last executing test programs: 25m51.743851731s ago: executing program 32 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000009c0)=@abs, 0x6e) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xe, 0x4, 0x8, 0x3, 0x0, 0x70bd25, 0x2ddfdbff, [@sadb_key={0x1, 0x17}]}, 0x18}}, 0x10) sendmmsg$unix(r2, &(0x7f0000001180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000011c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001200)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-I', 0x29, 0x0, &(0x7f0000000340)={0x2, 0x13c4, @loopback}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r5, 0x1) 24m3.004525901s ago: executing program 33 (id=733): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010103}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_lsm={0xe, 0x4, &(0x7f0000002340)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000002380)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000001000010027bd700402d4df2500000000", @ANYRES32=r6, @ANYBLOB="984e1600c16a010054001280110001006272696467655f736c617665000000003c00058006001b002001000005001b000100000005000a00010000"], 0x74}, 0x1, 0x0, 0x0, 0x400c080}, 0x20008882) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000240)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 23m47.005889825s ago: executing program 34 (id=758): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904", @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)={0x0, 0xc, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)={0x20, 0xa, 0xc, "eb34b8e1ecfce69b6d59d356"}, 0x0, 0x0, 0x0, 0x0}) 20m35.144952385s ago: executing program 35 (id=1015): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000950000000000000000dbefe005"], &(0x7f0000000040)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r4, 0x100, 0x1) getdents64(r4, 0x0, 0x4f) 19m23.55189023s ago: executing program 36 (id=1128): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000950000000000000000dbefe005"], &(0x7f0000000040)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r5, 0x100, 0x1) getdents64(r5, 0x0, 0x4f) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) 18m11.024417366s ago: executing program 2 (id=1256): sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x840) socketpair$unix(0x1, 0x5, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2000010, &(0x7f0000000340)=ANY=[]) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000600)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000640)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x0, 0x1, 0x0, &(0x7f00000006c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000700)={0x1, 0x1, 0x0, &(0x7f0000000840)=""/87, &(0x7f00000008c0)=""/90, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x2, 0x0, [{0x0, 0x24, &(0x7f00000009c0)=""/36}, {0x0, 0xffb, &(0x7f0000000a00)=""/4091}]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40b4) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001b00)=0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2b0000, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001c00)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x4000190, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 18m9.22684663s ago: executing program 2 (id=1259): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r6, 0x100, 0x1) getdents64(r6, 0x0, 0x4f) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) 18m7.85623759s ago: executing program 2 (id=1262): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x181800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000340)=@abs, 0x6e) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x80044d76, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000010000/0x5000)=nil, &(0x7f00003d3000/0x4000)=nil, 0x5000, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x8084) sendmsg$nl_generic(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4040040) 18m2.670832872s ago: executing program 2 (id=1268): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000840)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)="64973ffae24a72a1a4b99157590182c95c7cfcce833b16f7057c38c00b2010b16a11fba4d4810e54f96bc0ecd2dcd4a2bd1d8cce40d21067277bacce8d80e7576b1afc246d8c631f093d67911514de546ace35ac76c5c833a6b630c92d00fdd487ff4f23ee", 0x65}, {&(0x7f00000006c0)="fe2ff97f1b06dd569a05502020378f3a814f6616341156eef71523bd011b606714cbba7a0aa06f89c5a01e8530dbc114bb08c2b28831f155abeba7fcbae372122aeb3ed3c1799a8ec83ae6836a1b5ef139267e2b24f559bd46dc99d44aa1d0d749069e22812db3328a1f33e56b52fd4b614098bf163be6d7e709417e839b784a6aac9210c06c69f06fdba22c6d88fdbf364d20786a3f455b3d4d6007bbdf936ce45df15b7ac3a51ec755d30d09226fd4999a3695bb8638", 0xb7}], 0x2, &(0x7f0000000800)}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, &(0x7f0000002140)=ANY=[]) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 18m0.120069068s ago: executing program 2 (id=1274): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000019700)={&(0x7f0000019740)={0x10, 0x0, 0x0, 0x6402000}, 0xc, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB="ec030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x40900}, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000019d40)='./my_configfs\x00', &(0x7f0000019d80)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019dc0)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019e00)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019e40)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019e80)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000019ec0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00', 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000019f00)={0x3, 0x6, &(0x7f0000019fc0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f000001a000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f000001a040)={r5, r5, 0xf, 0x0, @void}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001a080)={r6, 0x0, 0x58, 0x0, &(0x7f000001a100)="c1bcb080cd21d308098ee68888a8", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) symlinkat(&(0x7f000001a140)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f000001a180)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') writev(r5, &(0x7f000001a1c0), 0x0) 17m58.590193175s ago: executing program 2 (id=1276): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x4, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x181800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000340)=@abs, 0x6e) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x80044d76, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000010000/0x5000)=nil, &(0x7f00003d3000/0x4000)=nil, 0x5000, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4040040) 17m42.269713821s ago: executing program 37 (id=1276): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x4, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x181800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000340)=@abs, 0x6e) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x80044d76, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000010000/0x5000)=nil, &(0x7f00003d3000/0x4000)=nil, 0x5000, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4040040) 16m23.683986607s ago: executing program 8 (id=1411): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000950000000000000000dbefe005"], &(0x7f0000000040)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = inotify_init() inotify_add_watch(r5, 0x0, 0x400017e) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r6, 0x100, 0x1) getdents64(r6, 0x0, 0x4f) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) 16m21.7656199s ago: executing program 8 (id=1413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000400)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019400)=0x7) socket$rxrpc(0x21, 0x2, 0xa) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000019540)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) chroot(&(0x7f0000019580)='./proc\x00') openat$nullb(0xffffffffffffff9c, &(0x7f00000195c0), 0x4000000004002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x3) 16m16.991438373s ago: executing program 8 (id=1419): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x4, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x181800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000340)=@abs, 0x6e) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2002, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x8084) sendmsg$nl_generic(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4040040) 16m10.930039169s ago: executing program 8 (id=1427): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9365fe5a", 0x33fe0}], 0x1}}], 0x80000af, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x2, 0x3, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000006c0), 0x0, 0x0, 0x0) shutdown(r4, 0x1) landlock_restrict_self(r2, 0x9) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000340)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0xc, &(0x7f0000000000)={0x40, 0x8, 0x8c, {0x8c, 0x21, "2836c935be529b4933cb2599f9607541c19c4a4b70803dcf96cf9d68301adf2698eb7b65e29ff00797404cb6c86c1a9e254a868f1aafb2cda00c84ef63700c633301ef33b763ea53779c2dad9a1e3c60962c5bfe888a58ceb94eb05126e33c248212a3a86d78576b4190b8b647ae5ca52cc12a84349818fd976a17748fa2de4f1f42c8ae333690930967"}}, 0x0}, &(0x7f0000000d40)={0x24, &(0x7f0000000ac0)={0x0, 0x8, 0xa1, "6abd35d2e6a70ed5535950c2fb5a12c0944a9430e9aefac2cf85b0aa2464ee436f02fab24cf24cc697aae3e2dd9a6e0126ec3cea6ae616e205893fa11f649a10f41b23af6f58afa42fd2813000c987bae05d8fab7bc7cebddc8b35bf2182b4a2be9b12d1a83ac17e9a5ac2b936810bb978c91057958f4945f0cfac029f86a8ea9be117df324a8f6937bf6253d9a40c851415855cd20e611cdde9fbd4eb4ed844dd"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000000c00)={0x20, 0x81, 0x1, "c9"}, &(0x7f0000000c40)={0x20, 0x82, 0x3, "9f3938"}, &(0x7f0000000c80)={0x20, 0x83, 0x3, "c49bf9"}, &(0x7f0000000cc0)={0x20, 0x84, 0x4, "8c47d0cd"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "02f0c9"}}) 16m4.625716277s ago: executing program 8 (id=1436): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000019700)={&(0x7f0000019740)={0x10, 0x0, 0x0, 0x6402000}, 0xc, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB="ec030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x40900}, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000019d40)='./my_configfs\x00', &(0x7f0000019d80)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019dc0)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019e00)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019e40)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019e80)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000019ec0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00', 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f000001a040)={r4, r4, 0xf, 0x0, @void}, 0x10) symlinkat(&(0x7f000001a140)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f000001a180)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') writev(r4, &(0x7f000001a1c0), 0x0) 15m59.507549054s ago: executing program 8 (id=1439): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000100)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000200)={0x0, 0xc1, 0x10, 0xffffffbd, 0x7f}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2043, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 15m42.36428079s ago: executing program 38 (id=1439): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000100)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000200)={0x0, 0xc1, 0x10, 0xffffffbd, 0x7f}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2043, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 15m36.273603967s ago: executing program 4 (id=1473): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x88800, 0x1) renameat2(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 15m35.028452156s ago: executing program 4 (id=1474): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000100)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000200)={0x0, 0xc1, 0x10, 0xffffffbd, 0x7f}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2043, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 15m32.85756907s ago: executing program 4 (id=1479): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ec0), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000f00)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x19}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001280)={'syzkaller0\x00', 0x1}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000012c0)='syzkaller0\x00', 0xb) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 15m26.800815308s ago: executing program 4 (id=1486): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 15m16.471439395s ago: executing program 4 (id=1495): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000019700)={&(0x7f0000019740)={0x10, 0x0, 0x0, 0x6402000}, 0xc, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB="ec030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x40900}, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000019d40)='./my_configfs\x00', &(0x7f0000019d80)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019dc0)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019e00)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019e40)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019e80)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000019f00)={0x3, 0x6, &(0x7f0000019fc0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f000001a000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f000001a040)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) symlinkat(&(0x7f000001a140)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f000001a180)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') writev(0xffffffffffffffff, &(0x7f000001a1c0), 0x0) 15m14.022225229s ago: executing program 4 (id=1496): openat$dir(0xffffffffffffff9c, 0x0, 0x88800, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 14m57.289631325s ago: executing program 39 (id=1496): openat$dir(0xffffffffffffff9c, 0x0, 0x88800, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 13m27.584631903s ago: executing program 9 (id=1614): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000019400)=0x7) socket$rxrpc(0x21, 0x2, 0xa) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000019540)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) chroot(&(0x7f0000019580)='./proc\x00') openat$nullb(0xffffffffffffff9c, &(0x7f00000195c0), 0x4000000004002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x3) 13m24.53689802s ago: executing program 9 (id=1617): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000100)=0x0) r1 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r1, r0, &(0x7f0000000200)={0x0, 0xc1, 0x10, 0xffffffbd, 0x7f}, 0x0, 0x1, 0x0, 0x0) 13m21.440044133s ago: executing program 9 (id=1620): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x50, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) semop(0x0, 0x0, 0x0) 13m19.359940623s ago: executing program 9 (id=1622): sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x840) socketpair$unix(0x1, 0x5, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2000010, &(0x7f0000000340)=ANY=[@ANYBLOB="6d3030303030303030303030303030303030352c004cc6c0e6243cf035c6477ace75cc8ddee23d990eb3731951c4f8586138bd816145c8a61327c93536bef5b9d2f270ec0015c04748ccceb36918"]) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000640)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x0, 0x1, 0x0, &(0x7f00000006c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000700)={0x1, 0x1, 0x0, &(0x7f0000000840)=""/87, &(0x7f00000008c0)=""/90, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x2, 0x0, [{0x0, 0x24, &(0x7f00000009c0)=""/36}, {0x0, 0xffb, &(0x7f0000000a00)=""/4091}]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40b4) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001b00)=0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2b0000, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001c00)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x4000190, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 13m18.123481401s ago: executing program 9 (id=1624): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000019700)={&(0x7f0000019740)={0x10, 0x0, 0x0, 0x6402000}, 0xc, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB="ec030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3ec}, 0x1, 0x0, 0x0, 0x40900}, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000019d40)='./my_configfs\x00', &(0x7f0000019d80)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019e00)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019e40)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000019ec0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019f00)={0x3, 0x6, &(0x7f0000019fc0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f000001a000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f000001a040)={r4, r4, 0xf, 0x0, @void}, 0x10) symlinkat(&(0x7f000001a140)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f000001a180)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') writev(r4, &(0x7f000001a1c0), 0x0) 13m14.702849448s ago: executing program 9 (id=1626): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000700), 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x2, 0x3, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000006c0), 0x0, 0x0, 0x0) shutdown(r4, 0x1) landlock_restrict_self(r2, 0x9) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000340)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0xc, &(0x7f0000000000)={0x40, 0x8, 0x8c, {0x8c, 0x21, "2836c935be529b4933cb2599f9607541c19c4a4b70803dcf96cf9d68301adf2698eb7b65e29ff00797404cb6c86c1a9e254a868f1aafb2cda00c84ef63700c633301ef33b763ea53779c2dad9a1e3c60962c5bfe888a58ceb94eb05126e33c248212a3a86d78576b4190b8b647ae5ca52cc12a84349818fd976a17748fa2de4f1f42c8ae333690930967"}}, 0x0}, &(0x7f0000000d40)={0x24, &(0x7f0000000ac0)={0x0, 0x8, 0xa1, "6abd35d2e6a70ed5535950c2fb5a12c0944a9430e9aefac2cf85b0aa2464ee436f02fab24cf24cc697aae3e2dd9a6e0126ec3cea6ae616e205893fa11f649a10f41b23af6f58afa42fd2813000c987bae05d8fab7bc7cebddc8b35bf2182b4a2be9b12d1a83ac17e9a5ac2b936810bb978c91057958f4945f0cfac029f86a8ea9be117df324a8f6937bf6253d9a40c851415855cd20e611cdde9fbd4eb4ed844dd"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000000c00)={0x20, 0x81, 0x1, "c9"}, &(0x7f0000000c40)={0x20, 0x82, 0x3, "9f3938"}, &(0x7f0000000c80)={0x20, 0x83, 0x3, "c49bf9"}, &(0x7f0000000cc0)={0x20, 0x84, 0x4, "8c47d0cd"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "02f0c9"}}) 12m59.145829004s ago: executing program 40 (id=1626): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000700), 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x2, 0x3, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000006c0), 0x0, 0x0, 0x0) shutdown(r4, 0x1) landlock_restrict_self(r2, 0x9) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000340)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0xc, &(0x7f0000000000)={0x40, 0x8, 0x8c, {0x8c, 0x21, "2836c935be529b4933cb2599f9607541c19c4a4b70803dcf96cf9d68301adf2698eb7b65e29ff00797404cb6c86c1a9e254a868f1aafb2cda00c84ef63700c633301ef33b763ea53779c2dad9a1e3c60962c5bfe888a58ceb94eb05126e33c248212a3a86d78576b4190b8b647ae5ca52cc12a84349818fd976a17748fa2de4f1f42c8ae333690930967"}}, 0x0}, &(0x7f0000000d40)={0x24, &(0x7f0000000ac0)={0x0, 0x8, 0xa1, "6abd35d2e6a70ed5535950c2fb5a12c0944a9430e9aefac2cf85b0aa2464ee436f02fab24cf24cc697aae3e2dd9a6e0126ec3cea6ae616e205893fa11f649a10f41b23af6f58afa42fd2813000c987bae05d8fab7bc7cebddc8b35bf2182b4a2be9b12d1a83ac17e9a5ac2b936810bb978c91057958f4945f0cfac029f86a8ea9be117df324a8f6937bf6253d9a40c851415855cd20e611cdde9fbd4eb4ed844dd"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000000c00)={0x20, 0x81, 0x1, "c9"}, &(0x7f0000000c40)={0x20, 0x82, 0x3, "9f3938"}, &(0x7f0000000c80)={0x20, 0x83, 0x3, "c49bf9"}, &(0x7f0000000cc0)={0x20, 0x84, 0x4, "8c47d0cd"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "02f0c9"}}) 3m39.079722489s ago: executing program 6 (id=2168): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010103}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_lsm={0xe, 0x4, &(0x7f0000002340)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000002380)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000001000010027bd700402d4df2500000000", @ANYRES32=r7, @ANYBLOB="984e1600c16a010054001280110001006272696467655f736c617665000000003c00058006001b002001000005001b000100000005000a00010000"], 0x74}, 0x1, 0x0, 0x0, 0x400c080}, 0x20008882) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000240)=0x3) 3m36.284247194s ago: executing program 6 (id=2173): mkdirat(0xffffffffffffff9c, &(0x7f0000002800)='./dir0\x00', 0x1ff) mount(&(0x7f0000002840)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000002880)='./dir0\x00', &(0x7f00000028c0)='ceph\x00', 0x0, 0x0) 3m34.610478143s ago: executing program 6 (id=2177): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='1', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000000002ff000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150007000000180016801400010001"], 0x44}}, 0x0) syz_emit_ethernet(0x112, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00dc2b00fc020000000000000000000000000001fc0200"], 0x0) 3m34.439075974s ago: executing program 6 (id=2178): socket$nl_route(0x10, 0x3, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setns(0xc9, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m33.271704638s ago: executing program 6 (id=2180): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noflush_merge}, {}, {@acl}, {@alloc_mode_reuse}, {@errors_continue}, {@disable_roll_forward}, {@background_gc_on}, {@noinline_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@errors_remount}, {@noinline_dentry}]}, 0x1, 0x550e, &(0x7f00000079c0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f78790000000004000280140000001100"], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x13, 0x6, 0x2, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x0, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3m27.712522131s ago: executing program 6 (id=2185): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000680)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3m11.737554876s ago: executing program 41 (id=2185): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000680)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3m7.22804577s ago: executing program 7 (id=2226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYRES8], 0x1, 0x443c, &(0x7f00000088c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000100)='n', 0x1) sendfile(0xffffffffffffffff, r1, 0x0, 0x1000000201005) 3m1.043690648s ago: executing program 7 (id=2237): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000019d40)='./my_configfs\x00', &(0x7f0000019d80)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019dc0)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019e00)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019e40)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000019ec0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019f00)={0x3, 0x6, &(0x7f0000019fc0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f000001a040)={r4, r4, 0xf, 0x0, @void}, 0x10) symlinkat(&(0x7f000001a140)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f000001a180)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') 2m57.638754098s ago: executing program 7 (id=2239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x400, r0, 0x0, 0x0, 0x6, 0x0, 0x2, r1}]) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000180)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000240)=[&(0x7f0000000280)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000000300)=[{}, {}], 0x0) shutdown(r0, 0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 2m46.861178511s ago: executing program 7 (id=2256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x400, r0, 0x0, 0x0, 0x6, 0x0, 0x2, r1}]) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000180)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000240)=[&(0x7f0000000280)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000000300)=[{}, {}], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 2m45.152155198s ago: executing program 7 (id=2261): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800714, &(0x7f00000000c0)={[{@grpquota}]}, 0xff, 0x485, &(0x7f0000000100)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x7) r0 = creat(&(0x7f0000000640)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000680)=@loop={'/dev/loop', 0x0}, &(0x7f00000006c0)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000700)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write$FUSE_INIT(r0, &(0x7f0000000840)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0xfffffffd, 0x2024800, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x8, 0x10001}}, 0x50) write$UHID_DESTROY(r0, &(0x7f0000000900), 0x4) 2m43.643544941s ago: executing program 7 (id=2264): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010103}, 0x10) connect$inet(r5, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_lsm={0xe, 0x4, &(0x7f0000002340)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000002380)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000001000010027bd700402d4df2500000000", @ANYRES32=r7, @ANYBLOB="984e1600c16a010054001280110001006272696467655f736c617665000000003c00058006001b002001000005001b000100000005000a00010000"], 0x74}, 0x1, 0x0, 0x0, 0x400c080}, 0x20008882) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000240)=0x3) 2m27.467164698s ago: executing program 42 (id=2264): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010103}, 0x10) connect$inet(r5, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_lsm={0xe, 0x4, &(0x7f0000002340)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000002380)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000001000010027bd700402d4df2500000000", @ANYRES32=r7, @ANYBLOB="984e1600c16a010054001280110001006272696467655f736c617665000000003c00058006001b002001000005001b000100000005000a00010000"], 0x74}, 0x1, 0x0, 0x0, 0x400c080}, 0x20008882) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000240)=0x3) 15.725525625s ago: executing program 1 (id=2502): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000100)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000200)={0x0, 0xc1, 0x10, 0xffffffbd, 0x7f}, 0x0, 0x1, 0x0, 0x0) 15.151901258s ago: executing program 5 (id=2503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 12.784528139s ago: executing program 5 (id=2506): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010103}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_lsm={0xe, 0x4, &(0x7f0000002340)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000002380)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000001000010027bd700402d4df2500000000", @ANYRES32=r6, @ANYBLOB="984e1600c16a010054001280110001006272696467655f736c617665000000003c00058006001b002001000005001b000100000005000a00010000"], 0x74}, 0x1, 0x0, 0x0, 0x400c080}, 0x20008882) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000240)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10.983036103s ago: executing program 5 (id=2509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002c00)={0x0, 0x0, 0x0}, 0x0) 10.48895531s ago: executing program 1 (id=2510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000bc0)='wlan0\x00', &(0x7f0000000c00), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000c40)='wlan1\x00', &(0x7f0000000c80), 0x6, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x11, 0x888e, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000d80)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000dc0)={0x2c, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac2(r6, 0x0, 0x0) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x11, 0x888e, r4, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)={0x20, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 10.315647922s ago: executing program 0 (id=2511): syz_mount_image$ext4(&(0x7f00000384c0)='ext4\x00', &(0x7f0000038540)='./file0\x00', 0x122c81, &(0x7f00000382c0)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@prjquota}, {@jqfmt_vfsv0}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}]}, 0x2, 0x24f, &(0x7f0000000000)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000038340)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000038380)='./debug\x00', &(0x7f00000383c0)='debugfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x802}, 0x10) r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000038680)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r1, &(0x7f00000386c0)='1', 0x1) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000005cc0)={0x1}) openat(0xffffffffffffff9c, &(0x7f000000f580)='./file1\x00', 0x101142, 0x0) 9.375103864s ago: executing program 5 (id=2513): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x4, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x181800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000340)=@abs, 0x6e) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x80044d76, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000010000/0x5000)=nil, &(0x7f00003d3000/0x4000)=nil, 0x5000, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 8.559792575s ago: executing program 0 (id=2515): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010103}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_lsm={0xe, 0x4, &(0x7f0000002340)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000002380)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000001000010027bd700402d4df2500000000", @ANYRES32=r7, @ANYBLOB="984e1600c16a010054001280110001006272696467655f736c617665000000003c00058006001b002001000005001b000100000005000a00010000"], 0x74}, 0x1, 0x0, 0x0, 0x400c080}, 0x20008882) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000240)=0x3) 8.0158752s ago: executing program 3 (id=2516): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c80)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) 7.487036715s ago: executing program 3 (id=2517): sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x840) socketpair$unix(0x1, 0x5, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2000010, &(0x7f0000000340)=ANY=[@ANYBLOB="6d3030303030303030303030303030303030352c004cc6c0e6243cf035c6477ace75cc8ddee23d990eb3731951c4f8586138bd816145c8a61327c93536bef5b9d2f270ec0015c04748ccceb36918f85d4fee359cfc25b98616"]) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000600)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000640)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x0, 0x1, 0x0, &(0x7f00000006c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000700)={0x1, 0x1, 0x0, &(0x7f0000000840)=""/87, &(0x7f00000008c0)=""/90, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x2, 0x0, [{0x0, 0x24, &(0x7f00000009c0)=""/36}, {0x0, 0xffb, &(0x7f0000000a00)=""/4091}]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40b4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2b0000, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001c00)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x0, 0x0}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x4000190, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 6.388360941s ago: executing program 0 (id=2518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 4.763014918s ago: executing program 0 (id=2519): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x18, 0x52, 0x201, 0x70bd29, 0x0, {0xa}, [@generic='T']}, 0x18}}, 0x8000) 4.59220773s ago: executing program 3 (id=2520): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xfffffe80}) 4.36637008s ago: executing program 0 (id=2521): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000100)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000200)={0x0, 0xc1, 0x10, 0xffffffbd, 0x7f}, 0x0, 0x1, 0x0, 0x0) 4.279702849s ago: executing program 5 (id=2522): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0", 0x17}], 0x1) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000080500"], 0x88) 4.036454615s ago: executing program 1 (id=2523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002c00)={0x0, 0x0, 0x0}, 0x0) 3.709904464s ago: executing program 3 (id=2524): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) lstat(0x0, &(0x7f00000002c0)) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd2c, 0x8010, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73, 0x2}, @handle=@nsim={{0xe}, {0xfffffdd9, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x200844, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f0000001140)={0x3, 0x4}) preadv(r5, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c00048068000180", @ANYBLOB="20810e56"], 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.523935381s ago: executing program 1 (id=2525): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x6, 0xffff}, 0x8) 2.707665507s ago: executing program 1 (id=2526): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x21) write(r1, &(0x7f0000000280)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='0', 0x1) syz_mount_image$squashfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'], 0x1, 0x226, &(0x7f0000000cc0)="$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") open(&(0x7f0000000f00)='./file0/file0\x00', 0x103000, 0x2) 2.254967617s ago: executing program 3 (id=2527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 2.060361203s ago: executing program 0 (id=2528): syz_mount_image$ext4(&(0x7f00000384c0)='ext4\x00', &(0x7f0000038540)='./file0\x00', 0x122c81, &(0x7f00000382c0)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@prjquota}, {@jqfmt_vfsv0}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}]}, 0x2, 0x24f, &(0x7f0000000000)="$eJzs3U9oFFccB/DfzO42zR9C2l4KhbZQSmkDIb0VekkvLQRKCKUU2kJEJBfFCDHBm/HkxYOeVXLyEsSb0aPkErwogqeoOcSLoMGDwYMeVnZnA/mzombXHeN8PjCZmey8+b1h9/tmL7MvgMIaiIiRiChFxGBEVCIi2XrAt9ky0Nid716eiKhW/3qa1I/L9jOb7XojYi4ifomIpTSJw+WI2cX/1p6v/PHDmZnK95cW/+3u6EU2rK+t/rlxcez01dGfZ2/ffTyWxEj0bbuu9kua/K+cRHz+Pop9IJJy3j3gbYyfuHKvlvsvIuK7ev4rkUb25p2d/mSpEj9deF3bc0/ufNXJvgLtV61WavfAuSpQOGlE9EWSDkVEtp2mQ0PZd/j7pZ70yNT08cHJqZmjh/IeqYB26YtY/f1617XeHfl/VMryD3y8avn/e3zhQW17o7SnU0z2t7tTQEfU8j944OSPsff8A/uU/ENxyT8Ul/xDgaTbd1vN/4t29QvoOPd/KC75h+KSfygu+Yfikn8orq35BwCKpdqV9xPIQF7yHn8AAAAAAAAAAAAAAAAAAIDd5ruXJzaXTtW8eT5i/beIKDerX2pMWfBp/W/Ps6R2WKaaRJI1a8n/37R4ghZdzvnp6/6H+da/9XV+tQca67lTETFcLu/+/CU7p8x4Z5+94fXKwRYLtOjXf/Kt/3Ih3/qjKxE3auPPcLPxJ40v6+sm40/2+2lRabH+MZOoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7BuvAgAA//8XVW68") mkdirat(0xffffffffffffff9c, &(0x7f0000038340)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000038380)='./debug\x00', &(0x7f00000383c0)='debugfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x18, 0x52, 0x201, 0x70bd29, 0x0, {0xa}, [@generic='T']}, 0x18}}, 0x8000) mkdir(&(0x7f0000000340)='./my_configfs\x00', 0x1ff) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000440)={0x7fff, 0x8}) mount(0x0, 0x0, &(0x7f0000000540)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="620f5ac61f3e077b5ec8ebf990983c8ccaa6415cf38011f5a1ba8f6768e3078e17beb41e449b94c76fc3d8cfa38aa53fab32d30342bfef", 0x37) write(0xffffffffffffffff, &(0x7f0000038480)='Y\x00', 0x1) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000038500)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000038580)='10000\x00', 0x5) close(r2) write(0xffffffffffffffff, &(0x7f00000385c0), 0x0) write(0xffffffffffffffff, &(0x7f0000038640)='5\x00', 0x1) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000038680)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f00000386c0)='1', 0x1) syz_mount_image$f2fs(&(0x7f0000038700), &(0x7f0000038740)='./file0\x00', 0x0, &(0x7f0000038780)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000389c0)="$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") syz_open_dev$vim2m(&(0x7f0000000300), 0x2, 0x2) r4 = syz_mount_image$btrfs(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x10, &(0x7f0000000680), 0x0, 0x559e, &(0x7f00000006c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000005c80)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000005cc0)={0x1}) openat(0xffffffffffffff9c, &(0x7f000000f580)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000f640)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2000017, 0x11, r5, 0x0) 1.758759614s ago: executing program 3 (id=2529): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010103}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_lsm={0xe, 0x4, &(0x7f0000002340)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000002380)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000001000010027bd700402d4df2500000000", @ANYRES32=r7, @ANYBLOB="984e1600c16a010054001280110001006272696467655f736c617665000000003c00058006001b002001000005001b000100000005000a00010000"], 0x74}, 0x1, 0x0, 0x0, 0x400c080}, 0x20008882) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000240)=0x3) 6.944477ms ago: executing program 5 (id=2530): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x21) write(r1, &(0x7f0000000280)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='0', 0x1) syz_mount_image$squashfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'], 0x1, 0x226, &(0x7f0000000cc0)="$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") open(&(0x7f0000000f00)='./file0/file0\x00', 0x103000, 0x2) 0s ago: executing program 1 (id=2531): sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x840) socketpair$unix(0x1, 0x5, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2000010, &(0x7f0000000340)=ANY=[@ANYBLOB="6d3030303030303030303030303030303030352c004cc6c0e6243cf035c6477ace75cc8ddee23d990eb3731951c4f8586138bd816145c8a61327c93536bef5b9d2f270ec0015c04748ccceb36918f85d4fee359cfc25b98616"]) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000600)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000640)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x0, 0x1, 0x0, &(0x7f00000006c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000700)={0x1, 0x1, 0x0, &(0x7f0000000840)=""/87, &(0x7f00000008c0)=""/90, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x2, 0x0, [{0x0, 0x24, &(0x7f00000009c0)=""/36}, {0x0, 0xffb, &(0x7f0000000a00)=""/4091}]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40b4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2b0000, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001c00)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x4000190, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) kernel console output (not intermixed with test programs): 9] RDX: 00007f15a6f38ee0 RSI: 0000000000000000 RDI: 00007f15a6035cb8 [ 1695.455132][T18509] RBP: 00002000000389c0 R08: 00000000ffffffff R09: ffffffffffffffff [ 1695.455151][T18509] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000038740 [ 1695.455170][T18509] R13: 00007f15a6f38ee0 R14: 00007f15a6f38ea0 R15: 0000200000038780 [ 1695.455209][T18509] [ 1695.483101][T18509] FAULT_INJECTION: forcing a failure. [ 1695.483101][T18509] name failslab, interval 1, probability 5, space 0, times 9998 [ 1695.483151][T18509] CPU: 1 UID: 0 PID: 18509 Comm: syz.1.2260 Tainted: G L syzkaller #0 PREEMPT(full) [ 1695.483207][T18509] Tainted: [L]=SOFTLOCKUP [ 1695.483221][T18509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1695.483244][T18509] Call Trace: [ 1695.483257][T18509] [ 1695.483272][T18509] dump_stack_lvl+0x100/0x190 [ 1695.483331][T18509] should_fail_ex.cold+0x5/0xa [ 1695.483374][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.483428][T18509] should_failslab+0xc2/0x120 [ 1695.483482][T18509] __kvmalloc_node_noprof+0x113/0x9b0 [ 1695.483523][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.483572][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.483620][T18509] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 1695.483688][T18509] v4l2_ctrl_new+0x4a6/0x23a0 [ 1695.483760][T18509] ? kasan_save_stack+0x3f/0x50 [ 1695.483803][T18509] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1695.483864][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.483913][T18509] ? handler_new_ref+0x7cb/0xc60 [ 1695.483972][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.484023][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.484078][T18509] v4l2_ctrl_new_std+0x1bb/0x290 [ 1695.484152][T18509] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1695.484212][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.484262][T18509] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1695.484312][T18509] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1695.484359][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.484405][T18509] ? __asan_memcpy+0x3c/0x60 [ 1695.484472][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.484519][T18509] ? find_ref+0x209/0x420 [ 1695.484578][T18509] handler_new_ref+0x82f/0xc60 [ 1695.484651][T18509] v4l2_ctrl_new+0xe67/0x23a0 [ 1695.484727][T18509] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1695.484801][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.484855][T18509] v4l2_ctrl_new_std+0x1bb/0x290 [ 1695.484929][T18509] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1695.484988][T18509] ? rcu_is_watching+0x13/0xc0 [ 1695.485042][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.485089][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.485141][T18509] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 1695.485194][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.485240][T18509] ? media_request_object_init+0x105/0x180 [ 1695.485294][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.485347][T18509] vicodec_open+0x1b2/0xf70 [ 1695.485385][T18509] ? kobject_get_unless_zero+0x156/0x200 [ 1695.485437][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.485497][T18509] v4l2_open+0x1d2/0x490 [ 1695.485554][T18509] ? __pfx_v4l2_open+0x10/0x10 [ 1695.485611][T18509] chrdev_open+0x234/0x6a0 [ 1695.485656][T18509] ? __pfx_apparmor_file_open+0x10/0x10 [ 1695.485710][T18509] ? __pfx_chrdev_open+0x10/0x10 [ 1695.485757][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.485804][T18509] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1695.485875][T18509] do_dentry_open+0x6ab/0x14d0 [ 1695.485912][T18509] ? __pfx_chrdev_open+0x10/0x10 [ 1695.485961][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.486014][T18509] vfs_open+0x82/0x3f0 [ 1695.486061][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.486115][T18509] path_openat+0x1a23/0x2450 [ 1695.486170][T18509] ? __pfx_path_openat+0x10/0x10 [ 1695.486232][T18509] do_file_open+0x20e/0x430 [ 1695.486283][T18509] ? __pfx_do_file_open+0x10/0x10 [ 1695.486364][T18509] ? _raw_spin_unlock+0x28/0x50 [ 1695.486420][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.486471][T18509] ? alloc_fd+0x471/0x7a0 [ 1695.486534][T18509] do_sys_openat2+0x10f/0x1e0 [ 1695.486591][T18509] ? __pfx_do_sys_openat2+0x10/0x10 [ 1695.486648][T18509] ? dump_stack_lvl+0x17c/0x190 [ 1695.486713][T18509] __x64_sys_openat+0x12d/0x210 [ 1695.486768][T18509] ? __pfx___x64_sys_openat+0x10/0x10 [ 1695.486831][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.486887][T18509] do_syscall_64+0x123/0x790 [ 1695.486932][T18509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.486972][T18509] RIP: 0033:0x7f15a5f5ed8e [ 1695.487002][T18509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1695.487041][T18509] RSP: 002b:00007f15a6f38b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1695.487077][T18509] RAX: ffffffffffffffda RBX: 00007f15a6f396c0 RCX: 00007f15a5f5ed8e [ 1695.487104][T18509] RDX: 0000000000000002 RSI: 00007f15a6f38c00 RDI: ffffffffffffff9c [ 1695.487130][T18509] RBP: 00007f15a6f38c00 R08: 0000000000000000 R09: 0000000000000000 [ 1695.487155][T18509] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1695.487180][T18509] R13: 00007f15a6226038 R14: 00007f15a6225fa0 R15: 00007fff98f93188 [ 1695.487233][T18509] [ 1695.563468][ C0] net_ratelimit: 83 callbacks suppressed [ 1695.621880][T18506] loop7: detected capacity change from 512 to 0 [ 1695.811160][T18509] FAULT_INJECTION: forcing a failure. [ 1695.811160][T18509] name failslab, interval 1, probability 5, space 0, times 9996 [ 1695.811227][T18509] CPU: 1 UID: 0 PID: 18509 Comm: syz.1.2260 Tainted: G L syzkaller #0 PREEMPT(full) [ 1695.811268][T18509] Tainted: [L]=SOFTLOCKUP [ 1695.811279][T18509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1695.811297][T18509] Call Trace: [ 1695.811308][T18509] [ 1695.811319][T18509] dump_stack_lvl+0x100/0x190 [ 1695.811368][T18509] should_fail_ex.cold+0x5/0xa [ 1695.811401][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.811448][T18509] should_failslab+0xc2/0x120 [ 1695.811485][T18509] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1695.811517][T18509] ? mas_preallocate+0xc22/0xee0 [ 1695.811558][T18509] mas_preallocate+0xc22/0xee0 [ 1695.811596][T18509] ? __pfx_mas_preallocate+0x10/0x10 [ 1695.811627][T18509] ? rcu_is_watching+0x13/0xc0 [ 1695.811678][T18509] ? vm_area_alloc+0x1f/0x160 [ 1695.811718][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.811754][T18509] ? lockdep_init_map_type+0x5c/0x250 [ 1695.811794][T18509] __mmap_region+0x139f/0x32e0 [ 1695.811847][T18509] ? __pfx___mmap_region+0x10/0x10 [ 1695.811894][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.811930][T18509] ? lock_acquire+0x1d1/0x380 [ 1695.811961][T18509] ? stack_depot_save_flags+0x4c2/0x9f0 [ 1695.811998][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.812034][T18509] ? find_held_lock+0x2b/0x80 [ 1695.812086][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.812122][T18509] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1695.812169][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.812213][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.812249][T18509] ? kasan_save_stack+0x3f/0x50 [ 1695.812280][T18509] ? kasan_save_stack+0x30/0x50 [ 1695.812309][T18509] ? kasan_save_track+0x14/0x30 [ 1695.812340][T18509] ? kasan_save_free_info+0x3b/0x70 [ 1695.812382][T18509] ? __kasan_slab_free+0x5f/0x80 [ 1695.812513][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.812551][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.812599][T18509] mmap_region+0x5a8/0x6d0 [ 1695.812661][T18509] ? __pfx_mmap_region+0x10/0x10 [ 1695.812707][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.812743][T18509] ? shmem_mapping+0xd/0x50 [ 1695.812786][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.812824][T18509] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 1695.812866][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.812901][T18509] ? security_mmap_addr+0x71/0x1e0 [ 1695.812940][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.812976][T18509] ? __get_unmapped_area+0x255/0x3e0 [ 1695.813015][T18509] do_mmap+0x12c7/0x1c30 [ 1695.813054][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.813089][T18509] ? lock_acquire+0x1d1/0x380 [ 1695.813121][T18509] ? __pfx_do_mmap+0x10/0x10 [ 1695.813156][T18509] ? __pfx___might_resched+0x10/0x10 [ 1695.813202][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.813238][T18509] ? ima_file_mmap+0x1c4/0x1f0 [ 1695.813268][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.813307][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.813344][T18509] ? __pfx_down_write_killable+0x10/0x10 [ 1695.813387][T18509] vm_mmap_pgoff+0x28d/0x470 [ 1695.813424][T18509] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1695.813458][T18509] ? __fget_files+0x215/0x3d0 [ 1695.813500][T18509] ? __fget_files+0x21f/0x3d0 [ 1695.813542][T18509] ksys_mmap_pgoff+0x3cb/0x610 [ 1695.813576][T18509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1695.813614][T18509] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1695.813657][T18509] __x64_sys_mmap+0x125/0x190 [ 1695.813694][T18509] do_syscall_64+0x123/0x790 [ 1695.813728][T18509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.813759][T18509] RIP: 0033:0x7f15a5f9e559 [ 1695.813782][T18509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.813811][T18509] RSP: 002b:00007f15a6f39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1695.813843][T18509] RAX: ffffffffffffffda RBX: 00007f15a6225fa0 RCX: 00007f15a5f9e559 [ 1695.813863][T18509] RDX: 0000000002000017 RSI: 0000000000003000 RDI: 0000000000000000 [ 1695.813882][T18509] RBP: 00007f15a6035ad8 R08: 0000000000000007 R09: 0000000000000000 [ 1695.813900][T18509] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1695.813919][T18509] R13: 00007f15a6226038 R14: 00007f15a6225fa0 R15: 00007fff98f93188 [ 1695.813959][T18509] [ 1695.814140][ T30] audit: type=1800 audit(1792477186.034:16): pid=18509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2260" name="file1" dev="tmpfs" ino=152 res=0 errno=0 [ 1696.205420][ T9668] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block [ 1696.717495][T18514] loop5: detected capacity change from 0 to 4096 [ 1696.886693][T18518] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1697.017013][T18514] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 1697.017048][T18514] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 1697.053985][T18514] Remounting filesystem read-only [ 1697.054003][T18514] NILFS (loop5): error -5 truncating bmap (ino=12) [ 1699.605044][T18322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1699.620682][T18322] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 1699.620712][T18322] EXT4-fs (loop7): I/O error while writing superblock [ 1699.711652][T17189] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 1700.108416][T18535] loop5: detected capacity change from 0 to 128 [ 1700.772815][ C0] net_ratelimit: 108 callbacks suppressed [ 1701.167090][T18525] Bluetooth: hci4: command 0x0406 tx timeout [ 1701.167149][T18525] Bluetooth: hci2: command 0x0406 tx timeout [ 1701.191805][T18535] FAULT_INJECTION: forcing a failure. [ 1701.191805][T18535] name failslab, interval 1, probability 5, space 0, times 10000 [ 1701.191852][T18535] CPU: 0 UID: 0 PID: 18535 Comm: syz.5.2270 Tainted: G L syzkaller #0 PREEMPT(full) [ 1701.191902][T18535] Tainted: [L]=SOFTLOCKUP [ 1701.191917][T18535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1701.191937][T18535] Call Trace: [ 1701.191950][T18535] [ 1701.191971][T18535] dump_stack_lvl+0x100/0x190 [ 1701.192028][T18535] should_fail_ex.cold+0x5/0xa [ 1701.192070][T18535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1701.192122][T18535] should_failslab+0xc2/0x120 [ 1701.192174][T18535] __kmalloc_noprof+0xfc/0x840 [ 1701.192213][T18535] ? security_inode_init_security+0x113/0x370 [ 1701.192278][T18535] security_inode_init_security+0x113/0x370 [ 1701.192341][T18535] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1701.192379][T18535] ? __pfx_security_inode_init_security+0x10/0x10 [ 1701.192440][T18535] ? do_raw_spin_unlock+0x145/0x1e0 [ 1701.192492][T18535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1701.192535][T18535] ? _raw_spin_unlock+0x28/0x50 [ 1701.192599][T18535] shmem_mknod+0x2ce/0x480 [ 1701.192649][T18535] ? __pfx_shmem_mknod+0x10/0x10 [ 1701.192695][T18535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1701.192761][T18535] ? __pfx_shmem_create+0x10/0x10 [ 1701.192804][T18535] lookup_open+0x1255/0x1990 [ 1701.192889][T18535] path_openat+0x10a0/0x2450 [ 1701.192947][T18535] ? __pfx_path_openat+0x10/0x10 [ 1701.193016][T18535] do_file_open+0x20e/0x430 [ 1701.193069][T18535] ? __pfx_do_file_open+0x10/0x10 [ 1701.193153][T18535] ? _raw_spin_unlock+0x28/0x50 [ 1701.193204][T18535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1701.193248][T18535] ? alloc_fd+0x471/0x7a0 [ 1701.193308][T18535] do_sys_openat2+0x10f/0x1e0 [ 1701.193357][T18535] ? __pfx_do_sys_openat2+0x10/0x10 [ 1701.193409][T18535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1701.193453][T18535] ? find_held_lock+0x2b/0x80 [ 1701.193516][T18535] __x64_sys_openat+0x12d/0x210 [ 1701.193566][T18535] ? __pfx___x64_sys_openat+0x10/0x10 [ 1701.193630][T18535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1701.193679][T18535] do_syscall_64+0x123/0x790 [ 1701.193722][T18535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.193762][T18535] RIP: 0033:0x7f874519e559 [ 1701.193789][T18535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.193824][T18535] RSP: 002b:00007f8746039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1701.193860][T18535] RAX: ffffffffffffffda RBX: 00007f8745425fa0 RCX: 00007f874519e559 [ 1701.193885][T18535] RDX: 0000000000101142 RSI: 000020000000f580 RDI: ffffffffffffff9c [ 1701.193909][T18535] RBP: 00007f8745235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1701.193932][T18535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1701.193959][T18535] R13: 00007f8745426038 R14: 00007f8745425fa0 R15: 00007fff3439ba88 [ 1701.194006][T18535] [ 1702.207966][ T7330] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.164788][ T7330] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.433378][T18574] tmpfs: Unknown parameter 'm000000000000000005' [ 1705.518871][ T7330] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.042706][ C1] net_ratelimit: 97 callbacks suppressed [ 1706.210719][ T7330] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.362530][T18588] overlayfs: missing 'workdir' [ 1707.093566][T18287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1707.220751][T18593] loop1: detected capacity change from 0 to 4096 [ 1707.251756][T18287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1707.445445][T18598] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1707.601201][T18593] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 1707.601272][T18593] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 1707.626202][T18593] Remounting filesystem read-only [ 1707.626219][T18593] NILFS (loop1): error -5 truncating bmap (ino=12) [ 1707.626617][T18287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1707.779460][T17200] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1707.822997][T18287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1707.841201][T18287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1707.899407][T18600] tmpfs: Unknown parameter 'm000000000000000005' [ 1707.986591][T18287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1707.987648][T18287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1708.200333][T18287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1708.249292][T18604] tmpfs: Unknown parameter 'm000000000000000005' [ 1710.243760][ T7330] bridge_slave_1: left allmulticast mode [ 1710.243793][ T7330] bridge_slave_1: left promiscuous mode [ 1710.244043][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.329873][ T7330] bridge_slave_0: left allmulticast mode [ 1710.329895][ T7330] bridge_slave_0: left promiscuous mode [ 1710.330110][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.899171][T18622] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2284'. [ 1710.911905][ T6234] IPVS: starting estimator thread 0... [ 1711.003134][T18624] IPVS: using max 22 ests per chain, 52800 per kthread [ 1711.090045][T18626] net_ratelimit: 61 callbacks suppressed [ 1712.102281][ T7330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1712.130228][ T7330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.145350][ T7330] bond0 (unregistering): Released all slaves [ 1712.651683][T18634] tmpfs: Unknown parameter 'm000000000000000005' [ 1712.787514][T18639] loop1: detected capacity change from 0 to 1024 [ 1712.807437][T18639] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1712.856366][T18639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1713.424981][T17200] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1713.605371][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1713.608877][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1713.610968][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1713.655658][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1713.657904][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1713.821357][T18287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1713.936818][T18287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.001835][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.001943][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1714.090718][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.090821][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1714.300115][T18657] overlayfs: missing 'lowerdir' [ 1715.090258][T18632] loop0: detected capacity change from 0 to 32768 [ 1715.112267][T18666] loop1: detected capacity change from 0 to 128 [ 1715.172972][T18632] (syz.0.2288,18632,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1715.201656][T18632] (syz.0.2288,18632,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1715.398392][T18632] JBD2: Ignoring recovery information on journal [ 1715.653127][T18632] JBD2: journal reset failed [ 1715.653144][T18632] (syz.0.2288,18632,0):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 1715.653186][T18632] (syz.0.2288,18632,0):ocfs2_check_volume:2372 ERROR: ocfs2 journal load failed! -4 [ 1715.668674][T18666] FAULT_INJECTION: forcing a failure. [ 1715.668674][T18666] name failslab, interval 1, probability 5, space 0, times 10000 [ 1715.668729][T18666] CPU: 0 UID: 0 PID: 18666 Comm: syz.1.2294 Tainted: G L syzkaller #0 PREEMPT(full) [ 1715.668786][T18666] Tainted: [L]=SOFTLOCKUP [ 1715.668803][T18666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1715.668828][T18666] Call Trace: [ 1715.668843][T18666] [ 1715.668858][T18666] dump_stack_lvl+0x100/0x190 [ 1715.668923][T18666] should_fail_ex.cold+0x5/0xa [ 1715.668971][T18666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1715.669035][T18666] should_failslab+0xc2/0x120 [ 1715.669086][T18666] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1715.669132][T18666] ? __d_alloc+0x35/0xa50 [ 1715.669197][T18666] __d_alloc+0x35/0xa50 [ 1715.669258][T18666] d_alloc_pseudo+0x1c/0xc0 [ 1715.669298][T18666] alloc_file_pseudo+0x118/0x290 [ 1715.669359][T18666] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1715.669413][T18666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1715.669478][T18666] __shmem_file_setup+0x205/0x460 [ 1715.669526][T18666] ? lock_acquire+0x1d1/0x380 [ 1715.669570][T18666] ? __pfx___shmem_file_setup+0x10/0x10 [ 1715.669616][T18666] ? do_raw_spin_lock+0x128/0x260 [ 1715.669669][T18666] ? find_held_lock+0x2b/0x80 [ 1715.669727][T18666] ? alloc_fd+0x471/0x7a0 [ 1715.669775][T18666] ? alloc_fd+0x471/0x7a0 [ 1715.669820][T18666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1715.669877][T18666] memfd_alloc_file+0x247/0x610 [ 1715.669932][T18666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1715.669988][T18666] ? _raw_spin_unlock+0x28/0x50 [ 1715.670051][T18666] ? __pfx_memfd_alloc_file+0x10/0x10 [ 1715.670122][T18666] __do_sys_memfd_create+0x236/0x3d0 [ 1715.670184][T18666] do_syscall_64+0x123/0x790 [ 1715.670232][T18666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.670274][T18666] RIP: 0033:0x7f15a5f9e559 [ 1715.670307][T18666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1715.670347][T18666] RSP: 002b:00007f15a6f38e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1715.670386][T18666] RAX: ffffffffffffffda RBX: 00000000000055a8 RCX: 00007f15a5f9e559 [ 1715.670414][T18666] RDX: 00007f15a6f38ee0 RSI: 0000000000000000 RDI: 00007f15a6035cb8 [ 1715.670441][T18666] RBP: 00002000000389c0 R08: 00000000ffffffff R09: ffffffffffffffff [ 1715.670469][T18666] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000038740 [ 1715.670495][T18666] R13: 00007f15a6f38ee0 R14: 00007f15a6f38ea0 R15: 0000200000038780 [ 1715.670550][T18666] [ 1715.724167][T12158] Bluetooth: hci5: command tx timeout [ 1716.282747][ C0] net_ratelimit: 71 callbacks suppressed [ 1716.399654][T18666] FAULT_INJECTION: forcing a failure. [ 1716.399654][T18666] name failslab, interval 1, probability 5, space 0, times 9999 [ 1716.399708][T18666] CPU: 0 UID: 0 PID: 18666 Comm: syz.1.2294 Tainted: G L syzkaller #0 PREEMPT(full) [ 1716.399763][T18666] Tainted: [L]=SOFTLOCKUP [ 1716.399779][T18666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1716.399803][T18666] Call Trace: [ 1716.399817][T18666] [ 1716.399833][T18666] dump_stack_lvl+0x100/0x190 [ 1716.399894][T18666] should_fail_ex.cold+0x5/0xa [ 1716.399939][T18666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.399999][T18666] should_failslab+0xc2/0x120 [ 1716.400050][T18666] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1716.400093][T18666] ? ptlock_alloc+0x1f/0x70 [ 1716.400157][T18666] ptlock_alloc+0x1f/0x70 [ 1716.400210][T18666] pte_alloc_one+0x82/0x3d0 [ 1716.400270][T18666] __pte_alloc+0x6d/0x380 [ 1716.400310][T18666] ? __pfx___pte_alloc+0x10/0x10 [ 1716.400347][T18666] ? rcu_read_unlock+0x2d/0xb0 [ 1716.400402][T18666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.400463][T18666] do_anonymous_page+0x1307/0x2050 [ 1716.400531][T18666] ? rcu_is_watching+0x13/0xc0 [ 1716.400592][T18666] ? __pfx_do_anonymous_page+0x10/0x10 [ 1716.400645][T18666] ? pgd_none+0x9f/0xe0 [ 1716.400696][T18666] ? __pfx_pgd_none+0x10/0x10 [ 1716.400750][T18666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.400797][T18666] ? lock_acquire+0x1d1/0x380 [ 1716.400846][T18666] __handle_mm_fault+0x1ff3/0x2f60 [ 1716.400910][T18666] ? lock_vma_under_rcu+0x11d/0x590 [ 1716.400964][T18666] ? __pfx___handle_mm_fault+0x10/0x10 [ 1716.401024][T18666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.401077][T18666] ? lock_vma_under_rcu+0x17c/0x590 [ 1716.401143][T18666] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1716.401206][T18666] handle_mm_fault+0x363/0xa20 [ 1716.401272][T18666] do_user_addr_fault+0x59c/0x12f0 [ 1716.401338][T18666] exc_page_fault+0x6f/0xd0 [ 1716.401379][T18666] asm_exc_page_fault+0x26/0x30 [ 1716.401418][T18666] RIP: 0033:0x7f15a5e5534e [ 1716.401450][T18666] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 1716.401496][T18666] RSP: 002b:00007f15a6f38470 EFLAGS: 00010206 [ 1716.401529][T18666] RAX: 0000000000600001 RBX: 00007f15a6f38530 RCX: 00000000000000a6 [ 1716.401555][T18666] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f15a6f385d0 [ 1716.401581][T18666] RBP: 0000000000000102 R08: 00007f159bc00000 R09: 0000000000600000 [ 1716.401609][T18666] R10: 0000000000000000 R11: 00007f15a6f38540 R12: 0000000000000001 [ 1716.401636][T18666] R13: 00007f15a6055e40 R14: 0000000000000000 R15: 00007f15a6f385d0 [ 1716.401689][T18666] [ 1716.424596][T18666] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1716.846146][T18679] loop3: detected capacity change from 0 to 128 [ 1716.926613][ T7330] hsr_slave_0: left promiscuous mode [ 1716.939987][ T7330] hsr_slave_1: left promiscuous mode [ 1716.941833][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1716.941897][ T7330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1716.982748][T18679] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1716.983157][T18679] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1716.992145][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1716.992172][ T7330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.090833][ T7330] veth1_macvtap: left promiscuous mode [ 1717.090879][ T7330] veth0_macvtap: left promiscuous mode [ 1717.091042][ T7330] veth1_vlan: left promiscuous mode [ 1717.091160][ T7330] veth0_vlan: left promiscuous mode [ 1717.543993][T17586] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1717.802885][T12158] Bluetooth: hci5: command tx timeout [ 1717.844197][T18686] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2298'. [ 1718.645733][T18688] tmpfs: Unknown parameter 'm000000000000000005' [ 1719.085076][T18693] loop5: detected capacity change from 0 to 4096 [ 1719.291073][T18702] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1719.410425][T18693] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 1719.410452][T18693] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 1719.464831][T18693] Remounting filesystem read-only [ 1719.464850][T18693] NILFS (loop5): error -5 truncating bmap (ino=12) [ 1719.774962][T17189] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 1719.882791][ T5622] Bluetooth: hci5: command tx timeout [ 1720.114595][T18690] loop3: detected capacity change from 0 to 32768 [ 1720.175531][T18705] tmpfs: Unknown parameter 'm000000000000000005' [ 1720.241941][T18690] JBD2: Ignoring recovery information on journal [ 1720.278043][ T7330] team0 (unregistering): Port device team_slave_1 removed [ 1720.490459][T18690] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1720.492104][T18710] overlayfs: missing 'lowerdir' [ 1720.521347][ T12] (kworker/u8:0,12,0):ocfs2_read_blocks_sync:110 ERROR: status = -12 [ 1720.521392][ T12] (kworker/u8:0,12,0):ocfs2_read_locked_inode:633 ERROR: status = -12 [ 1720.521658][ T12] (kworker/u8:0,12,0):ocfs2_check_dir_entry:335 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 1720.632002][ T7330] team0 (unregistering): Port device team_slave_0 removed [ 1720.904333][T18701] loop0: detected capacity change from 0 to 32768 [ 1720.970246][T18701] (syz.0.2302,18701,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1720.991445][T18701] (syz.0.2302,18701,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1721.145471][T18701] JBD2: Ignoring recovery information on journal [ 1721.297667][T17792] net_ratelimit: 60 callbacks suppressed [ 1721.405430][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 1721.434449][T18701] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1721.444603][T17586] ocfs2: Unmounting device (7,3) on (node local) [ 1721.974426][T12158] Bluetooth: hci5: command tx timeout [ 1722.554204][T17471] ocfs2: Unmounting device (7,0) on (node local) [ 1723.486506][T18649] rxe_eth0 speed is unknown, defaulting to 1000 [ 1723.519930][ T7330] IPVS: stop unused estimator thread 0... [ 1723.814929][T18732] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2309'. [ 1725.024999][T18741] loop0: detected capacity change from 0 to 128 [ 1725.054226][T17115] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1725.204731][T17115] usb 2-1: Using ep0 maxpacket: 16 [ 1725.223032][T17115] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1725.249127][T17115] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.249168][T17115] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1725.299105][T17115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.299143][T17115] usb 2-1: Product: syz [ 1725.299169][T17115] usb 2-1: Manufacturer: syz [ 1725.299197][T17115] usb 2-1: SerialNumber: syz [ 1725.346562][T17115] usb 2-1: config 0 descriptor?? [ 1725.756317][T18287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.948893][T18741] FAULT_INJECTION: forcing a failure. [ 1725.948893][T18741] name failslab, interval 1, probability 5, space 0, times 10000 [ 1725.948946][T18741] CPU: 0 UID: 0 PID: 18741 Comm: syz.0.2308 Tainted: G L syzkaller #0 PREEMPT(full) [ 1725.948995][T18741] Tainted: [L]=SOFTLOCKUP [ 1725.949008][T18741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1725.949026][T18741] Call Trace: [ 1725.949038][T18741] [ 1725.949054][T18741] dump_stack_lvl+0x100/0x190 [ 1725.949115][T18741] should_fail_ex.cold+0x5/0xa [ 1725.949153][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.949198][T18741] should_failslab+0xc2/0x120 [ 1725.949249][T18741] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1725.949290][T18741] ? ptlock_alloc+0x1f/0x70 [ 1725.949337][T18741] ptlock_alloc+0x1f/0x70 [ 1725.949390][T18741] pte_alloc_one+0x82/0x3d0 [ 1725.949446][T18741] __pte_alloc+0x6d/0x380 [ 1725.949475][T18741] ? __pfx___pte_alloc+0x10/0x10 [ 1725.949512][T18741] ? rcu_read_unlock+0x2d/0xb0 [ 1725.949570][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.949613][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.949658][T18741] do_anonymous_page+0x1307/0x2050 [ 1725.949729][T18741] ? __pfx_do_anonymous_page+0x10/0x10 [ 1725.949774][T18741] ? pgd_none+0x9f/0xe0 [ 1725.949815][T18741] ? __pfx_pgd_none+0x10/0x10 [ 1725.949869][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.949913][T18741] ? lock_acquire+0x1d1/0x380 [ 1725.949950][T18741] __handle_mm_fault+0x1ff3/0x2f60 [ 1725.950010][T18741] ? lock_vma_under_rcu+0x11d/0x590 [ 1725.950062][T18741] ? __pfx___handle_mm_fault+0x10/0x10 [ 1725.950107][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.950158][T18741] ? lock_vma_under_rcu+0x17c/0x590 [ 1725.950219][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1725.950266][T18741] handle_mm_fault+0x363/0xa20 [ 1725.950332][T18741] do_user_addr_fault+0x59c/0x12f0 [ 1725.950389][T18741] exc_page_fault+0x6f/0xd0 [ 1725.950419][T18741] asm_exc_page_fault+0x26/0x30 [ 1725.950459][T18741] RIP: 0033:0x7fceff85534e [ 1725.950505][T18741] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 1725.950538][T18741] RSP: 002b:00007fcf00813470 EFLAGS: 00010206 [ 1725.950562][T18741] RAX: 0000000000c00001 RBX: 00007fcf00813530 RCX: 0000000000000008 [ 1725.950584][T18741] RDX: 000000000000003f RSI: 0000000000000001 RDI: 00007fcf008135d0 [ 1725.950612][T18741] RBP: 00000000000000b4 R08: 00007fcef5600000 R09: 0000000000c00000 [ 1725.950638][T18741] R10: 0000000000000000 R11: 00007fcf00813540 R12: 0000000000000001 [ 1725.950662][T18741] R13: 00007fceffa55e40 R14: 0000000000000000 R15: 00007fcf008135d0 [ 1725.950705][T18741] [ 1726.113170][T18741] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1726.203763][T18287] veth0_vlan: entered promiscuous mode [ 1726.269473][T18287] veth1_vlan: entered promiscuous mode [ 1726.333195][T18741] FAULT_INJECTION: forcing a failure. [ 1726.333195][T18741] name failslab, interval 1, probability 5, space 0, times 9999 [ 1726.333248][T18741] CPU: 0 UID: 0 PID: 18741 Comm: syz.0.2308 Tainted: G L syzkaller #0 PREEMPT(full) [ 1726.333300][T18741] Tainted: [L]=SOFTLOCKUP [ 1726.333312][T18741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1726.333331][T18741] Call Trace: [ 1726.333342][T18741] [ 1726.333358][T18741] dump_stack_lvl+0x100/0x190 [ 1726.333424][T18741] should_fail_ex.cold+0x5/0xa [ 1726.333470][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1726.333527][T18741] should_failslab+0xc2/0x120 [ 1726.333578][T18741] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1726.333619][T18741] ? ptlock_alloc+0x1f/0x70 [ 1726.333670][T18741] ptlock_alloc+0x1f/0x70 [ 1726.333720][T18741] pte_alloc_one+0x82/0x3d0 [ 1726.333777][T18741] __pte_alloc+0x6d/0x380 [ 1726.333819][T18741] ? __pfx___pte_alloc+0x10/0x10 [ 1726.333858][T18741] ? rcu_read_unlock+0x2d/0xb0 [ 1726.333911][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1726.333953][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1726.334000][T18741] do_anonymous_page+0x1307/0x2050 [ 1726.334071][T18741] ? __pfx_do_anonymous_page+0x10/0x10 [ 1726.334115][T18741] ? pgd_none+0x9f/0xe0 [ 1726.334158][T18741] ? __pfx_pgd_none+0x10/0x10 [ 1726.334214][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1726.334258][T18741] ? lock_acquire+0x1d1/0x380 [ 1726.334295][T18741] __handle_mm_fault+0x1ff3/0x2f60 [ 1726.334356][T18741] ? lock_vma_under_rcu+0x11d/0x590 [ 1726.334406][T18741] ? __pfx___handle_mm_fault+0x10/0x10 [ 1726.334451][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1726.334508][T18741] ? lock_vma_under_rcu+0x17c/0x590 [ 1726.334568][T18741] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1726.334617][T18741] handle_mm_fault+0x363/0xa20 [ 1726.334683][T18741] do_user_addr_fault+0x59c/0x12f0 [ 1726.334751][T18741] exc_page_fault+0x6f/0xd0 [ 1726.334793][T18741] asm_exc_page_fault+0x26/0x30 [ 1726.334832][T18741] RIP: 0033:0x7fceff85534e [ 1726.334863][T18741] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 1726.334904][T18741] RSP: 002b:00007fcf00813470 EFLAGS: 00010206 [ 1726.334938][T18741] RAX: 0000000000e00001 RBX: 00007fcf00813530 RCX: 0000000000000056 [ 1726.334966][T18741] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fcf008135d0 [ 1726.334990][T18741] RBP: 0000000000000102 R08: 00007fcef5600000 R09: 0000000000e00000 [ 1726.335016][T18741] R10: 0000000000000000 R11: 00007fcf00813540 R12: 0000000000000001 [ 1726.335037][T18741] R13: 00007fceffa55e40 R14: 0000000000000000 R15: 00007fcf008135d0 [ 1726.335078][T18741] [ 1726.397399][T18741] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1726.523622][ C1] net_ratelimit: 84 callbacks suppressed [ 1726.679199][T18753] tmpfs: Unknown parameter 'm000000000000000005' [ 1726.916311][T18287] veth0_macvtap: entered promiscuous mode [ 1727.140167][T18760] tmpfs: Unknown parameter 'm000000000000000005' [ 1727.670361][T18287] veth1_macvtap: entered promiscuous mode [ 1727.926871][T13876] usb 2-1: USB disconnect, device number 26 [ 1728.159082][T18287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1728.355351][T18769] overlayfs: missing 'lowerdir' [ 1728.588135][T18764] loop5: detected capacity change from 0 to 32768 [ 1728.651093][T18764] (syz.5.2315,18764,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1728.666616][T18764] (syz.5.2315,18764,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1728.679078][T18287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1728.767168][T18764] JBD2: Ignoring recovery information on journal [ 1728.873457][T18764] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1729.004054][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 1729.196002][T12158] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1729.196035][T12158] CPU: 0 UID: 0 PID: 12158 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1729.196089][T12158] Tainted: [L]=SOFTLOCKUP [ 1729.196108][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1729.196141][T12158] Workqueue: hci2 hci_rx_work [ 1729.196195][T12158] Call Trace: [ 1729.196210][T12158] [ 1729.196229][T12158] dump_stack_lvl+0x100/0x190 [ 1729.196290][T12158] sysfs_warn_dup.cold+0x1c/0x28 [ 1729.196356][T12158] sysfs_create_dir_ns+0x24b/0x2b0 [ 1729.196416][T12158] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1729.196471][T12158] ? find_held_lock+0x2b/0x80 [ 1729.196539][T12158] ? kobject_add_internal+0x25f/0x930 [ 1729.196594][T12158] ? kobject_add_internal+0x25f/0x930 [ 1729.196661][T12158] kobject_add_internal+0x2c8/0x930 [ 1729.196729][T12158] kobject_add+0x16a/0x1e0 [ 1729.196784][T12158] ? __pfx_kobject_add+0x10/0x10 [ 1729.196838][T12158] ? class_to_subsys+0x10f/0x150 [ 1729.196900][T12158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1729.196954][T12158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1729.197005][T12158] ? kobject_put+0xb9/0x640 [ 1729.197055][T12158] ? _raw_spin_unlock+0x28/0x50 [ 1729.197130][T12158] device_add+0x294/0x1970 [ 1729.197187][T12158] ? __pfx_dev_set_name+0x10/0x10 [ 1729.197251][T12158] ? __pfx_device_add+0x10/0x10 [ 1729.197307][T12158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1729.197358][T12158] ? mgmt_send_event_skb+0x2fb/0x460 [ 1729.197432][T12158] hci_conn_add_sysfs+0x1a3/0x260 [ 1729.197506][T12158] le_conn_complete_evt+0x122f/0x2130 [ 1729.197578][T12158] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1729.197651][T12158] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1729.197713][T12158] ? skb_pull_data+0x15f/0x1e0 [ 1729.197782][T12158] hci_le_meta_evt+0x34a/0x5f0 [ 1729.197844][T12158] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1729.197911][T12158] hci_event_packet+0x51c/0xcd0 [ 1729.197969][T12158] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1729.198034][T12158] ? __pfx_hci_event_packet+0x10/0x10 [ 1729.198099][T12158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1729.198150][T12158] ? lockdep_hardirqs_on+0x7d/0x110 [ 1729.198192][T12158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1729.198252][T12158] hci_rx_work+0x451/0xfc0 [ 1729.198316][T12158] process_one_work+0xac7/0x1b10 [ 1729.198399][T12158] ? __pfx_process_one_work+0x10/0x10 [ 1729.198466][T12158] ? lock_acquire+0x1d1/0x380 [ 1729.198531][T12158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1729.198589][T12158] worker_thread+0x5ef/0xe50 [ 1729.198672][T12158] ? kthread+0x13a/0x450 [ 1729.198726][T12158] ? __pfx_worker_thread+0x10/0x10 [ 1729.198788][T12158] kthread+0x373/0x450 [ 1729.198842][T12158] ? __pfx_kthread+0x10/0x10 [ 1729.198906][T12158] ret_from_fork+0x730/0xd60 [ 1729.198950][T12158] ? __pfx_ret_from_fork+0x10/0x10 [ 1729.198993][T12158] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1729.199039][T12158] ? __switch_to+0x800/0x10f0 [ 1729.199092][T12158] ? __switch_to_asm+0x39/0x70 [ 1729.199131][T12158] ? __pfx_kthread+0x10/0x10 [ 1729.199187][T12158] ret_from_fork_asm+0x1a/0x30 [ 1729.199249][T12158] [ 1729.199350][T12158] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1729.199400][T12158] Bluetooth: hci2: failed to register connection device [ 1729.568451][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.568555][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.680064][T18793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1729.692919][T18793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1729.703603][T18793] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1729.713292][T18793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1729.736061][T18793] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1730.358554][T17189] ocfs2: Unmounting device (7,5) on (node local) [ 1730.438990][T18781] loop0: detected capacity change from 0 to 32768 [ 1730.514787][T18781] JBD2: Ignoring recovery information on journal [ 1730.835705][T18781] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1730.912215][T15356] (kworker/u8:1,15356,1):ocfs2_read_blocks_sync:110 ERROR: status = -12 [ 1730.912261][T15356] (kworker/u8:1,15356,1):ocfs2_read_locked_inode:633 ERROR: status = -12 [ 1730.912546][T15356] (kworker/u8:1,15356,1):ocfs2_check_dir_entry:335 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 1730.917212][T18807] loop1: detected capacity change from 0 to 128 [ 1731.082832][T18793] Bluetooth: hci0: command 0x0406 tx timeout [ 1731.242758][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 1731.310912][T18807] FAULT_INJECTION: forcing a failure. [ 1731.310912][T18807] name failslab, interval 1, probability 5, space 0, times 10000 [ 1731.311001][T18807] CPU: 1 UID: 0 PID: 18807 Comm: syz.1.2321 Tainted: G L syzkaller #0 PREEMPT(full) [ 1731.311062][T18807] Tainted: [L]=SOFTLOCKUP [ 1731.311077][T18807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1731.311101][T18807] Call Trace: [ 1731.311118][T18807] [ 1731.311133][T18807] dump_stack_lvl+0x100/0x190 [ 1731.311194][T18807] should_fail_ex.cold+0x5/0xa [ 1731.311240][T18807] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.311296][T18807] should_failslab+0xc2/0x120 [ 1731.311346][T18807] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1731.311387][T18807] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.311437][T18807] ? security_file_alloc+0x34/0x2c0 [ 1731.311500][T18807] security_file_alloc+0x34/0x2c0 [ 1731.311555][T18807] init_file+0x95/0x480 [ 1731.311606][T18807] alloc_empty_file+0x79/0x1c0 [ 1731.311662][T18807] path_openat+0xdb/0x2450 [ 1731.311718][T18807] ? __pfx_path_openat+0x10/0x10 [ 1731.311781][T18807] do_file_open+0x20e/0x430 [ 1731.311835][T18807] ? __pfx_do_file_open+0x10/0x10 [ 1731.311918][T18807] ? _raw_spin_unlock+0x28/0x50 [ 1731.311978][T18807] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.312033][T18807] ? alloc_fd+0x471/0x7a0 [ 1731.312096][T18807] do_sys_openat2+0x10f/0x1e0 [ 1731.312151][T18807] ? __pfx_do_sys_openat2+0x10/0x10 [ 1731.312207][T18807] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1731.312265][T18807] __x64_sys_openat+0x12d/0x210 [ 1731.312322][T18807] ? __pfx___x64_sys_openat+0x10/0x10 [ 1731.312389][T18807] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1731.312446][T18807] do_syscall_64+0x123/0x790 [ 1731.312491][T18807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.312533][T18807] RIP: 0033:0x7f15a5f5ed8e [ 1731.312564][T18807] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1731.312604][T18807] RSP: 002b:00007f15a6f38b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1731.312643][T18807] RAX: ffffffffffffffda RBX: 00007f15a6f396c0 RCX: 00007f15a5f5ed8e [ 1731.312671][T18807] RDX: 0000000000000002 RSI: 00007f15a6f38c00 RDI: ffffffffffffff9c [ 1731.312698][T18807] RBP: 00007f15a6f38c00 R08: 0000000000000000 R09: 0000000000000000 [ 1731.312723][T18807] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1731.312748][T18807] R13: 00007f15a6226038 R14: 00007f15a6225fa0 R15: 00007fff98f93188 [ 1731.312801][T18807] [ 1731.572685][ C0] net_ratelimit: 54 callbacks suppressed [ 1731.803353][ T5622] Bluetooth: hci6: command tx timeout [ 1732.061379][T17471] ocfs2: Unmounting device (7,0) on (node local) [ 1732.797181][T18825] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2320'. [ 1732.934485][T18649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.934856][T18649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.936576][T18649] bridge_slave_0: entered allmulticast mode [ 1732.974129][T18649] bridge_slave_0: entered promiscuous mode [ 1733.019541][T18649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.019837][T18649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.020034][T18649] bridge_slave_1: entered allmulticast mode [ 1733.068880][T18649] bridge_slave_1: entered promiscuous mode [ 1733.371842][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 1733.453719][T18828] tmpfs: Unknown parameter 'm000000000000000005' [ 1733.879268][T18834] tmpfs: Unknown parameter 'm000000000000000005' [ 1733.883196][T15127] Bluetooth: hci6: command tx timeout [ 1734.014204][T18837] loop0: detected capacity change from 0 to 128 [ 1734.208654][T18792] rxe_eth0 speed is unknown, defaulting to 1000 [ 1734.877059][T18841] loop5: detected capacity change from 0 to 128 [ 1735.068598][T18649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.151913][T18649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.186386][T18837] FAULT_INJECTION: forcing a failure. [ 1735.186386][T18837] name failslab, interval 1, probability 5, space 0, times 10000 [ 1735.186436][T18837] CPU: 0 UID: 0 PID: 18837 Comm: syz.0.2326 Tainted: G L syzkaller #0 PREEMPT(full) [ 1735.186477][T18837] Tainted: [L]=SOFTLOCKUP [ 1735.186488][T18837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1735.186518][T18837] Call Trace: [ 1735.186532][T18837] [ 1735.186547][T18837] dump_stack_lvl+0x100/0x190 [ 1735.186604][T18837] should_fail_ex.cold+0x5/0xa [ 1735.186641][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1735.186695][T18837] should_failslab+0xc2/0x120 [ 1735.186747][T18837] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1735.186781][T18837] ? ptlock_alloc+0x1f/0x70 [ 1735.186835][T18837] ptlock_alloc+0x1f/0x70 [ 1735.186887][T18837] pte_alloc_one+0x82/0x3d0 [ 1735.186937][T18837] __pte_alloc+0x6d/0x380 [ 1735.186968][T18837] ? __pfx___pte_alloc+0x10/0x10 [ 1735.187007][T18837] ? rcu_read_unlock+0x2d/0xb0 [ 1735.187059][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1735.187105][T18837] do_anonymous_page+0x1307/0x2050 [ 1735.187172][T18837] ? __pfx_do_anonymous_page+0x10/0x10 [ 1735.187221][T18837] ? pgd_none+0x9f/0xe0 [ 1735.187261][T18837] ? __pfx_pgd_none+0x10/0x10 [ 1735.187312][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1735.187357][T18837] ? lock_acquire+0x1d1/0x380 [ 1735.187398][T18837] __handle_mm_fault+0x1ff3/0x2f60 [ 1735.187451][T18837] ? lock_vma_under_rcu+0x11d/0x590 [ 1735.187504][T18837] ? __pfx___handle_mm_fault+0x10/0x10 [ 1735.187557][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1735.187603][T18837] ? lock_vma_under_rcu+0x17c/0x590 [ 1735.187667][T18837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1735.187717][T18837] handle_mm_fault+0x363/0xa20 [ 1735.187778][T18837] do_user_addr_fault+0x59c/0x12f0 [ 1735.187839][T18837] exc_page_fault+0x6f/0xd0 [ 1735.187871][T18837] asm_exc_page_fault+0x26/0x30 [ 1735.187904][T18837] RIP: 0033:0x7fceff8552a3 [ 1735.187935][T18837] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1735.187972][T18837] RSP: 002b:00007fcf00813470 EFLAGS: 00010206 [ 1735.188000][T18837] RAX: 0000000001200000 RBX: 00007fcf00813530 RCX: 00007fcef5600000 [ 1735.188021][T18837] RDX: 00007fcf008136d0 RSI: 0000000000000000 RDI: 00007fcf008135d0 [ 1735.188041][T18837] RBP: 0000000000000064 R08: 0000000000000008 R09: 00000000000000b9 [ 1735.188065][T18837] R10: 00000000000000c4 R11: 00007fcf00813530 R12: 0000000000000001 [ 1735.188091][T18837] R13: 00007fceffa55e40 R14: 00000000000000ed R15: 00007fcf008135d0 [ 1735.188142][T18837] [ 1735.301104][T18837] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1735.510813][T18843] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1735.510874][T18843] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1735.963247][T15127] Bluetooth: hci6: command tx timeout [ 1736.271243][T18649] team0: Port device team_slave_0 added [ 1736.285870][T18649] team0: Port device team_slave_1 added [ 1736.313537][T18853] loop3: detected capacity change from 0 to 128 [ 1736.606188][ T7330] net_ratelimit: 86 callbacks suppressed [ 1737.416721][T18649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1737.416741][T18649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.416790][T18649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.480774][T18649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.480794][T18649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.480839][T18649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1738.043299][ T5622] Bluetooth: hci6: command 0x0419 tx timeout [ 1738.326010][T18649] hsr_slave_0: entered promiscuous mode [ 1738.331555][T18848] loop1: detected capacity change from 0 to 32768 [ 1738.363304][T18649] hsr_slave_1: entered promiscuous mode [ 1738.881699][T18877] loop3: detected capacity change from 0 to 4096 [ 1739.163474][T18882] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1739.222493][T18881] loop5: detected capacity change from 0 to 128 [ 1739.868954][T18888] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2335'. [ 1740.124322][ T5622] Bluetooth: hci6: command 0x0419 tx timeout [ 1740.365420][T18890] tmpfs: Unknown parameter 'm000000000000000005' [ 1740.752105][T18895] loop1: detected capacity change from 0 to 128 [ 1740.834608][T18894] tmpfs: Unknown parameter 'm000000000000000005' [ 1740.975462][T18898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1740.975523][T18898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1741.161492][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2342'. [ 1741.574730][ T5622] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1741.574757][ T5622] CPU: 1 UID: 0 PID: 5622 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1741.574801][ T5622] Tainted: [L]=SOFTLOCKUP [ 1741.574813][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1741.574833][ T5622] Workqueue: hci3 hci_rx_work [ 1741.574873][ T5622] Call Trace: [ 1741.574883][ T5622] [ 1741.574896][ T5622] dump_stack_lvl+0x100/0x190 [ 1741.574940][ T5622] sysfs_warn_dup.cold+0x1c/0x28 [ 1741.574987][ T5622] sysfs_create_dir_ns+0x24b/0x2b0 [ 1741.575032][ T5622] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1741.575072][ T5622] ? find_held_lock+0x2b/0x80 [ 1741.575115][ T5622] ? kobject_add_internal+0x25f/0x930 [ 1741.575155][ T5622] ? kobject_add_internal+0x25f/0x930 [ 1741.575216][ T5622] kobject_add_internal+0x2c8/0x930 [ 1741.575263][ T5622] kobject_add+0x16a/0x1e0 [ 1741.575302][ T5622] ? __pfx_kobject_add+0x10/0x10 [ 1741.575340][ T5622] ? class_to_subsys+0x10f/0x150 [ 1741.575384][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1741.575422][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1741.575458][ T5622] ? kobject_put+0xb9/0x640 [ 1741.575492][ T5622] ? _raw_spin_unlock+0x28/0x50 [ 1741.575548][ T5622] device_add+0x294/0x1970 [ 1741.575588][ T5622] ? __pfx_dev_set_name+0x10/0x10 [ 1741.575634][ T5622] ? __pfx_device_add+0x10/0x10 [ 1741.575674][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1741.575709][ T5622] ? mgmt_send_event_skb+0x2fb/0x460 [ 1741.575764][ T5622] hci_conn_add_sysfs+0x1a3/0x260 [ 1741.575814][ T5622] le_conn_complete_evt+0x122f/0x2130 [ 1741.575864][ T5622] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1741.575917][ T5622] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1741.575961][ T5622] ? skb_pull_data+0x15f/0x1e0 [ 1741.576011][ T5622] hci_le_meta_evt+0x34a/0x5f0 [ 1741.576059][ T5622] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1741.576107][ T5622] hci_event_packet+0x51c/0xcd0 [ 1741.576149][ T5622] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1741.576194][ T5622] ? __pfx_hci_event_packet+0x10/0x10 [ 1741.576253][ T5622] hci_rx_work+0x451/0xfc0 [ 1741.576299][ T5622] process_one_work+0xac7/0x1b10 [ 1741.576360][ T5622] ? __pfx_process_one_work+0x10/0x10 [ 1741.576406][ T5622] ? lock_acquire+0x1d1/0x380 [ 1741.576449][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1741.576491][ T5622] worker_thread+0x5ef/0xe50 [ 1741.576550][ T5622] ? kthread+0x13a/0x450 [ 1741.576588][ T5622] ? __pfx_worker_thread+0x10/0x10 [ 1741.576632][ T5622] kthread+0x373/0x450 [ 1741.576671][ T5622] ? __pfx_kthread+0x10/0x10 [ 1741.576714][ T5622] ret_from_fork+0x730/0xd60 [ 1741.576748][ T5622] ? __pfx_ret_from_fork+0x10/0x10 [ 1741.576782][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1741.576817][ T5622] ? __switch_to+0x800/0x10f0 [ 1741.576857][ T5622] ? __switch_to_asm+0x39/0x70 [ 1741.576887][ T5622] ? __pfx_kthread+0x10/0x10 [ 1741.576929][ T5622] ret_from_fork_asm+0x1a/0x30 [ 1741.576978][ T5622] [ 1741.578950][ T5622] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1741.578992][ T5622] Bluetooth: hci3: failed to register connection device [ 1741.786114][ T7330] net_ratelimit: 53 callbacks suppressed [ 1742.314950][T10959] bridge_slave_1: left allmulticast mode [ 1742.314980][T10959] bridge_slave_1: left promiscuous mode [ 1742.315205][T10959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.380993][T10959] bridge_slave_0: left allmulticast mode [ 1742.381022][T10959] bridge_slave_0: left promiscuous mode [ 1742.381228][T10959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.684244][T18913] loop1: detected capacity change from 0 to 128 [ 1743.525338][T18917] loop0: detected capacity change from 0 to 512 [ 1743.593443][T18917] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.2346: inode has both inline data and extents flags [ 1743.593531][T18917] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1743.593952][T18917] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2346: couldn't read orphan inode 15 (err -117) [ 1743.594045][T18917] loop0: lost filesystem error report for type 5 error -117 [ 1743.616221][T18917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1743.643558][T15127] Bluetooth: hci3: command 0x0406 tx timeout [ 1743.856602][ T30] audit: type=1804 audit(1792477234.084:17): pid=18917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2346" name="/newroot/35/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 1744.017407][T10959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1744.084568][T10959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1744.137221][T10959] bond0 (unregistering): Released all slaves [ 1744.213961][T17471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1745.561246][T18932] tmpfs: Unknown parameter 'm000000000000000005' [ 1745.613617][T18913] loop1: detected capacity change from 0 to 40427 [ 1745.723148][T15127] Bluetooth: hci3: command 0x0406 tx timeout [ 1746.248198][T18916] loop5: detected capacity change from 0 to 32768 [ 1746.322999][T18916] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1746.467720][T18944] tmpfs: Unknown parameter 'm000000000000000005' [ 1746.722816][T18916] XFS (loop5): Ending clean mount [ 1746.738185][T18916] XFS (loop5): Quotacheck needed: Please wait. [ 1746.923446][T15356] net_ratelimit: 59 callbacks suppressed [ 1747.011918][T18916] XFS (loop5): Quotacheck: Done. [ 1747.136157][T17189] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1747.598166][T18955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2353'. [ 1747.831552][T18936] loop0: detected capacity change from 0 to 32768 [ 1747.971222][T18936] JBD2: Ignoring recovery information on journal [ 1748.119163][T18960] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1748.119219][T18960] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1748.263495][T18936] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1748.341221][T18543] (kworker/u8:8,18543,1):ocfs2_read_blocks_sync:110 ERROR: status = -12 [ 1748.341266][T18543] (kworker/u8:8,18543,1):ocfs2_read_locked_inode:633 ERROR: status = -12 [ 1748.341536][T18543] (kworker/u8:8,18543,1):ocfs2_check_dir_entry:335 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 1748.394715][T10959] hsr_slave_0: left promiscuous mode [ 1748.420887][T10959] hsr_slave_1: left promiscuous mode [ 1748.439574][T10959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1748.439605][T10959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.515811][T10959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1748.515833][T10959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.644726][T10959] veth1_macvtap: left promiscuous mode [ 1748.644790][T10959] veth0_macvtap: left promiscuous mode [ 1748.644887][T10959] veth1_vlan: left promiscuous mode [ 1748.644979][T10959] veth0_vlan: left promiscuous mode [ 1748.909884][T17471] ocfs2: Unmounting device (7,0) on (node local) [ 1751.026852][T18970] loop0: detected capacity change from 0 to 32768 [ 1751.060438][T18968] loop3: detected capacity change from 0 to 32768 [ 1751.075269][T18968] (syz.3.2357,18968,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1751.075738][T18968] (syz.3.2357,18968,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1751.201241][T18970] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1751.320215][T18972] loop5: detected capacity change from 0 to 32768 [ 1751.326302][T18968] JBD2: Ignoring recovery information on journal [ 1751.342122][T18972] (syz.5.2354,18972,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1751.394273][T18972] (syz.5.2354,18972,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1751.460871][T18972] debugfs: '9357E9D751824C228242B9B0D0FB6750' already exists in 'ocfs2' [ 1751.482089][T18972] JBD2: Ignoring recovery information on journal [ 1751.800460][T18968] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1751.876348][T18970] XFS (loop0): Ending clean mount [ 1751.929979][T18970] XFS (loop0): Quotacheck needed: Please wait. [ 1751.962733][ C0] net_ratelimit: 52 callbacks suppressed [ 1751.993974][T18972] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1752.526351][T18970] XFS (loop0): Quotacheck: Done. [ 1752.634746][T17471] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1752.798001][T17189] ocfs2: Unmounting device (7,5) on (node local) [ 1753.151804][T10959] team0 (unregistering): Port device team_slave_1 removed [ 1753.310013][T10959] team0 (unregistering): Port device team_slave_0 removed [ 1753.364554][T17586] ocfs2: Unmounting device (7,3) on (node local) [ 1753.401275][T19002] tmpfs: Unknown parameter 'm000000000000000005' [ 1756.987058][T19010] tmpfs: Unknown parameter 'm000000000000000005' [ 1757.002805][ C1] net_ratelimit: 99 callbacks suppressed [ 1757.969392][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1759.411961][T19013] loop1: detected capacity change from 0 to 32768 [ 1759.524131][T19013] JBD2: Ignoring recovery information on journal [ 1759.852434][T19013] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1759.890875][T18451] (kworker/u8:7,18451,1):ocfs2_read_blocks_sync:110 ERROR: status = -12 [ 1759.890921][T18451] (kworker/u8:7,18451,1):ocfs2_read_locked_inode:633 ERROR: status = -12 [ 1759.923871][T18451] (kworker/u8:7,18451,1):ocfs2_check_dir_entry:335 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 1759.996122][T18792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.996275][T18792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.996584][T18792] bridge_slave_0: entered allmulticast mode [ 1760.055903][T18792] bridge_slave_0: entered promiscuous mode [ 1760.142579][T18792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.142860][T18792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.158082][T18792] bridge_slave_1: entered allmulticast mode [ 1760.173790][T19030] loop3: detected capacity change from 0 to 1024 [ 1760.231815][T18792] bridge_slave_1: entered promiscuous mode [ 1760.301113][T19030] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1760.405943][T19030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1760.752993][T17200] ocfs2: Unmounting device (7,1) on (node local) [ 1761.196983][T17586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1761.220489][T19025] loop5: detected capacity change from 0 to 32768 [ 1761.287375][T19025] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2367 (19025) [ 1761.317447][T19025] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1761.317495][T19025] BTRFS info (device loop5): using sha256 checksum algorithm [ 1761.527193][T19025] BTRFS info (device loop5): enabling ssd optimizations [ 1761.527230][T19025] BTRFS info (device loop5): turning on async discard [ 1761.527260][T19025] BTRFS info (device loop5): enabling free space tree [ 1761.831590][T18792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1761.940576][T18792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1762.001640][T19052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2371'. [ 1762.001704][T19052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2371'. [ 1762.052722][ C1] net_ratelimit: 68 callbacks suppressed [ 1762.939450][T17189] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1762.955019][ T60] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 1763.230385][T19052] tipc: Started in network mode [ 1763.230429][T19052] tipc: Node identity ac1414aa, cluster identity 4711 [ 1763.231346][T19052] tipc: New replicast peer: 172.20.20.187 [ 1763.366053][T19052] tipc: Enabled bearer , priority 10 [ 1763.621518][T18792] team0: Port device team_slave_0 added [ 1763.648390][T18792] team0: Port device team_slave_1 added [ 1764.516639][T19070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2372'. [ 1764.654258][T19072] tmpfs: Unknown parameter 'm000000000000000005' [ 1764.828136][T18792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1764.828157][T18792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1764.828199][T18792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1764.831079][T16895] tipc: Node number set to 2886997162 [ 1764.873718][T18792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1764.873738][T18792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1764.873785][T18792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1766.286071][T18792] hsr_slave_0: entered promiscuous mode [ 1766.306502][T18792] hsr_slave_1: entered promiscuous mode [ 1766.307523][T18792] debugfs: 'hsr0' already exists in 'hsr' [ 1766.307549][T18792] Cannot create hsr debugfs directory [ 1767.162959][ C1] net_ratelimit: 66 callbacks suppressed [ 1767.691540][T19090] tmpfs: Unknown parameter 'm000000000000000005' [ 1767.798052][T19094] loop3: detected capacity change from 0 to 128 [ 1769.330021][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1770.094813][T18649] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1770.246203][T18649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1770.248235][T18649] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1770.252181][T19111] loop3: detected capacity change from 0 to 4096 [ 1770.289695][T19096] loop0: detected capacity change from 0 to 32768 [ 1770.330840][T18649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1770.367630][T19112] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1770.407863][T19111] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 1770.407936][T19111] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 1770.410498][T19111] Remounting filesystem read-only [ 1770.410516][T19111] NILFS (loop3): error -5 truncating bmap (ino=12) [ 1770.508812][T19096] (syz.0.2376,19096,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1770.510114][T19096] (syz.0.2376,19096,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1770.598093][T17586] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1770.662315][T19096] JBD2: Ignoring recovery information on journal [ 1770.800573][T18649] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1770.871309][T18649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1770.971005][T19096] JBD2: journal reset failed [ 1770.971018][T19096] (syz.0.2376,19096,1):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 1770.971048][T19096] (syz.0.2376,19096,1):ocfs2_check_volume:2372 ERROR: ocfs2 journal load failed! -4 [ 1771.310986][T19120] loop3: detected capacity change from 0 to 128 [ 1771.344011][T18649] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1771.478451][T19120] FAULT_INJECTION: forcing a failure. [ 1771.478451][T19120] name failslab, interval 1, probability 5, space 0, times 10000 [ 1771.478505][T19120] CPU: 0 UID: 0 PID: 19120 Comm: syz.3.2383 Tainted: G L syzkaller #0 PREEMPT(full) [ 1771.478561][T19120] Tainted: [L]=SOFTLOCKUP [ 1771.478577][T19120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1771.478603][T19120] Call Trace: [ 1771.478616][T19120] [ 1771.478632][T19120] dump_stack_lvl+0x100/0x190 [ 1771.478693][T19120] should_fail_ex.cold+0x5/0xa [ 1771.478739][T19120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.478797][T19120] should_failslab+0xc2/0x120 [ 1771.478849][T19120] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1771.478890][T19120] ? do_syscall_64+0x123/0x790 [ 1771.478931][T19120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.478974][T19120] ? __d_alloc+0x35/0xa50 [ 1771.479037][T19120] __d_alloc+0x35/0xa50 [ 1771.479102][T19120] d_alloc_parallel+0x105/0x14c0 [ 1771.479151][T19120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.479201][T19120] ? lock_acquire+0x1d1/0x380 [ 1771.479247][T19120] ? __d_lookup+0x73/0x4a0 [ 1771.479285][T19120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.479335][T19120] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1771.479376][T19120] ? __d_lookup+0x25c/0x4a0 [ 1771.479412][T19120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.479473][T19120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.479522][T19120] ? __d_lookup+0x266/0x4a0 [ 1771.479574][T19120] lookup_open+0x6bb/0x1990 [ 1771.479658][T19120] path_openat+0x10a0/0x2450 [ 1771.479715][T19120] ? __pfx_path_openat+0x10/0x10 [ 1771.479778][T19120] do_file_open+0x20e/0x430 [ 1771.479831][T19120] ? __pfx_do_file_open+0x10/0x10 [ 1771.479913][T19120] ? _raw_spin_unlock+0x28/0x50 [ 1771.479971][T19120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.480019][T19120] ? alloc_fd+0x471/0x7a0 [ 1771.480089][T19120] do_sys_openat2+0x10f/0x1e0 [ 1771.480144][T19120] ? __pfx_do_sys_openat2+0x10/0x10 [ 1771.480200][T19120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.480249][T19120] ? find_held_lock+0x2b/0x80 [ 1771.480320][T19120] __x64_sys_openat+0x12d/0x210 [ 1771.480376][T19120] ? __pfx___x64_sys_openat+0x10/0x10 [ 1771.480442][T19120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.480500][T19120] do_syscall_64+0x123/0x790 [ 1771.480546][T19120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.480588][T19120] RIP: 0033:0x7f495a59e559 [ 1771.480620][T19120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1771.480658][T19120] RSP: 002b:00007f495b486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1771.480698][T19120] RAX: ffffffffffffffda RBX: 00007f495a825fa0 RCX: 00007f495a59e559 [ 1771.480725][T19120] RDX: 0000000000101142 RSI: 000020000000f580 RDI: ffffffffffffff9c [ 1771.480753][T19120] RBP: 00007f495a635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1771.480779][T19120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1771.480804][T19120] R13: 00007f495a826038 R14: 00007f495a825fa0 R15: 00007ffc10cb2a58 [ 1771.480858][T19120] [ 1771.840355][T18649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1771.995479][T19122] loop0: detected capacity change from 0 to 128 [ 1772.522766][ C1] net_ratelimit: 123 callbacks suppressed [ 1773.547378][T19136] tmpfs: Unknown parameter 'm000000000000000005' [ 1773.791623][T15127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1773.813645][T15127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1773.836246][T15127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1773.855463][T15127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1773.860421][T15127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1775.882743][ T5622] Bluetooth: hci1: command tx timeout [ 1777.562738][ C0] net_ratelimit: 89 callbacks suppressed [ 1777.965127][ T5622] Bluetooth: hci1: command tx timeout [ 1778.241897][T19161] loop1: detected capacity change from 0 to 1024 [ 1778.277798][T19161] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1778.386726][T19163] tmpfs: Unknown parameter 'm000000000000000005' [ 1778.424705][T19161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1778.759891][T18792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1778.935575][T18792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1779.388893][T17200] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1779.454513][T18792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1779.576539][T18792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1779.584989][T18792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1779.822066][T18792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1779.969142][T18792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1780.043055][ T5622] Bluetooth: hci1: command tx timeout [ 1780.209806][T18792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1780.284593][T19158] loop3: detected capacity change from 0 to 32768 [ 1780.318363][T19187] loop5: detected capacity change from 0 to 4096 [ 1780.488203][T19158] JBD2: Ignoring recovery information on journal [ 1780.581798][T19197] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1780.670933][T19199] Bluetooth: MGMT ver 1.23 [ 1781.883296][T19158] JBD2: journal reset failed [ 1781.883314][T19158] (syz.3.2391,19158,0):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 1781.883356][T19158] (syz.3.2391,19158,0):ocfs2_check_volume:2372 ERROR: ocfs2 journal load failed! -4 [ 1782.122816][ T5622] Bluetooth: hci1: command tx timeout [ 1782.602672][ C1] net_ratelimit: 50 callbacks suppressed [ 1782.745694][T19215] tmpfs: Unknown parameter 'm000000000000000005' [ 1785.221989][T19140] rxe_eth0 speed is unknown, defaulting to 1000 [ 1785.352490][T19229] tmpfs: Unknown parameter 'm000000000000000005' [ 1786.259979][T18792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.297050][T10959] bridge_slave_1: left allmulticast mode [ 1786.297081][T10959] bridge_slave_1: left promiscuous mode [ 1786.297198][T19237] tmpfs: Unknown parameter 'm000000000000000005' [ 1786.297350][T10959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.347187][T10959] bridge_slave_0: left allmulticast mode [ 1786.347210][T10959] bridge_slave_0: left promiscuous mode [ 1786.347453][T10959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.805190][T15356] net_ratelimit: 99 callbacks suppressed [ 1787.874704][T19251] loop5: detected capacity change from 0 to 512 [ 1787.952825][T19251] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.2410: inode has both inline data and extents flags [ 1787.952879][T19251] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1787.955889][T19251] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2410: couldn't read orphan inode 15 (err -117) [ 1787.955927][T19251] loop5: lost filesystem error report for type 5 error -117 [ 1788.017237][T10959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1788.017237][T19251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1788.119552][T10959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1788.180909][T10959] bond0 (unregistering): Released all slaves [ 1788.198688][T19234] loop1: detected capacity change from 0 to 32768 [ 1788.269209][T19234] (syz.1.2403,19234,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1788.294809][T19234] (syz.1.2403,19234,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1788.406625][T19234] JBD2: Ignoring recovery information on journal [ 1788.729225][T17189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1788.817558][T19234] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1789.798453][T17200] ocfs2: Unmounting device (7,1) on (node local) [ 1791.005880][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.006033][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.121574][T19271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2413'. [ 1792.498262][T19274] loop3: detected capacity change from 0 to 128 [ 1792.656044][T19274] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1792.694049][T19274] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1792.922821][ C1] net_ratelimit: 58 callbacks suppressed [ 1793.226863][T15127] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1793.246361][T15127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1793.267767][T15127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1793.272995][T15127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1793.290185][T15127] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1793.393061][T19279] tmpfs: Unknown parameter 'm000000000000000005' [ 1793.432748][T17586] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1795.403514][T15127] Bluetooth: hci5: command tx timeout [ 1795.460760][T19297] tmpfs: Unknown parameter 'm000000000000000005' [ 1795.860219][T19299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2418'. [ 1796.020840][T10959] hsr_slave_0: left promiscuous mode [ 1796.032403][T10959] hsr_slave_1: left promiscuous mode [ 1796.044051][T10959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.049034][T10959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.085224][T19303] tmpfs: Unknown parameter 'm000000000000000005' [ 1796.845984][T19310] loop5: detected capacity change from 0 to 128 [ 1797.493440][T15127] Bluetooth: hci5: command tx timeout [ 1798.039759][T19310] FAULT_INJECTION: forcing a failure. [ 1798.039759][T19310] name failslab, interval 1, probability 5, space 0, times 9998 [ 1798.039808][T19310] CPU: 0 UID: 0 PID: 19310 Comm: syz.5.2422 Tainted: G L syzkaller #0 PREEMPT(full) [ 1798.039850][T19310] Tainted: [L]=SOFTLOCKUP [ 1798.039862][T19310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1798.039885][T19310] Call Trace: [ 1798.039899][T19310] [ 1798.039915][T19310] dump_stack_lvl+0x100/0x190 [ 1798.039973][T19310] should_fail_ex.cold+0x5/0xa [ 1798.040007][T19310] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1798.040058][T19310] should_failslab+0xc2/0x120 [ 1798.040107][T19310] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1798.040144][T19310] ? ptlock_alloc+0x1f/0x70 [ 1798.040195][T19310] ptlock_alloc+0x1f/0x70 [ 1798.040249][T19310] pte_alloc_one+0x82/0x3d0 [ 1798.040301][T19310] __pte_alloc+0x6d/0x380 [ 1798.040330][T19310] ? __pfx___pte_alloc+0x10/0x10 [ 1798.040368][T19310] ? rcu_read_unlock+0x2d/0xb0 [ 1798.040420][T19310] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1798.040468][T19310] do_anonymous_page+0x1307/0x2050 [ 1798.040532][T19310] ? __pfx_do_anonymous_page+0x10/0x10 [ 1798.040583][T19310] ? pgd_none+0x9f/0xe0 [ 1798.040630][T19310] ? __pfx_pgd_none+0x10/0x10 [ 1798.040681][T19310] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1798.040726][T19310] ? lock_acquire+0x1d1/0x380 [ 1798.040768][T19310] __handle_mm_fault+0x1ff3/0x2f60 [ 1798.040820][T19310] ? lock_vma_under_rcu+0x11d/0x590 [ 1798.040876][T19310] ? __pfx___handle_mm_fault+0x10/0x10 [ 1798.040925][T19310] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1798.040969][T19310] ? lock_vma_under_rcu+0x17c/0x590 [ 1798.041033][T19310] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1798.041085][T19310] handle_mm_fault+0x363/0xa20 [ 1798.041150][T19310] do_user_addr_fault+0x59c/0x12f0 [ 1798.041212][T19310] exc_page_fault+0x6f/0xd0 [ 1798.041243][T19310] asm_exc_page_fault+0x26/0x30 [ 1798.041276][T19310] RIP: 0033:0x7f874505534e [ 1798.041308][T19310] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 1798.041344][T19310] RSP: 002b:00007f8746038470 EFLAGS: 00010206 [ 1798.041373][T19310] RAX: 0000000000e00001 RBX: 00007f8746038530 RCX: 0000000000000056 [ 1798.041393][T19310] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f87460385d0 [ 1798.041412][T19310] RBP: 0000000000000102 R08: 00007f873ae00000 R09: 0000000000e00000 [ 1798.041435][T19310] R10: 0000000000000000 R11: 00007f8746038540 R12: 0000000000000001 [ 1798.041462][T19310] R13: 00007f8745255e40 R14: 0000000000000000 R15: 00007f87460385d0 [ 1798.041512][T19310] [ 1798.043191][T18451] net_ratelimit: 52 callbacks suppressed [ 1799.264205][T19310] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1799.563094][T15127] Bluetooth: hci5: command tx timeout [ 1799.828673][T10959] team0 (unregistering): Port device team_slave_1 removed [ 1800.092787][T10959] team0 (unregistering): Port device team_slave_0 removed [ 1800.375631][T19325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2427'. [ 1800.565006][T19327] loop3: detected capacity change from 0 to 64 [ 1800.571827][T19329] tmpfs: Unknown parameter 'm000000000000000005' [ 1800.768701][T19332] loop5: detected capacity change from 0 to 512 [ 1800.792442][T19332] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.2429: inode has both inline data and extents flags [ 1800.792478][T19332] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1800.792646][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1800.792678][ C0] EXT4-fs (loop5): initial error at time 1792477291: ext4_orphan_get:1403: inode 15 [ 1800.792737][ C0] EXT4-fs (loop5): last error at time 1792477291: ext4_orphan_get:1403: inode 15 [ 1800.861711][T19332] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2429: couldn't read orphan inode 15 (err -117) [ 1800.861761][T19332] loop5: lost filesystem error report for type 5 error -117 [ 1800.911906][T19332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1800.986522][T19323] loop1: detected capacity change from 0 to 32768 [ 1801.037683][T19323] (syz.1.2436,19323,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1801.038431][T19323] (syz.1.2436,19323,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1801.174629][T19323] JBD2: Ignoring recovery information on journal [ 1801.295446][T19323] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1801.643394][T15127] Bluetooth: hci5: command tx timeout [ 1801.657819][T17189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1802.407083][T17200] ocfs2: Unmounting device (7,1) on (node local) [ 1802.973256][T19349] loop1: detected capacity change from 0 to 128 [ 1803.162675][ C0] net_ratelimit: 73 callbacks suppressed [ 1803.287909][T19349] FAULT_INJECTION: forcing a failure. [ 1803.287909][T19349] name failslab, interval 1, probability 5, space 0, times 10000 [ 1803.287950][T19349] CPU: 1 UID: 0 PID: 19349 Comm: syz.1.2432 Tainted: G L syzkaller #0 PREEMPT(full) [ 1803.287994][T19349] Tainted: [L]=SOFTLOCKUP [ 1803.288006][T19349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1803.288024][T19349] Call Trace: [ 1803.288034][T19349] [ 1803.288046][T19349] dump_stack_lvl+0x100/0x190 [ 1803.288092][T19349] should_fail_ex.cold+0x5/0xa [ 1803.288129][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.288171][T19349] should_failslab+0xc2/0x120 [ 1803.288208][T19349] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1803.288240][T19349] ? mas_preallocate+0xc22/0xee0 [ 1803.288281][T19349] mas_preallocate+0xc22/0xee0 [ 1803.288319][T19349] ? __pfx_mas_preallocate+0x10/0x10 [ 1803.288351][T19349] ? rcu_is_watching+0x13/0xc0 [ 1803.288402][T19349] ? vm_area_alloc+0x1f/0x160 [ 1803.288442][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.288478][T19349] ? lockdep_init_map_type+0x5c/0x250 [ 1803.288517][T19349] __mmap_region+0x139f/0x32e0 [ 1803.288570][T19349] ? __pfx___mmap_region+0x10/0x10 [ 1803.288616][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.288655][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.288690][T19349] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1803.288728][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.288763][T19349] ? mas_prev_node+0x1de/0x1270 [ 1803.288809][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.288844][T19349] ? mas_prev_slot+0x768/0x11b0 [ 1803.288910][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.288945][T19349] ? unmapped_area_topdown+0x54e/0x6a0 [ 1803.289014][T19349] ? is_bpf_text_address+0x94/0x1a0 [ 1803.289050][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.289086][T19349] ? kernel_text_address+0x8d/0x100 [ 1803.289184][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.289222][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.289264][T19349] mmap_region+0x3db/0x6d0 [ 1803.289314][T19349] ? __pfx_mmap_region+0x10/0x10 [ 1803.289371][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.289410][T19349] ? thp_get_unmapped_area_vmaflags+0x2a5/0x330 [ 1803.289457][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.289493][T19349] ? cap_mmap_addr+0x4b/0x120 [ 1803.289521][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.289556][T19349] ? security_mmap_addr+0x71/0x1e0 [ 1803.289596][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.289633][T19349] ? __get_unmapped_area+0x255/0x3e0 [ 1803.289672][T19349] do_mmap+0x12c7/0x1c30 [ 1803.289712][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.289747][T19349] ? lock_acquire+0x1d1/0x380 [ 1803.289779][T19349] ? __pfx_do_mmap+0x10/0x10 [ 1803.289811][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.289849][T19349] ? __pfx___might_resched+0x10/0x10 [ 1803.289896][T19349] ? kasan_save_stack+0x30/0x50 [ 1803.289926][T19349] ? kasan_save_track+0x14/0x30 [ 1803.289957][T19349] ? kasan_save_free_info+0x3b/0x70 [ 1803.290002][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.290040][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.290078][T19349] ? __pfx_down_write_killable+0x10/0x10 [ 1803.290126][T19349] vm_mmap_pgoff+0x28d/0x470 [ 1803.290163][T19349] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1803.290211][T19349] ksys_mmap_pgoff+0xe4/0x610 [ 1803.290244][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.290280][T19349] ? lockdep_hardirqs_on+0x7d/0x110 [ 1803.290310][T19349] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1803.290341][T19349] ? __do_sys_memfd_create+0x250/0x3d0 [ 1803.290382][T19349] ? __do_sys_memfd_create+0x283/0x3d0 [ 1803.290422][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.290457][T19349] ? kfree+0x22b/0x6d0 [ 1803.290504][T19349] __x64_sys_mmap+0x125/0x190 [ 1803.290541][T19349] do_syscall_64+0x123/0x790 [ 1803.290575][T19349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.290605][T19349] RIP: 0033:0x7f15a5f9e2c2 [ 1803.290631][T19349] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 1803.290660][T19349] RSP: 002b:00007f15a6f38df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1803.290688][T19349] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f15a5f9e2c2 [ 1803.290708][T19349] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 1803.290727][T19349] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 1803.290746][T19349] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 1803.290765][T19349] R13: 00007f15a6f38ee0 R14: 00007f15a6f38ea0 R15: 0000200000038780 [ 1803.290804][T19349] [ 1803.811646][T19349] FAULT_INJECTION: forcing a failure. [ 1803.811646][T19349] name failslab, interval 1, probability 5, space 0, times 9999 [ 1803.811698][T19349] CPU: 1 UID: 0 PID: 19349 Comm: syz.1.2432 Tainted: G L syzkaller #0 PREEMPT(full) [ 1803.811753][T19349] Tainted: [L]=SOFTLOCKUP [ 1803.811771][T19349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1803.811796][T19349] Call Trace: [ 1803.811810][T19349] [ 1803.811825][T19349] dump_stack_lvl+0x100/0x190 [ 1803.811887][T19349] should_fail_ex.cold+0x5/0xa [ 1803.811932][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.811988][T19349] should_failslab+0xc2/0x120 [ 1803.812038][T19349] __kmalloc_noprof+0xfc/0x840 [ 1803.812077][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.812131][T19349] ? handler_new_ref+0x1ab/0xc60 [ 1803.812202][T19349] handler_new_ref+0x1ab/0xc60 [ 1803.812275][T19349] v4l2_ctrl_new+0xe67/0x23a0 [ 1803.812354][T19349] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1803.812429][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.812485][T19349] v4l2_ctrl_new_std+0x1bb/0x290 [ 1803.812561][T19349] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1803.812623][T19349] ? rcu_is_watching+0x13/0xc0 [ 1803.812680][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.812729][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.812783][T19349] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 1803.812837][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.812886][T19349] ? media_request_object_init+0x105/0x180 [ 1803.812942][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.812997][T19349] vicodec_open+0x1b2/0xf70 [ 1803.813035][T19349] ? kobject_get_unless_zero+0x156/0x200 [ 1803.813091][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.813150][T19349] v4l2_open+0x1d2/0x490 [ 1803.813209][T19349] ? __pfx_v4l2_open+0x10/0x10 [ 1803.813268][T19349] chrdev_open+0x234/0x6a0 [ 1803.813314][T19349] ? __pfx_apparmor_file_open+0x10/0x10 [ 1803.813370][T19349] ? __pfx_chrdev_open+0x10/0x10 [ 1803.813419][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.813467][T19349] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1803.813540][T19349] do_dentry_open+0x6ab/0x14d0 [ 1803.813579][T19349] ? __pfx_chrdev_open+0x10/0x10 [ 1803.813629][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.813684][T19349] vfs_open+0x82/0x3f0 [ 1803.813732][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.813788][T19349] path_openat+0x1a23/0x2450 [ 1803.813845][T19349] ? __pfx_path_openat+0x10/0x10 [ 1803.813908][T19349] do_file_open+0x20e/0x430 [ 1803.813960][T19349] ? __pfx_do_file_open+0x10/0x10 [ 1803.814044][T19349] ? _raw_spin_unlock+0x28/0x50 [ 1803.814102][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.814154][T19349] ? alloc_fd+0x471/0x7a0 [ 1803.814217][T19349] do_sys_openat2+0x10f/0x1e0 [ 1803.814271][T19349] ? __pfx_do_sys_openat2+0x10/0x10 [ 1803.814329][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.814390][T19349] __x64_sys_openat+0x12d/0x210 [ 1803.814446][T19349] ? __pfx___x64_sys_openat+0x10/0x10 [ 1803.814509][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1803.814566][T19349] do_syscall_64+0x123/0x790 [ 1803.814612][T19349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.814653][T19349] RIP: 0033:0x7f15a5f5ed8e [ 1803.814684][T19349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1803.814722][T19349] RSP: 002b:00007f15a6f38b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1803.814761][T19349] RAX: ffffffffffffffda RBX: 00007f15a6f396c0 RCX: 00007f15a5f5ed8e [ 1803.814789][T19349] RDX: 0000000000000002 RSI: 00007f15a6f38c00 RDI: ffffffffffffff9c [ 1803.814816][T19349] RBP: 00007f15a6f38c00 R08: 0000000000000000 R09: 0000000000000000 [ 1803.814842][T19349] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1803.814868][T19349] R13: 00007f15a6226038 R14: 00007f15a6225fa0 R15: 00007fff98f93188 [ 1803.814922][T19349] [ 1804.161334][T19349] FAULT_INJECTION: forcing a failure. [ 1804.161334][T19349] name failslab, interval 1, probability 5, space 0, times 9998 [ 1804.161421][T19349] CPU: 1 UID: 0 PID: 19349 Comm: syz.1.2432 Tainted: G L syzkaller #0 PREEMPT(full) [ 1804.161477][T19349] Tainted: [L]=SOFTLOCKUP [ 1804.161492][T19349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1804.161517][T19349] Call Trace: [ 1804.161534][T19349] [ 1804.161549][T19349] dump_stack_lvl+0x100/0x190 [ 1804.161610][T19349] should_fail_ex.cold+0x5/0xa [ 1804.161655][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.161712][T19349] should_failslab+0xc2/0x120 [ 1804.161762][T19349] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1804.161807][T19349] ? shmem_alloc_inode+0x25/0x50 [ 1804.161851][T19349] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1804.161895][T19349] shmem_alloc_inode+0x25/0x50 [ 1804.161933][T19349] alloc_inode+0x68/0x250 [ 1804.161997][T19349] new_inode+0x22/0x1c0 [ 1804.162056][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.162111][T19349] shmem_get_inode+0x1e3/0xf70 [ 1804.162166][T19349] ? __pfx_shmem_get_inode+0x10/0x10 [ 1804.162210][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.162258][T19349] ? do_raw_spin_unlock+0x145/0x1e0 [ 1804.162313][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.162361][T19349] ? _raw_spin_unlock+0x28/0x50 [ 1804.162428][T19349] shmem_mknod+0x217/0x480 [ 1804.162479][T19349] ? __pfx_shmem_mknod+0x10/0x10 [ 1804.162520][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.162584][T19349] ? __pfx_shmem_create+0x10/0x10 [ 1804.162637][T19349] lookup_open+0x1255/0x1990 [ 1804.162722][T19349] path_openat+0x10a0/0x2450 [ 1804.162779][T19349] ? __pfx_path_openat+0x10/0x10 [ 1804.162843][T19349] do_file_open+0x20e/0x430 [ 1804.162897][T19349] ? __pfx_do_file_open+0x10/0x10 [ 1804.162982][T19349] ? _raw_spin_unlock+0x28/0x50 [ 1804.163040][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.163088][T19349] ? alloc_fd+0x471/0x7a0 [ 1804.163157][T19349] do_sys_openat2+0x10f/0x1e0 [ 1804.163212][T19349] ? __pfx_do_sys_openat2+0x10/0x10 [ 1804.163270][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.163332][T19349] __x64_sys_openat+0x12d/0x210 [ 1804.163389][T19349] ? __pfx___x64_sys_openat+0x10/0x10 [ 1804.163454][T19349] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.163511][T19349] do_syscall_64+0x123/0x790 [ 1804.163559][T19349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.163601][T19349] RIP: 0033:0x7f15a5f9e559 [ 1804.163632][T19349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1804.163673][T19349] RSP: 002b:00007f15a6f39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1804.163711][T19349] RAX: ffffffffffffffda RBX: 00007f15a6225fa0 RCX: 00007f15a5f9e559 [ 1804.163739][T19349] RDX: 0000000000101142 RSI: 000020000000f580 RDI: ffffffffffffff9c [ 1804.163766][T19349] RBP: 00007f15a6035ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1804.163791][T19349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1804.163817][T19349] R13: 00007f15a6226038 R14: 00007f15a6225fa0 R15: 00007fff98f93188 [ 1804.163872][T19349] [ 1805.098595][T19356] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2434'. [ 1805.933483][T19362] tmpfs: Unknown parameter 'm000000000000000005' [ 1806.283043][T19367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2438'. [ 1806.718021][T19370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2439'. [ 1806.718072][T19370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2439'. [ 1807.098744][T19375] tmpfs: Unknown parameter 'm000000000000000005' [ 1807.266689][T19276] rxe_eth0 speed is unknown, defaulting to 1000 [ 1807.266795][T19370] tipc: Started in network mode [ 1807.266831][T19370] tipc: Node identity ac1414aa, cluster identity 4711 [ 1807.267067][T19370] tipc: New replicast peer: 172.20.20.187 [ 1807.267610][T19370] tipc: Enabled bearer , priority 10 [ 1807.511139][T19140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.511398][T19140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.511676][T19140] bridge_slave_0: entered allmulticast mode [ 1807.536913][T19140] bridge_slave_0: entered promiscuous mode [ 1807.547695][T19140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.547929][T19140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.548339][T19140] bridge_slave_1: entered allmulticast mode [ 1807.575524][T19140] bridge_slave_1: entered promiscuous mode [ 1808.206081][T19140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1808.276209][T19140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1808.282778][ C0] net_ratelimit: 86 callbacks suppressed [ 1808.623717][T16895] tipc: Node number set to 2886997162 [ 1809.148474][T19140] team0: Port device team_slave_0 added [ 1809.343359][T19140] team0: Port device team_slave_1 added [ 1809.649885][T19402] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2448'. [ 1810.794719][T19140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1810.794740][T19140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1810.794824][T19140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1810.801538][T19140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1810.801558][T19140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1810.801633][T19140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1811.460400][T19397] loop0: detected capacity change from 0 to 32768 [ 1811.462285][T19407] tmpfs: Unknown parameter 'm000000000000000005' [ 1811.627569][T19397] JBD2: Ignoring recovery information on journal [ 1812.005118][T19397] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1812.024472][T18451] (kworker/u8:7,18451,1):ocfs2_read_blocks_sync:110 ERROR: status = -12 [ 1812.024519][T18451] (kworker/u8:7,18451,1):ocfs2_read_locked_inode:633 ERROR: status = -12 [ 1812.053465][T18451] (kworker/u8:7,18451,1):ocfs2_check_dir_entry:335 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 1812.096370][T19416] loop1: detected capacity change from 0 to 512 [ 1812.216490][T19416] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.2453: inode has both inline data and extents flags [ 1812.216536][T19416] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1812.218587][T19140] hsr_slave_0: entered promiscuous mode [ 1812.219953][T19140] hsr_slave_1: entered promiscuous mode [ 1812.222272][T19416] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2453: couldn't read orphan inode 15 (err -117) [ 1812.222318][T19416] loop1: lost filesystem error report for type 5 error -117 [ 1812.236839][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 1812.236864][ C0] EXT4-fs (loop1): initial error at time 1792477302: ext4_orphan_get:1403: inode 15 [ 1812.236913][ C0] EXT4-fs (loop1): last error at time 1792477302: ext4_orphan_get:1406 [ 1812.342405][T19416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1812.776716][ T31] rpcbind: server 127.0.0.1 not responding, timed out [ 1812.823120][T17471] ocfs2: Unmounting device (7,0) on (node local) [ 1812.884127][T19425] tmpfs: Unknown parameter 'm000000000000000005' [ 1813.079914][T17200] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1813.413255][ T12] net_ratelimit: 59 callbacks suppressed [ 1815.327981][T19446] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2461'. [ 1818.526040][T18543] net_ratelimit: 51 callbacks suppressed [ 1820.528442][T10959] bridge_slave_1: left allmulticast mode [ 1820.528472][T10959] bridge_slave_1: left promiscuous mode [ 1820.528708][T10959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.553930][T19481] tmpfs: Unknown parameter 'm000000000000000005' [ 1820.600345][T10959] bridge_slave_0: left allmulticast mode [ 1820.600367][T10959] bridge_slave_0: left promiscuous mode [ 1820.626066][T10959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.249477][T19490] tmpfs: Unknown parameter 'm000000000000000005' [ 1823.562979][ C0] net_ratelimit: 49 callbacks suppressed [ 1823.814097][T10959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1823.925965][T10959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1823.991094][T10959] bond0 (unregistering): Released all slaves [ 1824.951704][T19521] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2474'. [ 1825.506342][T19513] loop1: detected capacity change from 0 to 32768 [ 1825.588127][T19513] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2473 (19513) [ 1825.666820][T19510] loop3: detected capacity change from 0 to 32768 [ 1825.707018][T19510] (syz.3.2472,19510,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1825.732931][T19510] (syz.3.2472,19510,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1825.759809][T19513] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1825.759856][T19513] BTRFS info (device loop1): using sha256 checksum algorithm [ 1825.916721][T19510] JBD2: Ignoring recovery information on journal [ 1826.123944][T19513] BTRFS info (device loop1): enabling ssd optimizations [ 1826.123979][T19513] BTRFS info (device loop1): turning on async discard [ 1826.124011][T19513] BTRFS info (device loop1): enabling free space tree [ 1826.310303][T19510] JBD2: journal reset failed [ 1826.310317][T19510] (syz.3.2472,19510,0):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 1826.310374][T19510] (syz.3.2472,19510,0):ocfs2_check_volume:2372 ERROR: ocfs2 journal load failed! -4 [ 1826.694732][T17200] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1826.743125][T19554] FAULT_INJECTION: forcing a failure. [ 1826.743125][T19554] name failslab, interval 1, probability 5, space 0, times 9997 [ 1826.743178][T19554] CPU: 1 UID: 0 PID: 19554 Comm: syz.3.2478 Tainted: G L syzkaller #0 PREEMPT(full) [ 1826.743237][T19554] Tainted: [L]=SOFTLOCKUP [ 1826.743252][T19554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1826.743276][T19554] Call Trace: [ 1826.743289][T19554] [ 1826.743304][T19554] dump_stack_lvl+0x100/0x190 [ 1826.743363][T19554] should_fail_ex.cold+0x5/0xa [ 1826.743409][T19554] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1826.743464][T19554] should_failslab+0xc2/0x120 [ 1826.743514][T19554] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1826.743555][T19554] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1826.743603][T19554] ? security_file_alloc+0x34/0x2c0 [ 1826.743673][T19554] security_file_alloc+0x34/0x2c0 [ 1826.743726][T19554] init_file+0x95/0x480 [ 1826.743777][T19554] alloc_empty_file+0x79/0x1c0 [ 1826.743833][T19554] alloc_file_pseudo+0x183/0x290 [ 1826.743889][T19554] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1826.743942][T19554] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1826.744006][T19554] __shmem_file_setup+0x205/0x460 [ 1826.744053][T19554] ? lock_acquire+0x1d1/0x380 [ 1826.744096][T19554] ? __pfx___shmem_file_setup+0x10/0x10 [ 1826.744140][T19554] ? do_raw_spin_lock+0x128/0x260 [ 1826.744191][T19554] ? find_held_lock+0x2b/0x80 [ 1826.744247][T19554] ? alloc_fd+0x471/0x7a0 [ 1826.744293][T19554] ? alloc_fd+0x471/0x7a0 [ 1826.744337][T19554] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1826.744391][T19554] memfd_alloc_file+0x247/0x610 [ 1826.744443][T19554] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1826.744490][T19554] ? _raw_spin_unlock+0x28/0x50 [ 1826.744549][T19554] ? __pfx_memfd_alloc_file+0x10/0x10 [ 1826.744616][T19554] __do_sys_memfd_create+0x236/0x3d0 [ 1826.744680][T19554] do_syscall_64+0x123/0x790 [ 1826.744725][T19554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.744765][T19554] RIP: 0033:0x7f495a59e559 [ 1826.744796][T19554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1826.744833][T19554] RSP: 002b:00007f495b485e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1826.744870][T19554] RAX: ffffffffffffffda RBX: 00000000000055a8 RCX: 00007f495a59e559 [ 1826.744897][T19554] RDX: 00007f495b485ee0 RSI: 0000000000000000 RDI: 00007f495a635cb8 [ 1826.744922][T19554] RBP: 00002000000389c0 R08: 00000000ffffffff R09: 0000000000000000 [ 1826.744948][T19554] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000038740 [ 1826.744973][T19554] R13: 00007f495b485ee0 R14: 00007f495b485ea0 R15: 0000200000038780 [ 1826.745024][T19554] [ 1828.684643][ C1] net_ratelimit: 56 callbacks suppressed [ 1831.804183][T19576] tmpfs: Unknown parameter 'm000000000000000005' [ 1832.531935][T19579] loop1: detected capacity change from 0 to 4096 [ 1832.645406][T10959] hsr_slave_0: left promiscuous mode [ 1832.710858][T10959] hsr_slave_1: left promiscuous mode [ 1832.712466][T10959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1832.781452][T10959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1833.882690][ C0] net_ratelimit: 33 callbacks suppressed [ 1835.760004][T10959] team0 (unregistering): Port device team_slave_1 removed [ 1835.928336][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1835.940620][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1835.942098][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1835.957971][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1835.961546][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1836.064045][T10959] team0 (unregistering): Port device team_slave_0 removed [ 1836.431525][T19611] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2488'. [ 1837.506339][T19618] loop0: detected capacity change from 0 to 512 [ 1837.725625][T19618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1837.725732][T19618] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1837.986803][T17471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1838.044652][ T5622] Bluetooth: hci6: command tx timeout [ 1838.354723][T17115] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1838.454758][T19276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.454877][T19276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.455078][T19276] bridge_slave_0: entered allmulticast mode [ 1838.458324][T19276] bridge_slave_0: entered promiscuous mode [ 1838.521077][T17115] usb 2-1: Using ep0 maxpacket: 32 [ 1838.544264][T17115] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1838.563827][T17115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.573190][T19276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.573351][T19276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.582864][T19276] bridge_slave_1: entered allmulticast mode [ 1838.606041][T17115] usb 2-1: config 0 descriptor?? [ 1838.621577][T19276] bridge_slave_1: entered promiscuous mode [ 1838.645061][T17115] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1838.747219][T19629] tmpfs: Unknown parameter 'm000000000000000005' [ 1839.105461][T19627] loop0: detected capacity change from 0 to 32768 [ 1839.206574][T19627] JBD2: Ignoring recovery information on journal [ 1839.255607][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2494'. [ 1839.323750][T17115] gspca_sunplus: reg_r err -32 [ 1839.323848][T17115] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 1839.482719][ C1] net_ratelimit: 60 callbacks suppressed [ 1839.539795][T19627] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1839.607549][T18543] (kworker/u8:8,18543,1):ocfs2_read_blocks_sync:110 ERROR: status = -12 [ 1839.607595][T18543] (kworker/u8:8,18543,1):ocfs2_read_locked_inode:633 ERROR: status = -12 [ 1839.607886][T18543] (kworker/u8:8,18543,1):ocfs2_check_dir_entry:335 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 1839.968425][T17471] ocfs2: Unmounting device (7,0) on (node local) [ 1840.123267][ T5622] Bluetooth: hci6: command tx timeout [ 1840.351009][T19276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1840.378109][T13894] usb 2-1: USB disconnect, device number 27 [ 1840.454637][T19276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1840.553815][T19641] tmpfs: Unknown parameter 'm000000000000000005' [ 1842.246642][ T5622] Bluetooth: hci6: command tx timeout [ 1842.630057][T19654] loop3: detected capacity change from 0 to 128 [ 1843.039550][T19276] team0: Port device team_slave_0 added [ 1843.106839][T19276] team0: Port device team_slave_1 added [ 1843.436581][T19663] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2500'. [ 1843.436658][T19663] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2500'. [ 1844.288060][ T5622] Bluetooth: hci6: command tx timeout [ 1845.242682][ C1] net_ratelimit: 60 callbacks suppressed [ 1846.266441][T19276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1846.266458][T19276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.266493][T19276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1846.321312][T19276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1846.321327][T19276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.321388][T19276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1847.104198][T19682] tmpfs: Unknown parameter 'm000000000000000005' [ 1848.049399][T19276] hsr_slave_0: entered promiscuous mode [ 1848.083861][T19276] hsr_slave_1: entered promiscuous mode [ 1848.088980][T19276] debugfs: 'hsr0' already exists in 'hsr' [ 1848.089000][T19276] Cannot create hsr debugfs directory [ 1848.351166][T19698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2508'. [ 1848.707359][T19606] rxe_eth0 speed is unknown, defaulting to 1000 [ 1849.893436][T19710] loop0: detected capacity change from 0 to 128 [ 1850.235915][T19714] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2512'. [ 1850.235965][T19714] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2512'. [ 1850.396627][T15127] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1850.410702][T15127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1850.412584][T15127] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1850.443425][ C1] net_ratelimit: 87 callbacks suppressed [ 1850.443648][T15127] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1850.462790][T15127] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1850.521658][T19710] FAULT_INJECTION: forcing a failure. [ 1850.521658][T19710] name failslab, interval 1, probability 5, space 0, times 10000 [ 1850.521710][T19710] CPU: 0 UID: 0 PID: 19710 Comm: syz.0.2511 Tainted: G L syzkaller #0 PREEMPT(full) [ 1850.521766][T19710] Tainted: [L]=SOFTLOCKUP [ 1850.521782][T19710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1850.521805][T19710] Call Trace: [ 1850.521818][T19710] [ 1850.521833][T19710] dump_stack_lvl+0x100/0x190 [ 1850.521896][T19710] should_fail_ex.cold+0x5/0xa [ 1850.521942][T19710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.521997][T19710] should_failslab+0xc2/0x120 [ 1850.522047][T19710] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1850.522090][T19710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.522139][T19710] ? security_file_alloc+0x34/0x2c0 [ 1850.522201][T19710] security_file_alloc+0x34/0x2c0 [ 1850.522261][T19710] init_file+0x95/0x480 [ 1850.522315][T19710] alloc_empty_file+0x79/0x1c0 [ 1850.522371][T19710] path_openat+0xdb/0x2450 [ 1850.522426][T19710] ? __pfx_path_openat+0x10/0x10 [ 1850.522489][T19710] do_file_open+0x20e/0x430 [ 1850.522543][T19710] ? __pfx_do_file_open+0x10/0x10 [ 1850.522630][T19710] ? _raw_spin_unlock+0x28/0x50 [ 1850.522692][T19710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.522753][T19710] ? alloc_fd+0x471/0x7a0 [ 1850.522818][T19710] do_sys_openat2+0x10f/0x1e0 [ 1850.522874][T19710] ? __pfx_do_sys_openat2+0x10/0x10 [ 1850.522931][T19710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.522979][T19710] ? find_held_lock+0x2b/0x80 [ 1850.523051][T19710] __x64_sys_openat+0x12d/0x210 [ 1850.523108][T19710] ? __pfx___x64_sys_openat+0x10/0x10 [ 1850.523172][T19710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1850.523236][T19710] do_syscall_64+0x123/0x790 [ 1850.523282][T19710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.523324][T19710] RIP: 0033:0x7fceff99e559 [ 1850.523355][T19710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1850.523392][T19710] RSP: 002b:00007fcf00814028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1850.523430][T19710] RAX: ffffffffffffffda RBX: 00007fceffc25fa0 RCX: 00007fceff99e559 [ 1850.523457][T19710] RDX: 0000000000101142 RSI: 000020000000f580 RDI: ffffffffffffff9c [ 1850.523482][T19710] RBP: 00007fceffa35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1850.523507][T19710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1850.523531][T19710] R13: 00007fceffc26038 R14: 00007fceffc25fa0 R15: 00007ffd4b9ac9b8 [ 1850.523583][T19710] [ 1851.425396][T13894] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1851.524387][T19724] tmpfs: Unknown parameter 'm000000000000000005' [ 1851.604735][T13894] usb 2-1: Using ep0 maxpacket: 32 [ 1851.605627][T13894] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1851.610102][T13894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.718692][T13894] usb 2-1: config 0 descriptor?? [ 1851.822113][T13894] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1852.052771][T17116] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1852.338084][T17116] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1852.340083][T17116] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1852.340134][T17116] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1852.340263][T17116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.463683][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.463791][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.052748][T15127] Bluetooth: hci7: command tx timeout [ 1853.146120][T13894] gspca_sunplus: reg_r err -110 [ 1853.146212][T13894] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1853.186367][T17116] usb 6-1: config 0 descriptor?? [ 1853.714424][T19744] tmpfs: Unknown parameter 'm000000000000000005' [ 1854.083035][T19720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2510'. [ 1854.936282][T13896] usb 2-1: USB disconnect, device number 28 [ 1855.086372][T15127] Bluetooth: hci7: command tx timeout [ 1855.559371][T17116] usbhid 6-1:0.0: can't add hid device: -71 [ 1855.559536][T17116] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1855.587474][ T12] bridge_slave_1: left allmulticast mode [ 1855.587504][ T12] bridge_slave_1: left promiscuous mode [ 1855.587723][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.603734][T17116] usb 6-1: USB disconnect, device number 44 [ 1855.642676][ C0] net_ratelimit: 56 callbacks suppressed [ 1855.730079][ T12] bridge_slave_0: left allmulticast mode [ 1855.730109][ T12] bridge_slave_0: left promiscuous mode [ 1855.742790][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.970607][T19777] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2524'. [ 1856.970670][T19777] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2524'. [ 1857.172887][T15127] Bluetooth: hci7: command tx timeout [ 1857.386921][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1857.439902][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1857.524245][ T12] bond0 (unregistering): Released all slaves [ 1858.059493][T19783] loop1: detected capacity change from 0 to 8 [ 1858.137668][T19794] loop0: detected capacity change from 0 to 128 [ 1858.343594][T19794] FAULT_INJECTION: forcing a failure. [ 1858.343594][T19794] name failslab, interval 1, probability 5, space 0, times 10000 [ 1858.343683][T19794] CPU: 1 UID: 0 PID: 19794 Comm: syz.0.2528 Tainted: G L syzkaller #0 PREEMPT(full) [ 1858.343728][T19794] Tainted: [L]=SOFTLOCKUP [ 1858.343739][T19794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1858.343757][T19794] Call Trace: [ 1858.343768][T19794] [ 1858.343780][T19794] dump_stack_lvl+0x100/0x190 [ 1858.343828][T19794] should_fail_ex.cold+0x5/0xa [ 1858.343861][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.343902][T19794] should_failslab+0xc2/0x120 [ 1858.343938][T19794] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1858.343972][T19794] ? shmem_alloc_inode+0x25/0x50 [ 1858.344003][T19794] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1858.344035][T19794] shmem_alloc_inode+0x25/0x50 [ 1858.344064][T19794] alloc_inode+0x68/0x250 [ 1858.344111][T19794] new_inode+0x22/0x1c0 [ 1858.344160][T19794] shmem_get_inode+0x1e3/0xf70 [ 1858.344194][T19794] ? __lock_acquire+0x5c0/0x1f40 [ 1858.344229][T19794] ? __pfx_shmem_get_inode+0x10/0x10 [ 1858.344260][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.344307][T19794] __shmem_file_setup+0x168/0x460 [ 1858.344341][T19794] ? lock_acquire+0x1d1/0x380 [ 1858.344372][T19794] ? __pfx___shmem_file_setup+0x10/0x10 [ 1858.344405][T19794] ? do_raw_spin_lock+0x128/0x260 [ 1858.344443][T19794] ? find_held_lock+0x2b/0x80 [ 1858.344485][T19794] ? alloc_fd+0x471/0x7a0 [ 1858.344520][T19794] ? alloc_fd+0x471/0x7a0 [ 1858.344553][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.344594][T19794] memfd_alloc_file+0x247/0x610 [ 1858.344633][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.344668][T19794] ? _raw_spin_unlock+0x28/0x50 [ 1858.344713][T19794] ? __pfx_memfd_alloc_file+0x10/0x10 [ 1858.344769][T19794] __do_sys_memfd_create+0x236/0x3d0 [ 1858.344818][T19794] do_syscall_64+0x123/0x790 [ 1858.344862][T19794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.344893][T19794] RIP: 0033:0x7fceff99e559 [ 1858.344917][T19794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1858.344945][T19794] RSP: 002b:00007fcf00813e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1858.344974][T19794] RAX: ffffffffffffffda RBX: 00000000000055a8 RCX: 00007fceff99e559 [ 1858.344994][T19794] RDX: 00007fcf00813ee0 RSI: 0000000000000000 RDI: 00007fceffa35cb8 [ 1858.345013][T19794] RBP: 00002000000389c0 R08: 00000000ffffffff R09: ffffffffffffffff [ 1858.345033][T19794] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000038740 [ 1858.345052][T19794] R13: 00007fcf00813ee0 R14: 00007fcf00813ea0 R15: 0000200000038780 [ 1858.345091][T19794] [ 1858.621519][T19794] FAULT_INJECTION: forcing a failure. [ 1858.621519][T19794] name failslab, interval 1, probability 5, space 0, times 9999 [ 1858.621569][T19794] CPU: 0 UID: 0 PID: 19794 Comm: syz.0.2528 Tainted: G L syzkaller #0 PREEMPT(full) [ 1858.621621][T19794] Tainted: [L]=SOFTLOCKUP [ 1858.621637][T19794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1858.621660][T19794] Call Trace: [ 1858.621674][T19794] [ 1858.621689][T19794] dump_stack_lvl+0x100/0x190 [ 1858.621747][T19794] should_fail_ex.cold+0x5/0xa [ 1858.621791][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.621845][T19794] should_failslab+0xc2/0x120 [ 1858.621894][T19794] __kvmalloc_node_noprof+0x113/0x9b0 [ 1858.621938][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.621984][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.622032][T19794] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 1858.622101][T19794] v4l2_ctrl_new+0x4a6/0x23a0 [ 1858.622177][T19794] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1858.622238][T19794] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1858.622310][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.622364][T19794] v4l2_ctrl_new_std+0x1bb/0x290 [ 1858.622439][T19794] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1858.622496][T19794] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1858.622569][T19794] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 1858.622623][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.622669][T19794] ? media_request_object_init+0x105/0x180 [ 1858.622742][T19794] vicodec_open+0x1d9/0xf70 [ 1858.622782][T19794] ? kobject_get_unless_zero+0x156/0x200 [ 1858.622835][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.622890][T19794] v4l2_open+0x1d2/0x490 [ 1858.622949][T19794] ? __pfx_v4l2_open+0x10/0x10 [ 1858.623006][T19794] chrdev_open+0x234/0x6a0 [ 1858.623051][T19794] ? __pfx_apparmor_file_open+0x10/0x10 [ 1858.623105][T19794] ? __pfx_chrdev_open+0x10/0x10 [ 1858.623152][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.623199][T19794] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1858.623275][T19794] do_dentry_open+0x6ab/0x14d0 [ 1858.623313][T19794] ? __pfx_chrdev_open+0x10/0x10 [ 1858.623361][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.623414][T19794] vfs_open+0x82/0x3f0 [ 1858.623462][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.623516][T19794] path_openat+0x1a23/0x2450 [ 1858.623571][T19794] ? __pfx_path_openat+0x10/0x10 [ 1858.623633][T19794] do_file_open+0x20e/0x430 [ 1858.623684][T19794] ? __pfx_do_file_open+0x10/0x10 [ 1858.623766][T19794] ? _raw_spin_unlock+0x28/0x50 [ 1858.623822][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.623869][T19794] ? alloc_fd+0x471/0x7a0 [ 1858.623930][T19794] do_sys_openat2+0x10f/0x1e0 [ 1858.623982][T19794] ? __pfx_do_sys_openat2+0x10/0x10 [ 1858.624053][T19794] __x64_sys_openat+0x12d/0x210 [ 1858.624107][T19794] ? __pfx___x64_sys_openat+0x10/0x10 [ 1858.624170][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1858.624230][T19794] do_syscall_64+0x123/0x790 [ 1858.624275][T19794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.624316][T19794] RIP: 0033:0x7fceff95ed8e [ 1858.624347][T19794] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1858.624384][T19794] RSP: 002b:00007fcf00813b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1858.624421][T19794] RAX: ffffffffffffffda RBX: 00007fcf008146c0 RCX: 00007fceff95ed8e [ 1858.624448][T19794] RDX: 0000000000000002 RSI: 00007fcf00813c00 RDI: ffffffffffffff9c [ 1858.624474][T19794] RBP: 00007fcf00813c00 R08: 0000000000000000 R09: 0000000000000000 [ 1858.624498][T19794] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1858.624524][T19794] R13: 00007fceffc26038 R14: 00007fceffc25fa0 R15: 00007ffd4b9ac9b8 [ 1858.624576][T19794] [ 1858.750625][T19783] SQUASHFS error: xz decompression failed, data probably corrupt [ 1858.750671][T19783] SQUASHFS error: Failed to read block 0xa8: -5 [ 1859.272795][T15127] Bluetooth: hci7: command tx timeout [ 1859.405868][T19783] SQUASHFS error: xz decompression failed, data probably corrupt [ 1859.405912][T19783] SQUASHFS error: Failed to read block 0xa8: -5 [ 1859.407613][ T30] audit: type=1800 audit(1792477349.634:18): pid=19783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2526" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 1860.001119][T19808] loop5: detected capacity change from 0 to 8 [ 1860.128922][T19798] loop0: detected capacity change from 0 to 32768 [ 1860.141953][T19798] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2528 (19798) [ 1860.281047][T19798] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1860.281091][T19798] BTRFS info (device loop0): using sha256 checksum algorithm [ 1860.644093][T19798] BTRFS info (device loop0): enabling ssd optimizations [ 1860.644121][T19798] BTRFS info (device loop0): turning on async discard [ 1860.644152][T19798] BTRFS info (device loop0): enabling free space tree [ 1860.644798][T19824] tmpfs: Unknown parameter 'm000000000000000005' [ 1860.910093][T19794] FAULT_INJECTION: forcing a failure. [ 1860.910093][T19794] name failslab, interval 1, probability 5, space 0, times 9998 [ 1860.910144][T19794] CPU: 1 UID: 0 PID: 19794 Comm: syz.0.2528 Tainted: G L syzkaller #0 PREEMPT(full) [ 1860.910189][T19794] Tainted: [L]=SOFTLOCKUP [ 1860.910201][T19794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1860.910220][T19794] Call Trace: [ 1860.910234][T19794] [ 1860.910246][T19794] dump_stack_lvl+0x100/0x190 [ 1860.910291][T19794] should_fail_ex.cold+0x5/0xa [ 1860.910325][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1860.910366][T19794] should_failslab+0xc2/0x120 [ 1860.910403][T19794] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1860.910435][T19794] ? __kernfs_new_node+0xd2/0xa10 [ 1860.910493][T19794] __kernfs_new_node+0xd2/0xa10 [ 1860.910544][T19794] ? __pfx___kernfs_new_node+0x10/0x10 [ 1860.910607][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1860.910644][T19794] ? lock_acquire+0x1d1/0x380 [ 1860.910676][T19794] ? kernfs_root+0x23/0x2a0 [ 1860.910717][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1860.910754][T19794] ? find_held_lock+0x2b/0x80 ** 143 printk messages dropped ** ** 41 printk messages dropped ** [ 1860.944929][T19794] kobject: kobject_add_internal failed for qgroups (error: -12 parent: 395ef67a-297e-477c-816d-cd80a5b93e5d) [ 1860.955434][T19794] ------------[ cut here ]------------ [ 1860.955483][T19794] kernfs: can not remove 'enabled', no directory [ 1860.955500][T19794] WARNING: fs/kernfs/dir.c:1785 at kernfs_remove_by_name_ns+0x111/0x120, CPU#1: syz.0.2528/19794 [ 1861.117093][T19794] Modules linked in: [ 1861.121043][T19794] CPU: 1 UID: 0 PID: 19794 Comm: syz.0.2528 Tainted: G L syzkaller #0 PREEMPT(full) [ 1861.132110][T19794] Tainted: [L]=SOFTLOCKUP [ 1861.136463][T19794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1861.147332][T19794] RIP: 0010:kernfs_remove_by_name_ns+0x114/0x120 [ 1861.153732][T19794] Code: ff 48 89 df e8 5d 8e ff ff 48 89 ef e8 55 c5 20 ff 4c 89 e7 e8 bd d8 20 ff eb af e8 c6 6d 46 ff 48 8d 3d 8f 08 86 0f 4c 89 ee <67> 48 0f b9 3a eb c4 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 1861.173432][T19794] RSP: 0018:ffffc900047af928 EFLAGS: 00010287 [ 1861.179542][T19794] RAX: 000000000002d75a RBX: 0000000000000000 RCX: ffffc900042f1000 [ 1861.187715][T19794] RDX: 0000000000080000 RSI: ffffffff8c4a9fa0 RDI: ffffffff924be1a0 [ 1861.195725][T19794] RBP: ffffffff907146a0 R08: 0000000000000005 R09: 0000000000000000 [ 1861.203732][T19794] R10: 00000000fffffff4 R11: 0000000000000001 R12: 0000000000000000 [ 1861.211720][T19794] R13: ffffffff8c4a9fa0 R14: 0000000000000000 R15: ffffc900047afb18 [ 1861.219751][T19794] FS: 00007fcf008146c0(0000) GS:ffff888122a44000(0000) knlGS:0000000000000000 [ 1861.228724][T19794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1861.235354][T19794] CR2: 000000110c3d8895 CR3: 000000005630b000 CR4: 0000000000350ef0 [ 1861.243441][T19794] Call Trace: [ 1861.247519][T19794] [ 1861.250472][T19794] remove_files+0x96/0x1c0 [ 1861.254950][T19794] sysfs_remove_group+0x8b/0x1b0 [ 1861.259930][T19794] sysfs_remove_groups+0x60/0xb0 [ 1861.264936][T19794] __kobject_del+0x89/0x220 [ 1861.269475][T19794] kobject_del+0x3f/0x60 [ 1861.273799][T19794] btrfs_sysfs_del_qgroups+0x11b/0x1f0 [ 1861.279312][T19794] btrfs_sysfs_add_qgroups+0x1d2/0x230 [ 1861.284815][T19794] btrfs_quota_enable+0x323/0x1650 [ 1861.289972][T19794] ? __pfx_btrfs_quota_enable+0x10/0x10 [ 1861.295569][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.301243][T19794] ? lock_acquire+0x1d1/0x380 [ 1861.305988][T19794] ? btrfs_ioctl+0x4cec/0x61b0 [ 1861.310791][T19794] ? __entry_text_end+0x102035/0x102039 [ 1861.316394][T19794] ? __pfx___might_resched+0x10/0x10 [ 1861.321720][T19794] ? __might_fault+0xc5/0x140 [ 1861.326479][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.332153][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.337864][T19794] ? down_write+0x146/0x1f0 [ 1861.342397][T19794] ? __pfx_down_write+0x10/0x10 [ 1861.347304][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.353564][T19794] ? _copy_from_user+0x59/0xd0 [ 1861.358583][T19794] btrfs_ioctl+0x4cf7/0x61b0 [ 1861.363254][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.368951][T19794] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1861.375000][T19794] ? __pfx_futex_wait+0x10/0x10 [ 1861.379880][T19794] ? __pfx_btrfs_ioctl+0x10/0x10 [ 1861.384877][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.390540][T19794] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1861.396484][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.402146][T19794] ? do_vfs_ioctl+0x226/0x13e0 [ 1861.407266][T19794] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1861.412425][T19794] ? __fget_files+0x34/0x3d0 [ 1861.412808][ C0] net_ratelimit: 83 callbacks suppressed [ 1861.422826][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.428506][T19794] ? find_held_lock+0x2b/0x80 [ 1861.433281][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.438946][T19794] ? hook_file_ioctl_common+0x140/0x440 [ 1861.444578][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.451214][T19794] ? __fget_files+0x21f/0x3d0 [ 1861.455987][T19794] ? __pfx_btrfs_ioctl+0x10/0x10 [ 1861.460990][T19794] __x64_sys_ioctl+0x18e/0x210 [ 1861.465846][T19794] do_syscall_64+0x123/0x790 [ 1861.470467][T19794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.476411][T19794] RIP: 0033:0x7fceff99e559 [ 1861.480849][T19794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1861.500938][T19794] RSP: 002b:00007fcf00814028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.509421][T19794] RAX: ffffffffffffffda RBX: 00007fceffc25fa0 RCX: 00007fceff99e559 [ 1861.517433][T19794] RDX: 0000200000005cc0 RSI: 00000000c0109428 RDI: 0000000000000005 [ 1861.525460][T19794] RBP: 00007fceffa35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1861.533510][T19794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1861.541503][T19794] R13: 00007fceffc26038 R14: 00007fceffc25fa0 R15: 00007ffd4b9ac9b8 [ 1861.549544][T19794] [ 1861.553668][T19794] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1861.560966][T19794] CPU: 1 UID: 0 PID: 19794 Comm: syz.0.2528 Tainted: G L syzkaller #0 PREEMPT(full) [ 1861.571924][T19794] Tainted: [L]=SOFTLOCKUP [ 1861.576235][T19794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1861.586284][T19794] Call Trace: [ 1861.589553][T19794] [ 1861.592473][T19794] dump_stack_lvl+0x100/0x190 [ 1861.597164][T19794] vpanic+0x553/0x970 [ 1861.601145][T19794] ? __pfx_vpanic+0x10/0x10 [ 1861.605659][T19794] panic+0xd1/0xe0 [ 1861.609381][T19794] ? __pfx_panic+0x10/0x10 [ 1861.613813][T19794] check_panic_on_warn.cold+0x19/0x34 [ 1861.619188][T19794] ? kernfs_remove_by_name_ns+0x111/0x120 [ 1861.624908][T19794] __warn.cold+0x191/0x318 [ 1861.629328][T19794] __report_bug+0x30f/0x440 [ 1861.633829][T19794] ? kernfs_remove_by_name_ns+0x111/0x120 [ 1861.639552][T19794] ? __pfx___report_bug+0x10/0x10 [ 1861.644584][T19794] ? vprintk_emit+0x1c9/0x6b0 [ 1861.649277][T19794] ? __pfx_vprintk_emit+0x10/0x10 [ 1861.654312][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.659957][T19794] report_bug_entry+0xe2/0x290 [ 1861.664721][T19794] ? kernfs_remove_by_name_ns+0x114/0x120 [ 1861.670447][T19794] handle_bug+0x1cd/0x2a0 [ 1861.674786][T19794] exc_invalid_op+0x17/0x50 [ 1861.679294][T19794] asm_exc_invalid_op+0x1a/0x20 [ 1861.684144][T19794] RIP: 0010:kernfs_remove_by_name_ns+0x114/0x120 [ 1861.690473][T19794] Code: ff 48 89 df e8 5d 8e ff ff 48 89 ef e8 55 c5 20 ff 4c 89 e7 e8 bd d8 20 ff eb af e8 c6 6d 46 ff 48 8d 3d 8f 08 86 0f 4c 89 ee <67> 48 0f b9 3a eb c4 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 1861.710080][T19794] RSP: 0018:ffffc900047af928 EFLAGS: 00010287 [ 1861.716161][T19794] RAX: 000000000002d75a RBX: 0000000000000000 RCX: ffffc900042f1000 [ 1861.724148][T19794] RDX: 0000000000080000 RSI: ffffffff8c4a9fa0 RDI: ffffffff924be1a0 [ 1861.732116][T19794] RBP: ffffffff907146a0 R08: 0000000000000005 R09: 0000000000000000 [ 1861.740084][T19794] R10: 00000000fffffff4 R11: 0000000000000001 R12: 0000000000000000 [ 1861.748048][T19794] R13: ffffffff8c4a9fa0 R14: 0000000000000000 R15: ffffc900047afb18 [ 1861.756067][T19794] ? kernfs_remove_by_name_ns+0x10a/0x120 [ 1861.761793][T19794] remove_files+0x96/0x1c0 [ 1861.766224][T19794] sysfs_remove_group+0x8b/0x1b0 [ 1861.771177][T19794] sysfs_remove_groups+0x60/0xb0 [ 1861.776133][T19794] __kobject_del+0x89/0x220 [ 1861.780648][T19794] kobject_del+0x3f/0x60 [ 1861.784920][T19794] btrfs_sysfs_del_qgroups+0x11b/0x1f0 [ 1861.790382][T19794] btrfs_sysfs_add_qgroups+0x1d2/0x230 [ 1861.795845][T19794] btrfs_quota_enable+0x323/0x1650 [ 1861.800974][T19794] ? __pfx_btrfs_quota_enable+0x10/0x10 [ 1861.806529][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.812167][T19794] ? lock_acquire+0x1d1/0x380 [ 1861.816850][T19794] ? btrfs_ioctl+0x4cec/0x61b0 [ 1861.821625][T19794] ? __entry_text_end+0x102035/0x102039 [ 1861.827181][T19794] ? __pfx___might_resched+0x10/0x10 [ 1861.832482][T19794] ? __might_fault+0xc5/0x140 [ 1861.837176][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.842819][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.848455][T19794] ? down_write+0x146/0x1f0 [ 1861.852965][T19794] ? __pfx_down_write+0x10/0x10 [ 1861.857819][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.863454][T19794] ? _copy_from_user+0x59/0xd0 [ 1861.868225][T19794] btrfs_ioctl+0x4cf7/0x61b0 [ 1861.872822][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.878463][T19794] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1861.884469][T19794] ? __pfx_futex_wait+0x10/0x10 [ 1861.889320][T19794] ? __pfx_btrfs_ioctl+0x10/0x10 [ 1861.894272][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.899911][T19794] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1861.905812][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.911452][T19794] ? do_vfs_ioctl+0x226/0x13e0 [ 1861.916241][T19794] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1861.921292][T19794] ? __fget_files+0x34/0x3d0 [ 1861.925891][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.931529][T19794] ? find_held_lock+0x2b/0x80 [ 1861.936220][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.941860][T19794] ? hook_file_ioctl_common+0x140/0x440 [ 1861.947423][T19794] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1861.953063][T19794] ? __fget_files+0x21f/0x3d0 [ 1861.957756][T19794] ? __pfx_btrfs_ioctl+0x10/0x10 [ 1861.962712][T19794] __x64_sys_ioctl+0x18e/0x210 [ 1861.967547][T19794] do_syscall_64+0x123/0x790 [ 1861.972145][T19794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.978045][T19794] RIP: 0033:0x7fceff99e559 [ 1861.982457][T19794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1862.002066][T19794] RSP: 002b:00007fcf00814028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1862.010478][T19794] RAX: ffffffffffffffda RBX: 00007fceffc25fa0 RCX: 00007fceff99e559 [ 1862.018449][T19794] RDX: 0000200000005cc0 RSI: 00000000c0109428 RDI: 0000000000000005 [ 1862.026428][T19794] RBP: 00007fceffa35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1862.034394][T19794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1862.042358][T19794] R13: 00007fceffc26038 R14: 00007fceffc25fa0 R15: 00007ffd4b9ac9b8 [ 1862.050343][T19794] [ 1862.053574][T19794] Kernel Offset: disabled [ 1862.057893][T19794] Rebooting in 86400 seconds..