on (node local) [ 363.219656][ T5822] dvb-usb: bulk message failed: -22 (1/0) [ 363.338866][ T8515] loop4: detected capacity change from 0 to 64 [ 363.398388][ T5822] DVB: Unable to find symbol lgdt330x_attach() [ 363.404623][ T5822] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 363.637187][ T5822] rc_core: IR keymap rc-dvico-portable not found [ 363.658112][ T5822] Registered IR keymap rc-empty [ 363.688155][ T5822] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 363.698800][ T171] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 363.765951][ T5822] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input18 [ 363.799197][ T5822] dvb-usb: schedule remote query interval to 100 msecs. [ 363.826932][ T5771] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 363.826976][ T5080] Bluetooth: hci0: command 0x1407 tx timeout [ 363.846775][ T5822] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 363.894525][ T5822] usb 6-1: USB disconnect, device number 3 [ 363.950838][ T171] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.979536][ T171] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 364.023950][ T171] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.7a [ 364.059457][ T171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.106308][ T5822] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 365.099625][ T9] usb 1-1: USB disconnect, device number 24 [ 365.286285][ T8545] loop1: detected capacity change from 0 to 1024 [ 365.328905][ T8545] EXT4-fs (loop1): DAX unsupported by block device. [ 365.577022][ T8553] loop4: detected capacity change from 0 to 256 [ 367.789963][ T8559] FAULT_INJECTION: forcing a failure. [ 367.789963][ T8559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.807779][ T8559] CPU: 0 PID: 8559 Comm: syz.1.608 Not tainted syzkaller #0 [ 367.815105][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.825167][ T8559] Call Trace: [ 367.828458][ T8559] [ 367.831400][ T8559] dump_stack_lvl+0x16c/0x230 [ 367.836132][ T8559] ? show_regs_print_info+0x20/0x20 [ 367.841367][ T8559] ? load_image+0x3b0/0x3b0 [ 367.845894][ T8559] ? __might_fault+0xaa/0x120 [ 367.850589][ T8559] ? __lock_acquire+0x7c80/0x7c80 [ 367.855626][ T8559] should_fail_ex+0x39d/0x4d0 [ 367.860450][ T8559] _copy_to_user+0x2f/0xa0 [ 367.864880][ T8559] copy_siginfo_to_user+0x24/0xa0 [ 367.869915][ T8559] x64_setup_rt_frame+0x740/0xcd0 [ 367.874979][ T8559] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 367.880559][ T8559] ? arch_do_signal_or_restart+0x37f/0x7b0 [ 367.886482][ T8559] arch_do_signal_or_restart+0x3fa/0x7b0 [ 367.892136][ T8559] ? get_sigframe_size+0x20/0x20 [ 367.897096][ T8559] ? ksys_read+0x1f2/0x250 [ 367.901538][ T8559] ? exit_to_user_mode_loop+0x3b/0x110 [ 367.907020][ T8559] exit_to_user_mode_loop+0x70/0x110 [ 367.912318][ T8559] exit_to_user_mode_prepare+0xf6/0x180 [ 367.917902][ T8559] syscall_exit_to_user_mode+0x1a/0x50 [ 367.923371][ T8559] do_syscall_64+0x61/0xb0 [ 367.927790][ T8559] ? clear_bhb_loop+0x40/0x90 [ 367.932472][ T8559] ? clear_bhb_loop+0x40/0x90 [ 367.937163][ T8559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.943061][ T8559] RIP: 0033:0x7f18b678f749 [ 367.947479][ T8559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.967098][ T8559] RSP: 002b:00007f18b76dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.975617][ T8559] RAX: fffffffffffffffc RBX: 00007f18b69e6090 RCX: 00007f18b678f749 [ 367.983691][ T8559] RDX: 00000000000000ca RSI: 0000200000000200 RDI: 0000000000000004 [ 367.991678][ T8559] RBP: 00007f18b76dc090 R08: 0000000000000000 R09: 0000000000000000 [ 367.999657][ T8559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.007662][ T8559] R13: 00007f18b69e6128 R14: 00007f18b69e6090 R15: 00007ffdae82e838 [ 368.015664][ T8559] [ 368.938988][ T5080] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 368.945433][ T5080] Bluetooth: hci0: command 0x1407 tx timeout [ 371.779867][ T8578] random: crng reseeded on system resumption [ 374.367762][ T8596] FAULT_INJECTION: forcing a failure. [ 374.367762][ T8596] name failslab, interval 1, probability 0, space 0, times 0 [ 374.381311][ T8596] CPU: 1 PID: 8596 Comm: syz.0.614 Not tainted syzkaller #0 [ 374.388641][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.398736][ T8596] Call Trace: [ 374.402045][ T8596] [ 374.405004][ T8596] dump_stack_lvl+0x16c/0x230 [ 374.409736][ T8596] ? show_regs_print_info+0x20/0x20 [ 374.414980][ T8596] ? load_image+0x3b0/0x3b0 [ 374.419534][ T8596] ? __might_sleep+0xe0/0xe0 [ 374.424167][ T8596] ? __lock_acquire+0x7c80/0x7c80 [ 374.429239][ T8596] ? prepend_path+0x4b/0x960 [ 374.433999][ T8596] should_fail_ex+0x39d/0x4d0 [ 374.438741][ T8596] should_failslab+0x9/0x20 [ 374.443309][ T8596] slab_pre_alloc_hook+0x59/0x310 [ 374.448473][ T8596] ? __asan_memcpy+0x40/0x70 [ 374.453114][ T8596] ? tomoyo_encode+0x28b/0x540 [ 374.457982][ T8596] ? tomoyo_encode+0x28b/0x540 [ 374.462807][ T8596] __kmem_cache_alloc_node+0x53/0x260 [ 374.468225][ T8596] ? prepend_path+0x4b/0x960 [ 374.472855][ T8596] ? tomoyo_encode+0x28b/0x540 [ 374.477670][ T8596] __kmalloc+0xa4/0x240 [ 374.481879][ T8596] tomoyo_encode+0x28b/0x540 [ 374.486535][ T8596] tomoyo_realpath_from_path+0x592/0x5d0 [ 374.492307][ T8596] tomoyo_path_number_perm+0x1ea/0x590 [ 374.497809][ T8596] ? tomoyo_path_number_perm+0x1ba/0x590 [ 374.503466][ T8596] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 374.508952][ T8596] ? ksys_write+0x1c1/0x250 [ 374.513600][ T8596] ? __fget_files+0x28/0x4d0 [ 374.518216][ T8596] security_file_ioctl+0x70/0xa0 [ 374.523178][ T8596] __se_sys_ioctl+0x48/0x170 [ 374.527785][ T8596] do_syscall_64+0x55/0xb0 [ 374.532210][ T8596] ? clear_bhb_loop+0x40/0x90 [ 374.536901][ T8596] ? clear_bhb_loop+0x40/0x90 [ 374.541654][ T8596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.547577][ T8596] RIP: 0033:0x7f5e6ed8f749 [ 374.552100][ T8596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.571741][ T8596] RSP: 002b:00007f5e6cfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.580529][ T8596] RAX: ffffffffffffffda RBX: 00007f5e6efe6180 RCX: 00007f5e6ed8f749 [ 374.588520][ T8596] RDX: 0000200000000b40 RSI: 00000000c05064a7 RDI: 0000000000000005 [ 374.596514][ T8596] RBP: 00007f5e6cfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 374.604497][ T8596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.612485][ T8596] R13: 00007f5e6efe6218 R14: 00007f5e6efe6180 R15: 00007fff95cc3fb8 [ 374.620482][ T8596] [ 374.625144][ T8596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 379.728571][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.734923][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.761160][ T8627] netlink: 27 bytes leftover after parsing attributes in process `syz.4.618'. [ 381.482299][ T8672] FAULT_INJECTION: forcing a failure. [ 381.482299][ T8672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.542204][ T8672] CPU: 1 PID: 8672 Comm: syz.4.628 Not tainted syzkaller #0 [ 381.549577][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.559688][ T8672] Call Trace: [ 381.563012][ T8672] [ 381.565984][ T8672] dump_stack_lvl+0x16c/0x230 [ 381.570732][ T8672] ? show_regs_print_info+0x20/0x20 [ 381.575995][ T8672] ? load_image+0x3b0/0x3b0 [ 381.580554][ T8672] ? __might_fault+0xaa/0x120 [ 381.585285][ T8672] ? __lock_acquire+0x7c80/0x7c80 [ 381.590369][ T8672] should_fail_ex+0x39d/0x4d0 [ 381.595101][ T8672] _copy_from_iter+0x1d3/0x1290 [ 381.600015][ T8672] ? copyout_mc+0x70/0x70 [ 381.604425][ T8672] tun_get_user+0x384/0x3bf0 [ 381.609078][ T8672] ? aa_file_perm+0x120/0xec0 [ 381.613806][ T8672] ? aa_file_perm+0x3e8/0xec0 [ 381.618532][ T8672] ? rcu_read_unlock+0xa0/0xa0 [ 381.623354][ T8672] ? tun_get+0x1c/0x2e0 [ 381.627588][ T8672] ? __lock_acquire+0x7c80/0x7c80 [ 381.632660][ T8672] ? tun_get+0x1c/0x2e0 [ 381.636906][ T8672] tun_chr_write_iter+0x119/0x200 [ 381.641978][ T8672] vfs_write+0x43b/0x940 [ 381.646273][ T8672] ? file_end_write+0x250/0x250 [ 381.651166][ T8672] ? __fget_files+0x44a/0x4d0 [ 381.655893][ T8672] ? __fdget_pos+0x1d8/0x330 [ 381.660496][ T8672] ? ksys_write+0x75/0x250 [ 381.664928][ T8672] ksys_write+0x147/0x250 [ 381.669292][ T8672] ? __ia32_sys_read+0x90/0x90 [ 381.674091][ T8672] ? lockdep_hardirqs_on+0x98/0x150 [ 381.679405][ T8672] do_syscall_64+0x55/0xb0 [ 381.683854][ T8672] ? clear_bhb_loop+0x40/0x90 [ 381.688638][ T8672] ? clear_bhb_loop+0x40/0x90 [ 381.693338][ T8672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.699282][ T8672] RIP: 0033:0x7f91f958f749 [ 381.703711][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.723370][ T8672] RSP: 002b:00007f91fa363038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 381.731832][ T8672] RAX: ffffffffffffffda RBX: 00007f91f97e5fa0 RCX: 00007f91f958f749 [ 381.739937][ T8672] RDX: 0000000000000078 RSI: 0000200000000380 RDI: 0000000000000004 [ 381.747929][ T8672] RBP: 00007f91fa363090 R08: 0000000000000000 R09: 0000000000000000 [ 381.756001][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.764077][ T8672] R13: 00007f91f97e6038 R14: 00007f91f97e5fa0 R15: 00007ffd3b57b528 [ 381.772076][ T8672] [ 382.889231][ T8650] loop1: detected capacity change from 0 to 32768 [ 382.933018][ T8686] loop2: detected capacity change from 0 to 7 [ 382.947485][ T8650] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.622 (8650) [ 382.977376][ T8686] Dev loop2: unable to read RDB block 7 [ 383.020927][ T8686] loop2: AHDI p1 p2 p3 [ 383.056850][ T8686] loop2: partition table partially beyond EOD, truncated [ 383.100478][ T8686] loop2: p1 start 1601398130 is beyond EOD, truncated [ 383.107572][ T5080] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 383.116749][ T5080] Bluetooth: hci0: command 0x1407 tx timeout [ 383.146204][ T8686] loop2: p2 start 1702059890 is beyond EOD, truncated [ 383.182498][ T5135] Dev loop2: unable to read RDB block 7 [ 383.207644][ T5135] loop2: AHDI p1 p2 p3 [ 383.211894][ T5135] loop2: partition table partially beyond EOD, truncated [ 383.271498][ T5135] loop2: p1 start 1601398130 is beyond EOD, truncated [ 383.312631][ T5135] loop2: p2 start 1702059890 is beyond EOD, truncated [ 383.932099][ T8682] loop5: detected capacity change from 0 to 32768 [ 384.033393][ T8682] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 384.219134][ T28] audit: type=1800 audit(1765278494.731:40): pid=8681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.621" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 384.605881][ T8691] loop4: detected capacity change from 0 to 32768 [ 384.858490][ T28] audit: type=1326 audit(1765278495.381:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 385.132916][ T28] audit: type=1326 audit(1765278495.391:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 385.283266][ T28] audit: type=1326 audit(1765278495.391:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 386.401295][ T8725] netlink: 88 bytes leftover after parsing attributes in process `syz.1.637'. [ 386.401648][ T8722] netlink: 'syz.1.637': attribute type 4 has an invalid length. [ 386.421324][ T8722] netlink: 'syz.1.637': attribute type 7 has an invalid length. [ 386.430707][ T8722] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.637'. [ 386.517590][ T5080] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 386.517658][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 386.611037][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 386.675615][ T28] audit: type=1326 audit(1765278495.391:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 386.698811][ T28] audit: type=1326 audit(1765278495.391:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 386.722357][ T28] audit: type=1326 audit(1765278495.391:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 386.753255][ T28] audit: type=1326 audit(1765278495.411:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 386.850202][ T28] audit: type=1326 audit(1765278495.411:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 386.976885][ T28] audit: type=1326 audit(1765278495.411:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 387.930429][ T7654] ocfs2: Unmounting device (7,5) on (node local) [ 388.660037][ T8747] loop5: detected capacity change from 0 to 1024 [ 388.694135][ T8747] EXT4-fs (loop5): DAX unsupported by block device. [ 388.860235][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.907565][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.952995][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.999122][ T8758] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 389.012127][ T8758] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 389.212257][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.982516][ T8778] netlink: 27 bytes leftover after parsing attributes in process `syz.4.646'. [ 391.510271][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 391.516412][ T5771] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 391.648734][ T8784] loop4: detected capacity change from 0 to 24 [ 391.668034][ T8784] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 391.727298][ T8784] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 392.406930][ T171] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 393.614776][ T8782] loop1: detected capacity change from 0 to 8192 [ 394.491845][ T8790] loop5: detected capacity change from 0 to 256 [ 394.558667][ T8782] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 394.576798][ T8782] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 394.586310][ T171] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 394.594439][ T171] usb 5-1: can't read configurations, error -61 [ 394.747220][ T171] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 396.912475][ T8812] netlink: 27 bytes leftover after parsing attributes in process `syz.4.654'. [ 397.153516][ T8825] UBIFS error (pid: 8825): cannot open "./file0", error -22 [ 397.228662][ T8832] FAULT_INJECTION: forcing a failure. [ 397.228662][ T8832] name failslab, interval 1, probability 0, space 0, times 0 [ 397.248906][ T8832] CPU: 0 PID: 8832 Comm: syz.4.659 Not tainted syzkaller #0 [ 397.256203][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.266280][ T8832] Call Trace: [ 397.269573][ T8832] [ 397.272508][ T8832] dump_stack_lvl+0x16c/0x230 [ 397.277205][ T8832] ? show_regs_print_info+0x20/0x20 [ 397.282431][ T8832] ? load_image+0x3b0/0x3b0 [ 397.286973][ T8832] ? __might_sleep+0xe0/0xe0 [ 397.291595][ T8832] ? __lock_acquire+0x7c80/0x7c80 [ 397.296638][ T8832] ? prepend_path+0x4b/0x960 [ 397.301250][ T8832] should_fail_ex+0x39d/0x4d0 [ 397.305945][ T8832] should_failslab+0x9/0x20 [ 397.310466][ T8832] slab_pre_alloc_hook+0x59/0x310 [ 397.315513][ T8832] ? __asan_memcpy+0x40/0x70 [ 397.320130][ T8832] ? tomoyo_encode+0x28b/0x540 [ 397.324935][ T8832] ? tomoyo_encode+0x28b/0x540 [ 397.329745][ T8832] __kmem_cache_alloc_node+0x53/0x260 [ 397.335137][ T8832] ? prepend_path+0x4b/0x960 [ 397.339739][ T8832] ? tomoyo_encode+0x28b/0x540 [ 397.344537][ T8832] __kmalloc+0xa4/0x240 [ 397.348712][ T8832] tomoyo_encode+0x28b/0x540 [ 397.353327][ T8832] tomoyo_realpath_from_path+0x592/0x5d0 [ 397.358995][ T8832] tomoyo_path_number_perm+0x1ea/0x590 [ 397.364488][ T8832] ? tomoyo_path_number_perm+0x1ba/0x590 [ 397.370142][ T8832] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 397.375622][ T8832] ? ksys_write+0x1c1/0x250 [ 397.380256][ T8832] ? __fget_files+0x28/0x4d0 [ 397.384869][ T8832] security_file_ioctl+0x70/0xa0 [ 397.389843][ T8832] __se_sys_ioctl+0x48/0x170 [ 397.394457][ T8832] do_syscall_64+0x55/0xb0 [ 397.398884][ T8832] ? clear_bhb_loop+0x40/0x90 [ 397.403573][ T8832] ? clear_bhb_loop+0x40/0x90 [ 397.408266][ T8832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.414170][ T8832] RIP: 0033:0x7f91f958f749 [ 397.418596][ T8832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.438300][ T8832] RSP: 002b:00007f91fa363038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.446752][ T8832] RAX: ffffffffffffffda RBX: 00007f91f97e5fa0 RCX: 00007f91f958f749 [ 397.454822][ T8832] RDX: 0000000000000000 RSI: 0000000000005523 RDI: 0000000000000003 [ 397.462801][ T8832] RBP: 00007f91fa363090 R08: 0000000000000000 R09: 0000000000000000 [ 397.470782][ T8832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.478771][ T8832] R13: 00007f91f97e6038 R14: 00007f91f97e5fa0 R15: 00007ffd3b57b528 [ 397.486785][ T8832] [ 397.491756][ T8832] ERROR: Out of memory at tomoyo_realpath_from_path. [ 397.508417][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 397.514560][ T5771] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 397.815733][ T8841] loop4: detected capacity change from 0 to 256 [ 397.852444][ T8841] exfat: Deprecated parameter 'namecase' [ 397.956244][ T8841] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 398.177615][ T8848] loop5: detected capacity change from 0 to 1024 [ 398.245104][ T8848] EXT4-fs (loop5): DAX unsupported by block device. [ 398.709732][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 398.709748][ T28] audit: type=1326 audit(1765278509.211:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.4.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 398.915845][ T28] audit: type=1326 audit(1765278509.211:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.4.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 399.197339][ T28] audit: type=1326 audit(1765278509.231:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.4.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 399.603543][ T28] audit: type=1326 audit(1765278509.231:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.4.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 399.644802][ T28] audit: type=1326 audit(1765278509.231:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.4.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f958f749 code=0x7ffc0000 [ 400.184483][ T8894] kernel profiling enabled (shift: 17) [ 400.227087][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 400.233344][ T5771] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 400.668885][ T5834] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 401.107400][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 402.738181][ T8891] netlink: 296 bytes leftover after parsing attributes in process `syz.0.669'. [ 402.816522][ T5834] usb 5-1: config 16 has an invalid interface number: 124 but max is 0 [ 402.844295][ T5834] usb 5-1: config 16 has no interface number 0 [ 402.853945][ T5834] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= c.1b [ 402.876795][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.930035][ T5834] usb 5-1: Invalid descriptor size=18. [ 402.999262][ T8903] batadv1: entered promiscuous mode [ 403.041152][ T8903] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 403.604670][ T8913] loop5: detected capacity change from 0 to 32768 [ 403.686958][ T8913] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 403.762704][ T28] audit: type=1800 audit(1765278514.231:77): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.673" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 404.271854][ T9] usb 5-1: USB disconnect, device number 6 [ 404.599476][ T8924] loop4: detected capacity change from 0 to 1024 [ 404.628217][ T7654] ocfs2: Unmounting device (7,5) on (node local) [ 404.648445][ T8924] EXT4-fs (loop4): DAX unsupported by block device. [ 405.101128][ T8937] netlink: 'syz.4.679': attribute type 8 has an invalid length. [ 405.592763][ T8945] netlink: 27 bytes leftover after parsing attributes in process `syz.5.682'. [ 406.407293][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 406.413470][ T5771] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 407.724498][ T8976] loop1: detected capacity change from 0 to 32768 [ 407.898737][ T8976] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 408.008005][ T28] audit: type=1800 audit(1765278518.491:78): pid=8976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.686" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 408.466842][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 408.473550][ T5771] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 409.731744][ T5763] ocfs2: Unmounting device (7,1) on (node local) [ 410.168653][ T9001] loop5: detected capacity change from 0 to 4096 [ 410.206239][ T9001] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 410.487641][ T9001] ntfs: (device loop5): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 410.532354][ T9001] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 410.579380][ T9001] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 410.754039][ T9001] ntfs: (device loop5): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 0. [ 410.853257][ T9001] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 411.753829][ T9019] loop1: detected capacity change from 0 to 32768 [ 411.813785][ T9001] ntfs: volume version 3.1. [ 411.819954][ T9019] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 412.102068][ T28] audit: type=1800 audit(1765278522.621:79): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.699" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 412.312796][ T9032] loop4: detected capacity change from 0 to 256 [ 412.626869][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 412.634218][ T5771] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 413.027409][ T8644] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 413.500233][ T5763] ocfs2: Unmounting device (7,1) on (node local) [ 413.938007][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 414.157680][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 414.199899][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 414.218595][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.252531][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.290310][ T9] usb 6-1: string descriptor 0 read error: -22 [ 414.317915][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.352879][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.430579][ T9] usb 6-1: 0:2 : does not exist [ 415.271207][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.700'. [ 415.619767][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 415.641621][ T9] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 415.661626][ T9] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 415.757751][ T9] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 415.815657][ T9] usb 6-1: USB disconnect, device number 4 [ 415.982468][ T9090] syzkaller1: entered promiscuous mode [ 415.994535][ T9090] syzkaller1: entered allmulticast mode [ 416.045855][ T9090] syzkaller1: left promiscuous mode [ 416.056690][ T9090] syzkaller1: left allmulticast mode [ 416.794542][ T5766] Bluetooth: hci2: command 0x0406 tx timeout [ 417.609524][ T5771] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 417.618715][ T5771] Bluetooth: hci0: command 0x1407 tx timeout [ 418.331783][ T9109] loop4: detected capacity change from 0 to 1024 [ 418.387270][ T9109] EXT4-fs (loop4): DAX unsupported by block device. [ 418.620703][ T9097] loop5: detected capacity change from 0 to 32768 [ 418.930798][ T9125] loop4: detected capacity change from 0 to 32768 [ 418.943956][ T9097] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 418.983530][ T9125] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 419.737830][ T9097] XFS (loop5): Ending clean mount [ 420.055888][ T7654] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 420.371695][ T7323] ocfs2: Unmounting device (7,4) on (node local) [ 421.096910][ T5766] Bluetooth: hci0: command 0x1407 tx timeout [ 421.105244][ T51] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 421.692954][ T9147] loop1: detected capacity change from 0 to 32768 [ 421.785944][ T9147] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 423.062241][ T9147] XFS (loop1): Ending clean mount [ 423.257802][ T5763] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 423.354105][ T9171] loop4: detected capacity change from 0 to 1024 [ 423.367724][ T9171] EXT4-fs: Ignoring removed orlov option [ 423.460816][ T9171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.725191][ T9182] netlink: 27 bytes leftover after parsing attributes in process `syz.0.724'. [ 425.415587][ T171] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 425.425718][ T7323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.227193][ T5766] Bluetooth: hci0: command 0x1407 tx timeout [ 426.234473][ T51] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 426.399699][ T171] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 426.415747][ T171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.425145][ T171] usb 6-1: Product: syz [ 426.479212][ T171] usb 6-1: Manufacturer: syz [ 426.483983][ T171] usb 6-1: SerialNumber: syz [ 427.650404][ T9199] netlink: 27 bytes leftover after parsing attributes in process `syz.1.729'. [ 427.672021][ T9209] loop4: detected capacity change from 0 to 256 [ 427.974323][ T9212] loop1: detected capacity change from 0 to 1024 [ 428.010129][ T9212] EXT4-fs (loop1): DAX unsupported by block device. [ 428.222692][ T171] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 428.273010][ T171] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 428.310470][ T171] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 428.363976][ T171] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 428.373736][ T9215] Zero length message leads to an empty skb [ 428.429068][ T171] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 429.138797][ T9220] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 429.245625][ T171] lan78xx: probe of 6-1:1.0 failed with error -71 [ 429.337311][ T171] usb 6-1: USB disconnect, device number 5 [ 429.446784][ T5822] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 429.991880][ T5822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 430.086818][ T5822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.104873][ T9229] netlink: 75 bytes leftover after parsing attributes in process `syz.1.737'. [ 430.146958][ T5822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 430.185987][ T5822] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.222783][ T5822] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.273296][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.301736][ T5822] usbtmc 1-1:16.0: bulk endpoints not found [ 430.351871][ T9236] loop1: detected capacity change from 0 to 1024 [ 430.366309][ T9234] loop5: detected capacity change from 0 to 4096 [ 430.383173][ T9236] EXT4-fs: Ignoring removed orlov option [ 430.384710][ T9234] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 430.457993][ T9236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.470565][ T51] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 430.476766][ T5766] Bluetooth: hci0: command 0x1407 tx timeout [ 430.483485][ T9234] ntfs: (device loop5): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 430.552334][ T9234] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 430.562742][ T9234] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 430.954857][ T9234] ntfs: (device loop5): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 0. [ 430.967241][ T9234] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 431.244302][ T9234] ntfs: volume version 3.1. [ 431.602085][ T23] usb 1-1: USB disconnect, device number 25 [ 431.738579][ T9245] loop4: detected capacity change from 0 to 256 [ 432.000281][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.056519][ T9252] loop4: detected capacity change from 0 to 1024 [ 432.072281][ T9252] EXT4-fs (loop4): DAX unsupported by block device. [ 432.879882][ T9253] netlink: 27 bytes leftover after parsing attributes in process `syz.0.742'. [ 433.089772][ T9248] loop5: detected capacity change from 0 to 32768 [ 433.207591][ T9248] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 433.241760][ T9258] loop4: detected capacity change from 0 to 8192 [ 433.283832][ T9258] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 433.341161][ T9258] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 433.634282][ T9268] netlink: 75 bytes leftover after parsing attributes in process `syz.1.748'. [ 433.876957][ T9258] REISERFS (device loop4): using ordered data mode [ 433.883544][ T9258] reiserfs: using flush barriers [ 433.890937][ T9258] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 433.966430][ T9258] REISERFS (device loop4): checking transaction log (loop4) [ 434.250725][ T9258] REISERFS (device loop4): Using tea hash to sort names [ 434.261817][ T9258] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 434.282750][ T9270] loop1: detected capacity change from 0 to 4096 [ 434.312355][ T9270] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 434.358884][ T9263] tipc: Enabled bearer , priority 0 [ 434.400934][ T9263] syzkaller0: entered promiscuous mode [ 434.406485][ T9263] syzkaller0: entered allmulticast mode [ 434.532012][ T9270] ntfs: (device loop1): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 434.555496][ T9263] tipc: Resetting bearer [ 434.572479][ T9270] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 434.586396][ T9261] tipc: Resetting bearer [ 434.605490][ T9270] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 434.651063][ T9270] ntfs: volume version 3.1. [ 434.673393][ T9261] tipc: Disabling bearer [ 434.947001][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 434.948007][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 435.451168][ T9279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.460134][ T9279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.953159][ T9272] team0: Port device team_slave_0 removed [ 436.061516][ T9277] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 436.061929][ T7654] ocfs2: Unmounting device (7,5) on (node local) [ 436.632075][ T9288] loop5: detected capacity change from 0 to 1024 [ 436.646378][ T9288] EXT4-fs (loop5): DAX unsupported by block device. [ 438.112434][ T9298] netlink: 75 bytes leftover after parsing attributes in process `syz.5.758'. [ 438.440776][ T9303] netlink: 27 bytes leftover after parsing attributes in process `syz.0.760'. [ 438.626797][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 438.633376][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 439.143717][ T9307] loop5: detected capacity change from 0 to 32768 [ 439.217093][ T9307] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 439.316789][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 439.316807][ T28] audit: type=1800 audit(1765278549.831:80): pid=9307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.762" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 440.009124][ T9306] loop1: detected capacity change from 0 to 4096 [ 440.212269][ T9306] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 440.229286][ T9306] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 440.273916][ T9306] ntfs: volume version 3.1. [ 440.291192][ T9306] ntfs: (device loop1): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 440.317397][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.317501][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.406864][ T9306] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 440.418936][ T7654] ocfs2: Unmounting device (7,5) on (node local) [ 440.598220][ T9306] ntfs: (device loop1): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 440.898828][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 440.905262][ T5766] Bluetooth: hci0: command 0x1407 tx timeout [ 440.990620][ T9306] tipc: Started in network mode [ 440.995751][ T9306] tipc: Node identity 6e5d7f5c3fa6, cluster identity 4711 [ 441.003719][ T9306] tipc: Enabled bearer , priority 0 [ 441.014529][ T9306] syzkaller0: entered promiscuous mode [ 441.020192][ T9306] syzkaller0: entered allmulticast mode [ 441.035509][ T9306] ntfs: (device loop1): parse_options(): Unrecognized mount option ˙˙00000000000000000000˙˙˙˙˙˙18446744073709551615˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰. [ 441.125776][ T9306] tipc: Resetting bearer [ 441.157778][ T9304] tipc: Resetting bearer [ 441.258563][ T9304] tipc: Disabling bearer [ 441.759125][ T9331] loop4: detected capacity change from 0 to 1024 [ 441.797781][ T9331] EXT4-fs (loop4): DAX unsupported by block device. [ 443.716681][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 443.722816][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 444.420018][ T9341] netlink: 75 bytes leftover after parsing attributes in process `syz.1.771'. [ 444.553090][ T9333] loop5: detected capacity change from 0 to 32768 [ 444.734954][ T9333] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 445.167043][ T9348] loop1: detected capacity change from 0 to 256 [ 445.274280][ T7654] ocfs2: Unmounting device (7,5) on (node local) [ 445.916814][ T8789] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 447.947006][ T9358] netlink: 27 bytes leftover after parsing attributes in process `syz.1.778'. [ 448.225434][ T9368] tipc: Enabling not permitted [ 448.231994][ T9368] tipc: Enabling of bearer rejected, failed to enable media [ 448.244578][ T9368] syzkaller0: entered promiscuous mode [ 448.252660][ T9368] syzkaller0: entered allmulticast mode [ 448.386835][ T9371] netlink: 288 bytes leftover after parsing attributes in process `syz.4.773'. [ 448.399567][ T9368] tipc: Enabling of bearer rejected, failed to enable media [ 448.605989][ T9365] tipc: Enabled bearer , priority 0 [ 448.620099][ T9365] syzkaller0: entered promiscuous mode [ 448.626013][ T9365] syzkaller0: entered allmulticast mode [ 448.626726][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 448.660211][ T9364] tipc: Resetting bearer [ 448.706847][ T5766] Bluetooth: hci0: command 0x1407 tx timeout [ 448.769889][ T9364] tipc: Disabling bearer [ 449.337270][ T9378] loop5: detected capacity change from 0 to 32768 [ 449.397649][ T9378] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.783 (9378) [ 449.489636][ T9378] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 449.562750][ T9378] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 449.590780][ T9378] BTRFS info (device loop5): setting nodatacow, compression disabled [ 449.613413][ T9378] BTRFS info (device loop5): force clearing of disk cache [ 449.808716][ T9378] BTRFS info (device loop5): enabling ssd optimizations [ 449.827309][ T9378] BTRFS info (device loop5): using spread ssd allocation scheme [ 449.845335][ T9378] BTRFS info (device loop5): turning off barriers [ 449.859492][ T9378] BTRFS info (device loop5): disabling free space tree [ 450.187655][ T9378] BTRFS info (device loop5): not using ssd optimizations [ 450.648929][ T9378] BTRFS info (device loop5): not using spread ssd allocation scheme [ 450.925683][ T9378] BTRFS info (device loop5): rebuilding free space tree [ 451.205541][ T9382] loop1: detected capacity change from 0 to 32768 [ 451.279701][ T9378] BTRFS info (device loop5): disabling free space tree [ 451.297181][ T9378] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 451.392874][ T9378] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 451.412357][ T9382] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 451.538631][ T28] audit: type=1800 audit(1765278562.061:81): pid=9382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.784" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 451.837023][ T171] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 452.197389][ T171] usb 5-1: Using ep0 maxpacket: 32 [ 452.665054][ T171] usb 5-1: unable to get BOS descriptor or descriptor too short [ 453.014332][ T171] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 453.062201][ T171] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 453.086150][ T171] usb 5-1: config 7 has no interface number 0 [ 453.110185][ T171] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 453.141244][ T171] usb 5-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.354034][ T171] usb 5-1: config 7 interface 187 has no altsetting 0 [ 453.361122][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 453.367661][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 453.383308][ T171] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 453.394852][ T171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.408352][ T171] usb 5-1: Product: syz [ 453.412664][ T171] usb 5-1: Manufacturer: syz [ 454.211966][ T171] usb 5-1: SerialNumber: syz [ 454.413510][ T7654] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 454.492463][ T171] usb 5-1: Cannot retrieve CPort count: -71 [ 454.505537][ T171] usb 5-1: Cannot retrieve CPort count: -71 [ 454.516899][ T171] es2_ap_driver: probe of 5-1:7.187 failed with error -71 [ 454.546234][ T171] usb 5-1: USB disconnect, device number 7 [ 455.067665][ T9438] block nbd0: server does not support multiple connections per device. [ 455.115109][ T9440] loop4: detected capacity change from 0 to 4096 [ 455.164932][ T9438] block nbd0: shutting down sockets [ 455.177077][ T9440] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 455.210388][ T9440] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 455.255868][ T9440] ntfs: volume version 3.1. [ 455.310804][ T9440] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 455.341157][ T9440] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 455.355603][ T9440] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 455.501613][ T9440] tipc: Started in network mode [ 455.506543][ T9440] tipc: Node identity 4211d77f128c, cluster identity 4711 [ 455.539302][ T9440] tipc: Enabled bearer , priority 0 [ 455.592689][ T9447] syzkaller0: entered promiscuous mode [ 455.633702][ T9447] syzkaller0: entered allmulticast mode [ 455.717960][ T9440] ntfs: (device loop4): parse_options(): Unrecognized mount option ˙˙00000000000000000000˙˙˙˙˙˙18446744073709551615˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰. [ 455.816971][ T9445] loop5: detected capacity change from 0 to 4096 [ 455.834418][ T9445] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 455.887392][ T5763] ocfs2: Unmounting device (7,1) on (node local) [ 456.034826][ T9445] ntfs: volume version 3.1. [ 456.081341][ T9439] tipc: Resetting bearer [ 456.828532][ T9439] tipc: Disabling bearer [ 456.951685][ T5814] tipc: Node number set to 1352521599 [ 457.529600][ T9470] FAULT_INJECTION: forcing a failure. [ 457.529600][ T9470] name failslab, interval 1, probability 0, space 0, times 0 [ 457.596941][ T9470] CPU: 0 PID: 9470 Comm: syz.1.801 Not tainted syzkaller #0 [ 457.604311][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 457.614413][ T9470] Call Trace: [ 457.617719][ T9470] [ 457.620657][ T9470] dump_stack_lvl+0x16c/0x230 [ 457.625360][ T9470] ? show_regs_print_info+0x20/0x20 [ 457.630580][ T9470] ? load_image+0x3b0/0x3b0 [ 457.635099][ T9470] ? __might_sleep+0xe0/0xe0 [ 457.639721][ T9470] ? __lock_acquire+0x7c80/0x7c80 [ 457.644842][ T9470] should_fail_ex+0x39d/0x4d0 [ 457.649538][ T9470] should_failslab+0x9/0x20 [ 457.654053][ T9470] slab_pre_alloc_hook+0x59/0x310 [ 457.659107][ T9470] ? tomoyo_encode+0x28b/0x540 [ 457.663922][ T9470] ? tomoyo_encode+0x28b/0x540 [ 457.668713][ T9470] __kmem_cache_alloc_node+0x53/0x260 [ 457.674111][ T9470] ? tomoyo_encode+0x28b/0x540 [ 457.678925][ T9470] __kmalloc+0xa4/0x240 [ 457.683105][ T9470] tomoyo_encode+0x28b/0x540 [ 457.687739][ T9470] tomoyo_realpath_from_path+0x592/0x5d0 [ 457.693437][ T9470] tomoyo_path_number_perm+0x1ea/0x590 [ 457.698933][ T9470] ? tomoyo_path_number_perm+0x1ba/0x590 [ 457.704597][ T9470] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 457.710088][ T9470] ? ksys_write+0x1c1/0x250 [ 457.714650][ T9470] ? __fget_files+0x28/0x4d0 [ 457.719274][ T9470] security_file_ioctl+0x70/0xa0 [ 457.724240][ T9470] __se_sys_ioctl+0x48/0x170 [ 457.728852][ T9470] do_syscall_64+0x55/0xb0 [ 457.733278][ T9470] ? clear_bhb_loop+0x40/0x90 [ 457.737979][ T9470] ? clear_bhb_loop+0x40/0x90 [ 457.742761][ T9470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.748690][ T9470] RIP: 0033:0x7f18b678f749 [ 457.753137][ T9470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.772773][ T9470] RSP: 002b:00007f18b76dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.781210][ T9470] RAX: ffffffffffffffda RBX: 00007f18b69e6090 RCX: 00007f18b678f749 [ 457.789197][ T9470] RDX: 0000200000000780 RSI: 00000000c0303e03 RDI: 0000000000000008 [ 457.797268][ T9470] RBP: 00007f18b76dc090 R08: 0000000000000000 R09: 0000000000000000 [ 457.805259][ T9470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.813253][ T9470] R13: 00007f18b69e6128 R14: 00007f18b69e6090 R15: 00007ffdae82e838 [ 457.821260][ T9470] [ 457.871772][ T9470] ERROR: Out of memory at tomoyo_realpath_from_path. [ 459.186790][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 459.194530][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 459.984319][ T9488] loop1: detected capacity change from 0 to 256 [ 460.411939][ T8687] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 461.067435][ T9490] loop1: detected capacity change from 0 to 4096 [ 461.133420][ T9490] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 461.277028][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 461.283090][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 461.507318][ T9490] ntfs: (device loop1): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 461.529016][ T9490] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 461.580222][ T9490] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 461.681343][ T9490] ntfs: (device loop1): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 0. [ 461.755002][ T9490] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 461.869487][ T9490] ntfs: volume version 3.1. [ 463.825220][ T5834] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 464.032319][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 464.051348][ T5834] usb 1-1: config 0 has an invalid interface number: 209 but max is 0 [ 464.075937][ T5834] usb 1-1: config 0 has no interface number 0 [ 464.095879][ T5834] usb 1-1: config 0 interface 209 has no altsetting 0 [ 464.116407][ T5834] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 464.129760][ T9521] loop1: detected capacity change from 0 to 4096 [ 464.136128][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.136154][ T5834] usb 1-1: Product: syz [ 464.136170][ T5834] usb 1-1: Manufacturer: syz [ 464.136187][ T5834] usb 1-1: SerialNumber: syz [ 464.156428][ T9521] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 464.236001][ T5834] usb 1-1: config 0 descriptor?? [ 464.305992][ T9519] loop5: detected capacity change from 0 to 32768 [ 464.329832][ T9521] ntfs: (device loop1): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 464.381760][ T9521] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 464.425938][ T9519] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 464.454357][ T9521] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 464.547312][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 464.553463][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 464.712835][ T9521] ntfs: volume version 3.1. [ 465.106860][ T9516] loop4: detected capacity change from 0 to 32768 [ 465.143829][ T9516] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 465.153358][ T9516] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 465.197499][ T9516] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 465.525714][ T9534] comedi comedi0: Minor 3 could not be opened [ 465.532752][ T9516] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 466.169701][ T5834] usb 1-1: USB disconnect, device number 26 [ 466.530660][ T9540] loop1: detected capacity change from 0 to 4096 [ 466.538301][ T9540] __ntfs_error: 3 callbacks suppressed [ 466.538317][ T9540] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 466.627290][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 466.633509][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 466.675132][ T9540] ntfs: volume version 3.1. [ 466.723197][ T7654] ocfs2: Unmounting device (7,5) on (node local) [ 467.296491][ T9552] netlink: 75 bytes leftover after parsing attributes in process `syz.4.825'. [ 467.591173][ T9555] loop1: detected capacity change from 0 to 1024 [ 467.632278][ T9555] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 467.706887][ T171] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 467.757225][ T9555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.843115][ T9565] loop4: detected capacity change from 0 to 1024 [ 467.862968][ T9565] EXT4-fs: Ignoring removed orlov option [ 467.905559][ T171] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 467.932392][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.035523][ T171] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.053467][ T9565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.069182][ T171] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 468.106020][ T171] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.301517][ T171] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 468.485030][ T171] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 468.707138][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 468.713667][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 468.718281][ T171] usb 1-1: Product: syz [ 468.774273][ T171] usb 1-1: Manufacturer: syz [ 469.734306][ T171] cdc_wdm 1-1:1.0: skipping garbage [ 469.826756][ T171] cdc_wdm 1-1:1.0: skipping garbage [ 469.834907][ T171] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 470.380788][ T9585] loop1: detected capacity change from 0 to 32768 [ 470.465118][ T7323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.489768][ T9585] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 470.597446][ T5851] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 470.787542][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 470.797175][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 470.806834][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 470.853276][ T5851] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.867314][ T5851] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.880380][ T5851] usb 6-1: config 0 interface 0 has no altsetting 0 [ 470.887420][ T5851] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 470.896507][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.907743][ T5851] usb 6-1: config 0 descriptor?? [ 471.077855][ T5851] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 471.831315][ T5851] usb 6-1: USB disconnect, device number 6 [ 471.981414][ T171] usb 1-1: USB disconnect, device number 27 [ 472.007601][ T5763] ocfs2: Unmounting device (7,1) on (node local) [ 473.528782][ T9614] comedi comedi0: Minor 3 could not be opened [ 474.450788][ T9617] tipc: Enabled bearer , priority 0 [ 474.537613][ T9620] syzkaller0: entered promiscuous mode [ 474.543250][ T9620] syzkaller0: entered allmulticast mode [ 475.056943][ T9616] tipc: Resetting bearer [ 475.179664][ T9616] tipc: Disabling bearer [ 475.347087][ T9630] loop4: detected capacity change from 0 to 256 [ 475.426851][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 475.426873][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 475.447428][ T8687] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 476.725363][ T9636] loop1: detected capacity change from 0 to 4096 [ 476.752264][ T9636] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 477.309559][ T9636] ntfs: volume version 3.1. [ 477.651086][ T9646] netlink: 75 bytes leftover after parsing attributes in process `syz.4.853'. [ 478.146820][ T5766] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 478.169421][ T5766] Bluetooth: hci0: command 0x1407 tx timeout [ 478.440330][ T9652] dvmrp0: entered allmulticast mode [ 478.633450][ T9664] netlink: 32 bytes leftover after parsing attributes in process `syz.0.867'. [ 478.643687][ T9665] loop4: detected capacity change from 0 to 1024 [ 478.657675][ T9665] EXT4-fs: Ignoring removed orlov option [ 478.682271][ T9664] pim6reg: entered allmulticast mode [ 478.721652][ T9660] loop5: detected capacity change from 0 to 4096 [ 478.732862][ T9665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.754154][ T9660] ntfs: (device loop5): ntfs_read_locked_inode(): Found non-standard compression unit (0 instead of 4). Cannot handle this. [ 478.774457][ T9660] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x0 as bad. Run chkdsk. [ 478.788326][ T9660] ntfs: (device loop5): ntfs_read_inode_mount(): ntfs_read_inode() of $MFT failed. BUG or corrupt $MFT. Run chkdsk and if no errors are found, please report you saw this message to linux-ntfs-dev@lists.sourceforge.net [ 478.811528][ T9660] ntfs: (device loop5): ntfs_fill_super(): Failed to load essential metadata. [ 479.979575][ T9687] loop1: detected capacity change from 0 to 256 [ 481.733463][ T51] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 481.739740][ T5766] Bluetooth: hci0: command 0x1407 tx timeout [ 481.807307][ T7323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.168539][ T9698] loop1: detected capacity change from 0 to 512 [ 482.248112][ T9698] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 482.258184][ T9698] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 482.296905][ T9698] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 482.311399][ T9698] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8002e01c, mo2=0006] [ 482.328534][ T9698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.437168][ T9706] netlink: 75 bytes leftover after parsing attributes in process `syz.5.866'. [ 482.986794][ T9696] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.1.865: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 483.071392][ T9696] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 483.090249][ T9696] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.865: Deleting old file: nlink 4, error=-117 [ 483.124135][ T9696] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.865: bg 0: block 353: padding at end of block bitmap is not set [ 483.176119][ T9696] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 483.209130][ T9710] loop5: detected capacity change from 0 to 512 [ 483.218845][ T9710] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 483.239299][ T9710] EXT4-fs (loop5): orphan cleanup on readonly fs [ 483.261500][ T9710] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 483.278220][ T9710] Quota error (device loop5): write_blk: dquota write failed [ 483.285690][ T9710] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 483.295734][ T9710] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.869: Failed to acquire dquot type 0 [ 483.307601][ T787] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 483.325961][ T9710] EXT4-fs (loop5): 1 truncate cleaned up [ 483.359143][ T9710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 483.488157][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.580295][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.600110][ T787] usb 1-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 483.633582][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.654125][ T9713] netlink: 'syz.5.869': attribute type 3 has an invalid length. [ 483.659742][ T787] usb 1-1: config 0 descriptor?? [ 484.360172][ T9708] input: syz1 as /devices/virtual/input/input19 [ 484.424435][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 484.475206][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'. [ 484.535713][ T7654] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.554647][ T9705] loop4: detected capacity change from 0 to 32768 [ 484.586031][ T9705] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.864 (9705) [ 484.660219][ T9705] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 484.696827][ T9705] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 484.736798][ T9705] BTRFS error (device loop4): unrecognized mount option 'uid=00000000000000000000' [ 484.769102][ T9705] BTRFS error (device loop4): open_ctree failed: -22 [ 484.832810][ T8687] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by udevd (8687) [ 485.037755][ T5937] ------------[ cut here ]------------ [ 485.044112][ T5937] WARNING: CPU: 0 PID: 5937 at io_uring/io_uring.c:3214 io_ring_exit_work+0x39e/0x7e0 [ 485.054992][ T5937] Modules linked in: [ 485.059202][ T5937] CPU: 0 PID: 5937 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 485.067230][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 485.077681][ T5937] Workqueue: iou_exit io_ring_exit_work [ 485.083300][ T5937] RIP: 0010:io_ring_exit_work+0x39e/0x7e0 [ 485.089620][ T5937] Code: e8 17 79 26 f7 48 89 df 48 c7 c6 c0 0a 5f 8a 4c 8b 24 24 4c 89 e2 b9 01 00 00 00 e8 9c 28 bc f9 e9 64 ff ff ff e8 f2 78 26 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb a6 89 d9 80 e1 07 80 c1 03 [ 485.109966][ T5937] RSP: 0018:ffffc90004e77a40 EFLAGS: 00010293 [ 485.116106][ T5937] RAX: ffffffff8a5f17ce RBX: 0000000100004779 RCX: ffff88802d110000 [ 485.124588][ T5937] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 485.133097][ T5937] RBP: ffffc90004e77bb0 R08: ffffc90004e779c7 R09: 1ffff920009cef38 [ 485.141509][ T5937] R10: dffffc0000000000 R11: fffff520009cef39 R12: 0000000100004774 [ 485.150715][ T5937] R13: ffff88807dbd8288 R14: ffff88807dbd8510 R15: dffffc0000000000 [ 485.159246][ T5937] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 485.168346][ T5937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.174979][ T5937] CR2: 000055ab40e3c5f8 CR3: 000000004fb82000 CR4: 00000000003526f0 [ 485.183092][ T5937] Call Trace: [ 485.186506][ T5937] [ 485.189699][ T5937] ? io_ring_ctx_wait_and_kill+0x2a0/0x2a0 [ 485.195584][ T5937] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.200903][ T5937] ? process_scheduled_works+0x957/0x15b0 [ 485.206758][ T5937] ? process_scheduled_works+0x957/0x15b0 [ 485.212529][ T5937] process_scheduled_works+0xa45/0x15b0 [ 485.218222][ T5937] ? assign_work+0x400/0x400 [ 485.222878][ T5937] ? assign_work+0x39e/0x400 [ 485.227600][ T5937] worker_thread+0xa55/0xfc0 [ 485.232270][ T5937] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 485.238289][ T5937] ? _raw_spin_unlock+0x40/0x40 [ 485.243191][ T5937] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 485.250054][ T5937] kthread+0x2fa/0x390 [ 485.254190][ T5937] ? pr_cont_work+0x560/0x560 [ 485.259169][ T5937] ? kthread_blkcg+0xd0/0xd0 [ 485.263816][ T5937] ret_from_fork+0x48/0x80 [ 485.268656][ T5937] ? kthread_blkcg+0xd0/0xd0 [ 485.273301][ T5937] ret_from_fork_asm+0x11/0x20 [ 485.278215][ T5937] [ 485.281270][ T5937] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 485.288577][ T5937] CPU: 0 PID: 5937 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 485.296153][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 485.306257][ T5937] Workqueue: iou_exit io_ring_exit_work [ 485.311841][ T5937] Call Trace: [ 485.315140][ T5937] [ 485.318094][ T5937] dump_stack_lvl+0x16c/0x230 [ 485.322801][ T5937] ? show_regs_print_info+0x20/0x20 [ 485.328020][ T5937] ? load_image+0x3b0/0x3b0 [ 485.332642][ T5937] panic+0x2c0/0x710 [ 485.336559][ T5937] ? bpf_jit_dump+0xd0/0xd0 [ 485.341091][ T5937] ? ret_from_fork_asm+0x11/0x20 [ 485.346061][ T5937] __warn+0x2e0/0x470 [ 485.350056][ T5937] ? io_ring_exit_work+0x39e/0x7e0 [ 485.355233][ T5937] ? io_ring_exit_work+0x39e/0x7e0 [ 485.360363][ T5937] report_bug+0x2be/0x4f0 [ 485.364703][ T5937] ? io_ring_exit_work+0x39e/0x7e0 [ 485.369905][ T5937] ? io_ring_exit_work+0x39e/0x7e0 [ 485.375040][ T5937] ? io_ring_exit_work+0x3a0/0x7e0 [ 485.380257][ T5937] handle_bug+0xcf/0x120 [ 485.384598][ T5937] exc_invalid_op+0x1a/0x50 [ 485.389126][ T5937] asm_exc_invalid_op+0x1a/0x20 [ 485.393993][ T5937] RIP: 0010:io_ring_exit_work+0x39e/0x7e0 [ 485.399740][ T5937] Code: e8 17 79 26 f7 48 89 df 48 c7 c6 c0 0a 5f 8a 4c 8b 24 24 4c 89 e2 b9 01 00 00 00 e8 9c 28 bc f9 e9 64 ff ff ff e8 f2 78 26 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb a6 89 d9 80 e1 07 80 c1 03 [ 485.419363][ T5937] RSP: 0018:ffffc90004e77a40 EFLAGS: 00010293 [ 485.425443][ T5937] RAX: ffffffff8a5f17ce RBX: 0000000100004779 RCX: ffff88802d110000 [ 485.433452][ T5937] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 485.441442][ T5937] RBP: ffffc90004e77bb0 R08: ffffc90004e779c7 R09: 1ffff920009cef38 [ 485.449604][ T5937] R10: dffffc0000000000 R11: fffff520009cef39 R12: 0000000100004774 [ 485.457586][ T5937] R13: ffff88807dbd8288 R14: ffff88807dbd8510 R15: dffffc0000000000 [ 485.465588][ T5937] ? io_ring_exit_work+0x39e/0x7e0 [ 485.470732][ T5937] ? io_ring_ctx_wait_and_kill+0x2a0/0x2a0 [ 485.476568][ T5937] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.481786][ T5937] ? process_scheduled_works+0x957/0x15b0 [ 485.487523][ T5937] ? process_scheduled_works+0x957/0x15b0 [ 485.493259][ T5937] process_scheduled_works+0xa45/0x15b0 [ 485.498855][ T5937] ? assign_work+0x400/0x400 [ 485.503468][ T5937] ? assign_work+0x39e/0x400 [ 485.508081][ T5937] worker_thread+0xa55/0xfc0 [ 485.512691][ T5937] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 485.518601][ T5937] ? _raw_spin_unlock+0x40/0x40 [ 485.523466][ T5937] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 485.529390][ T5937] kthread+0x2fa/0x390 [ 485.533466][ T5937] ? pr_cont_work+0x560/0x560 [ 485.538186][ T5937] ? kthread_blkcg+0xd0/0xd0 [ 485.542791][ T5937] ret_from_fork+0x48/0x80 [ 485.547230][ T5937] ? kthread_blkcg+0xd0/0xd0 [ 485.551839][ T5937] ret_from_fork_asm+0x11/0x20 [ 485.556640][ T5937] [ 485.560135][ T5937] Kernel Offset: disabled [ 485.564603][ T5937] Rebooting in 86400 seconds..