last executing test programs: 2m41.333286592s ago: executing program 4 (id=258): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0x9, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @random="a214892ec085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @remote, @mcast1}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000280)=0x6c, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x8000, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x3ffffffe}], 0x1, 0x40002000, 0x0) r2 = io_uring_setup(0x3266, &(0x7f00000004c0)={0x0, 0xe59b, 0x10000, 0x2, 0x3ad}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000880)={0x0, 0x4d87, 0x2000, 0x3, 0x1af}, 0x1) r3 = memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2) r4 = signalfd4(r3, &(0x7f0000000140), 0x8, 0x800) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x9, 0x38, 0xca, 0x3}]}, 0x10) pwrite64(r3, 0x0, 0x0, 0x3fff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000100)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2m39.399921773s ago: executing program 4 (id=266): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) 2m38.645195734s ago: executing program 4 (id=272): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x4) (async) sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x40004) (async) sendmsg$nl_route_sched(r4, 0x0, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="0000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x240080c5}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="0000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x240080c5}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, 0x0, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ptrace(0x10, 0x0) (async) ptrace(0x10, 0x0) ptrace$setsig(0x4203, 0x0, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) (async) ptrace$setsig(0x4203, 0x0, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x1, {0x1, 0xf0, 0x3}, {0x2, 0xff, 0x3}}, {0x1, 0x0, {0x0, 0x1, 0x2}, {0x1, 0xf0, 0x3}, 0xff, 0xfd}, {0x1, 0x3, {0x2}, {0x0, 0x1, 0x4}, 0xfe, 0xfe}, {0x1, 0x2, {0x1, 0xf, 0x6fc0af36462a8085}, {0x0, 0x0, 0x4}, 0x2, 0x2}, {0x3, 0x2, {0x0, 0xff}, {0x2, 0x1}, 0xff, 0x2}], 0xa0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) 2m35.237784211s ago: executing program 4 (id=288): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000380)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x86l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00\xd7\xa7,9\xaf\x05\x19+\'\xe8d\x15\a\xa5\xe0\xe5G\a0\x18\x8b\x8e\x10.\x01\xe7\x87*1\xf8\xbd\xa7\xd0\xaa\xa0\xf1\x1e\xf7\xc4\x00\xe6E:\x10Z\x95\xbb-\xc0\xd3\rk\xef\xb9\x98\xfe\x95\x9f\xa9\xbf\xbaLr\xff\x1aE0M/1Y;\xed\xbe\xce\xd4lX\x924\xb9>\x90\xb7\x92e\x84\x98\xd7\v\x89\xa2*BD\xb6}5\xff\xda`\xeaf\x00\x00\x00\x00\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0xbd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="05000100000000003f4413bdb3da7d107da9cdabb3c4bf76ac80847236c462ee5c090a60b20a50c1926203c0f9dcb62fc5d586b815a582f6e08a6df60dec9869"], 0x48, 0x3) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='./file0\x00', 0x10001, &(0x7f0000000980)=ANY=[@ANYBLOB='time_offset=0x0000000000000004,discard,utf8,iocharset=macromnn,allow_utime=0000000!000000000000312,errors=remount-ro,time_offset=0x0000000000000002,fmask=00000000000000000000076,namecase=1,errors=remount-ro,discard,async,\x00'], 0x0, 0x1535, &(0x7f0000001380)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x140, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x5, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (fail_nth: 2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x48, &(0x7f0000000a80)={@multicast, @random="9bfeeb0dff64", @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xe, 0x3a, 0x1, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x8, 0x1, "2c468f01af3e"}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 2m32.940169086s ago: executing program 4 (id=297): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) splice(r2, 0x0, r2, 0x0, 0x7, 0x6) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000000c0)={0xfffffffffffffffc, 0x8, '\x00', 0x0, &(0x7f0000000080)=[0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000340)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@fatal_errors_bug}, {@ssd}, {@compress_force}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ioprio_set$pid(0x3, r4, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) ioprio_set$pid(0x2, 0x0, 0x0) write$char_usb(r5, &(0x7f0000001e00)="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", 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r4], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r6, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r7, r7, 0x0, 0xe3aa6ea) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x3, 0x1ff, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x80000000000007, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x3, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, 0x0, 0x7f03) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001d14ffff28bd7000fedbdf2508000100000041fe030001000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) fsync(r1) 2m28.893593095s ago: executing program 4 (id=307): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x13f, 0x4}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x28100, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000180)=0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'ip6erspan0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000040)='fuseblk\x00', 0x1000009, 0x0) 2m13.527618831s ago: executing program 32 (id=307): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x13f, 0x4}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x28100, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000180)=0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'ip6erspan0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000040)='fuseblk\x00', 0x1000009, 0x0) 12.876673719s ago: executing program 5 (id=673): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x848, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x215882f, 0x0, 0x3, 0x0, &(0x7f0000000240)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000173000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x2) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/clear_refs\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0xb, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) 11.595153084s ago: executing program 5 (id=678): creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0}}, 0x40) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4459, &(0x7f0000004480)="$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") 10.815394644s ago: executing program 0 (id=681): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = socket(0x10, 0x803, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r2, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000200)={0x4, 0x8000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4801) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xffdfffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x0, 0x2, 0x0, 0x5, 0x0, 0xd}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000340)={r5, 0x212, 0x10, 0x10, 0xe, 0x4b26, 0x1, 0xfffffff8, {0x0, @in6={{0xa, 0x4e22, 0x800000, @mcast2, 0xff}}, 0x0, 0x3, 0x7087, 0xae52, 0x100}}, &(0x7f0000000600)=0xb0) r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0xdb2, 0x7, 0x7}) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x10, 0x4, {"4ce488257208382b96565a530669d385"}, 0x7ff, 0x3, 0xd0}}}, 0x90) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) sendto$inet(r8, &(0x7f0000000100)="89", 0x1, 0x4000800, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000080), 0x113}}, 0xffffff4f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) 10.767336219s ago: executing program 5 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc8442, 0x19d) r3 = semget(0x3, 0x0, 0x608) semctl$GETZCNT(r3, 0x1, 0xf, &(0x7f0000000080)=""/81) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x842, 0x0) r6 = socket(0x10, 0x1, 0x0) capset(&(0x7f00000001c0)={0xaa00072, r0}, &(0x7f0000000300)={0x1, 0x5, 0x0, 0xffffffff, 0x9c96}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, 0x0) setresuid(0x0, r7, r7) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40), 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x6) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xe86c0, 0x161) r10 = fanotify_init(0xf00, 0x0) fanotify_mark(r10, 0x105, 0x5000003a, r9, 0x0) fanotify_mark(r10, 0x451, 0x8, r9, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') 9.070827082s ago: executing program 3 (id=685): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0xfb, 0x2b4, &(0x7f00000008c0)="$eJzs3L9rE2EYwPHHpD9T22QQQUF80EVFjjb+AwZpQYwotRF1EK72oiFnUnJnJSK2m6vg7ioUBwc3Qf0Hurg5uEmXDgouHdRI73LtpZ4UbS8JzfcD5d573/e5vverPPdC37Ubz+6Xi45RNF1JDKkkRJZkXSSzUWo60NwmvPKAhC3J6ZHvn45du3nrUi6fn5xWncrNnMuq6tjxdw8fvzrxwR25/mbs7aCsZG6vfct+WTm8cmTt10xw9Kqrps5Wq645a1s6V3LKhupV2zIdS0sVx6q1tBft6vx8Xc3K3GhqvmY5jpqVupaturpVdWt1Ne+apYoahqGjKek1yX+OKCxPT5u5WAaDThiOqqzVcmYysrGw3I5BAQCA7hJz/n/2pUhk/n+v5GjJ0cpO+X9CyP/jQ/6/nxxclcivwI38P9V8fzed+dnGkQEAAAAAAAAAAAAAAAAAAAAAgN1YbzTSjUYjHWyDn0ERGRKRYL/T40Q8dnP/B9s/XOyx0D/uDYnYTxcKCwV/67fnilISWywZ7xf54T0PTX556mJ+clw9GXlvLzbjFxcKSe/58OIDmej4CT9eW+P7JRX+/VlJyyH5HBWfjYwfkFMnQ/GGpOXjHamKLXPec70V/2RC9cKV/Lb4Ya8fAAAAAAD7gaGb/vh+99oNDZYN2dbuV27ND0g6ND8QLBIUnh/Y9n3dJ0f7OnPOAAAAAAD0Gqf+qGzatlWj0FI4LyJ/7RPMbrR/YKnNmuEuuVAxFhIb92BPj/z89YvLO/X5Grwa3XER9rSw+sA/tdampER17tAfJAAAAACx2Ur6Oz0SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6V/RSYclwF68m2PmftcdCx0q29eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALvM7AAD//yaRD3M=") quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, 0x0, 0x0) socket(0x28, 0x5, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x1800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 8.898815443s ago: executing program 1 (id=686): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x3e, 0xa, 0x0, 0x0, 0x0, 0x35ef, 0x0, 0x0, {}, {0x8}, {0x0, 0x0, 0x11}, {0x0, 0x4}, 0x2, 0x40, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x8000, 0x7, 0x3, 0x0, 0xfffffffd, 0x26, 0x0, 0x3}) 8.722929422s ago: executing program 0 (id=687): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r1, 0x402, 0x8000002d) close(r1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x80000, 0x2, {}, {0xee01}, 0x5, 0x9ba}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20400, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x5e}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x9}}], [{@smackfsdef}, {@permit_directio}, {@uid_lt={'uid<', r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-!-*]'}}]}}, 0x0, 0x0, &(0x7f0000000480)="361af2a973d63fd179d03efc2ca5f20bdb4f0501b2b860db1333a7c1dbb9303e8ee525dd57525fc36a923e30127bde9a1a64e25deffd0b0ef759e6c24ab80cc72f1f03755efe2fb763b4178ac8fb606ecb26aae1e32bb34f67c118d126008fa5cb7c77228ea0cabb58edc42352bc396f0250a2105f07696b44d18a045b38f91d3cb0f086fcbc58d84785b4f9a5d70c89e836d8fdad01") pwritev(r0, &(0x7f0000002780)=[{&(0x7f00000002c0)='r', 0x1}], 0x1, 0x1800000, 0x5) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000540)={0x399d, 0x3, 0x2, 0x0, 0xfa}) 8.653867358s ago: executing program 6 (id=688): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r0, 0x0, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r4, 0x7) splice(r4, 0x0, r3, 0x0, 0x100002, 0x9) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x13, &(0x7f00000002c0), 0x4) tee(r2, r6, 0x81, 0xb) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) openat$cgroup_ro(r2, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) set_robust_list(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r9, 0x112, 0x9, 0x0, &(0x7f0000000480)) vmsplice(r5, 0x0, 0x0, 0x6) preadv(r1, &(0x7f0000000340)=[{0x0}], 0x1, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xb, 0xfffffffd, 0x9, 0x4}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a41080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x20040810) 8.545188073s ago: executing program 6 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="0100030073797a320000000014000200f9ffffffffffffff00000000000000000900010073797a3200000000e0"], 0x40}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002500)={0x2020}, 0x2020) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000000001017d00000000141a000002000000100005800a000100512e3933310000000800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100fe58d9919302f3069ab391415458f65f8786130d29db217959"], 0x74}}, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000700)={0x200, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 8.482708184s ago: executing program 1 (id=690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x14019, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0xfd, 0x10616, &(0x7f0000001fc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x0) (fail_nth: 4) 8.433093728s ago: executing program 0 (id=691): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40080) socket$inet_mptcp(0x2, 0x1, 0x106) fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000280)={0x2, 0x494e4f4b, 0x0, 0x8, 0x3, @stepwise={{0x7fff, 0x10001}, {0xb81d99c, 0x10001}, {0x1, 0xfff}}}) pselect6(0x40, &(0x7f0000000240)={0x5, 0x8, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000036000102fcff07000400"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r3, r4, 0x0, 0x20fffe82) 8.357251156s ago: executing program 3 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000000000400000009000000001cc9"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x0, 0x200004}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0xb884, 0xc000, 0x8, 0xc2}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x17, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3, @ANYRES8=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000051b40800f0ffffff186a00000e0000000000000002000000186900000100000000000000090000006d94060008000000852000000500000018230000", @ANYRES32=r0, @ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0x404, 0x4000, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0016000140020203600e4109000800ac00060311000000160012000a00f6000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000508) ptrace$cont(0x3d9d1e3d86a64e20, r6, 0x22, 0x10000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000400000000000000b30000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r10, @ANYRES32=r11, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="000000000000000000000000000000ef6031a3300b2d110000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x22, &(0x7f0000000780)=ANY=[@ANYBLOB="180800000100000000000000da0b000018110000", @ANYRESDEC=r7, @ANYBLOB="0000000000000000b702000006000000b7067e1a402400008500000005000000bf0900000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000018260000", @ANYRES32=r12, @ANYBLOB="0000000001000000180000000800000000000000f00000008520000001000000ac72fcff01000000bf9800000000000056080000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r13, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) 5.292779159s ago: executing program 1 (id=695): syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x298, &(0x7f0000012540), 0x1, 0x12493, &(0x7f0000012580)="$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") 5.291524322s ago: executing program 6 (id=696): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2094a4f52174549c2b8b0010000000000000ed65"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000000)={0x20, 0x16, 0x1, 'P'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x6, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001e00431b0000000000", @ANYRES32=0x0, @ANYBLOB="0000000f"], 0x28}, 0x1, 0x0, 0x0, 0x845}, 0x4040014) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) (async) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) (async) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000200)=0x7) (async) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x400, 0x2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000000580)='\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r11 = fcntl$getown(0xffffffffffffffff, 0x9) (async) r12 = getegid() (async) r13 = getpid() sched_setscheduler(r13, 0x1, &(0x7f0000000240)=0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000a80)={0x0, 0x0}) (async) lstat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000d40)={0x0, 0x0}) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000d80)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) (async) r20 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000e00), 0x100) sendmmsg$unix(r2, &(0x7f0000000f00)=[{{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)="cb76444bde0ea9c114f9c3be94a8947359b53f30b1d2f1956fd8b039a5b0acaecef735e18bf02146b95194f13c430b593b27b9521bcd025fa3796af33ae50abfe2b7d19b936f0b5fa0da248b1da3dc7c2ac4e7feeb0d", 0x56}, {&(0x7f0000000240)="ebcbca3d1b2067152a06a2c807e2c7794a809c792f916737fa96e0cc8bdb48d5aa44b0d2163610d6e8eadf1129731919640f348d761b32a49e00dc4c3c4c253a624a067135ca638c33e27a6933538ecf6339cc5aab845662b8b96ce14cb9ed6c62b0c33d2a8cfeb587193fb98881cda26d5719b0bf6ae7d1d0728429755d8a889b68c563e5ae4d66dec67b88a017ce4113d21cf6eeb44a2a03e4", 0x9a}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='\x00\x00\a\x00'], 0x48, 0x20040050}}, {{&(0x7f00000007c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000840)="7f4abe7ca9fc3a0ce2b9c5b84df4f7fe9c7a6c0834720e35680a342464a8cdb06a8e740cce451590ae3951bb158f33b62cf1b1b9438375eafcc3574de03393805782a4244508594a6a8f41e48ea7b5f34dbb08d21ff3340d9fbfa01618a63efea849abd997ed1ae5929d4b1b1540912bfac6df2835b428a5100c95f3a197f5d385a416e7996639e9d138a581f4f3925a2d240c665dd72c0028df30a581640cb1c3af452e4226ddc70e14e3caec0576df5faa1cc15d20a266d98e8d7e97a2ad5bad0817dadcfdc7ab697e26e9855089c1205420a6b608b26fefe2bfcfa8ea4720b25f4985b8e6", 0xe6}, {&(0x7f0000000940)="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", 0xfa}], 0x2, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r20]}}], 0x98, 0x1}}], 0x2, 0x0) 4.732922432s ago: executing program 0 (id=698): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffffffffffffffd9}, 0x48) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_clone(0xa086100, &(0x7f0000000200)="0a81237e00318ba1e69afb72d67b2610d9aace0133ca39b940b4c9b0a76fa18a088bf1befd88dbe0ca015b6880bd2b0a2bb5526a52e5ce8ec781a1915b23e26ba8106aa9c94907208324f0b43aec1476b413a197798671685978dcf3723bf7806a8b40614bd2a6dbd4a11f8bb2c8fa95c07d97ddc164dc058a3ac59530bd39265ffc9e575f05392bde0d98e0067631e09e229fc59ee475aca77bfa211018d0", 0x9f, &(0x7f00000002c0), &(0x7f0000000e40), &(0x7f0000000e80)="94b1630d497603018dde774e010c35f1aebae8b5c56ee50dea7861858f506f9f21108517eec74283dd3d68ddb69ffa0a6ce15140fb1e8d83ba352894ca5c90402a9712228773d7e1776c9071831613ee318fdeab3fab25edde65f9a5dbf3c856363aaf1d38b3ab5d0a04d0f402479da3cb34520e47717de6ce8a9f9dad0d2cc31b665c11") write$khugepaged_scan(r1, &(0x7f0000000140), 0x8) 4.571485005s ago: executing program 2 (id=699): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000004780)={'dummy0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x7, 0x1, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x3dd2a1bada27dd93) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x4b, 0x4e, "5c76276f6c86622447099377e66e2ebe40de"}}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix={0x5, 0x8, 0x33424752, 0x3, 0x3, 0x8, 0xc, 0x2000000, 0x1, 0x9, 0x2, 0x5}}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000080)=0x401, 0x4) socket$inet6(0xa, 0x80000, 0xdd) (async) socket$inet6(0xa, 0x80000, 0xdd) 4.488768028s ago: executing program 3 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601d836510d4191efa61a44c5f4020000000000000000000000000900020073797a3100000000050001000725783f48140c2bceb52648750f1d1454fac9e7b9988d73d0f48ba769a60158f96c3dd4a30d9fa7beae6cadb1bb707a7e257b5be2d6a931527522"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) shutdown(0xffffffffffffffff, 0x1) 4.051229005s ago: executing program 3 (id=701): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r0, 0x0, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r4, 0x7) splice(r4, 0x0, r3, 0x0, 0x100002, 0x9) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x13, &(0x7f00000002c0), 0x4) tee(r2, r6, 0x81, 0xb) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) openat$cgroup_ro(r2, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) set_robust_list(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r9, 0x112, 0x9, 0x0, &(0x7f0000000480)) vmsplice(r5, 0x0, 0x0, 0x6) preadv(r1, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xb, 0xfffffffd, 0x9, 0x4}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a41080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x20040810) 3.751978672s ago: executing program 2 (id=702): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0xfa0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 3.695983386s ago: executing program 6 (id=703): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000, 0xfffffffffffffffe}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048875}, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) 3.567256208s ago: executing program 3 (id=704): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) move_pages(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xfffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49d, &(0x7f0000000100)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) io_setup(0x1, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 3.362494793s ago: executing program 2 (id=705): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x80}}, './file0\x00'}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f00000004c0)={&(0x7f0000000a00)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=@can={{0x0, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x4, 0x0, "06400000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x4081991}, 0x4004080) recvfrom$packet(r3, &(0x7f0000000580)=""/229, 0xe5, 0x1, &(0x7f0000000680)={0x11, 0x15, r5, 0x1, 0x9a, 0x6, @broadcast}, 0x14) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4000000000000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x80}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r6, r11, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0xb2, 0x0, r6}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x4, 0x2, 0x2ab, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f3e, 0x1, 0x9, 0x102, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x400, 0x2, 0x21b, 0x0, r6}}], 0x4, &(0x7f0000001540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r10, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) 3.320972809s ago: executing program 0 (id=706): socket(0x1, 0x80008, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x32, @multicast2, 0x4e25, 0x3, 'lblcr\x00', 0x2, 0x4, 0x7b}, {@loopback, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0xe939, r4}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x98200, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) 3.219442342s ago: executing program 6 (id=707): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x49, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.547091973s ago: executing program 5 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="0100030073797a320000000014000200f9ffffffffffffff00000000000000000900010073797a3200000000e0"], 0x40}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002500)={0x2020}, 0x2020) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000000001017d00000000141a000002000000100005800a000100512e3933310000000800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100fe58d9919302f3069ab391415458f65f8786130d29db217959"], 0x74}}, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000700)={0x200, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 1.590837716s ago: executing program 6 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x80000, 0x0, 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001500010300000000000000010c00000008000100", @ANYBLOB='B'], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x45a3, 0x10000000}, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x4e74, 0x1c080, 0xa, 0x20002f7}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.542602262s ago: executing program 3 (id=710): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40080) socket$inet_mptcp(0x2, 0x1, 0x106) fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000280)={0x2, 0x494e4f4b, 0x0, 0x8, 0x3, @stepwise={{0x7fff, 0x10001}, {0xb81d99c, 0x10001}, {0x1, 0xfff}}}) pselect6(0x40, &(0x7f0000000240)={0x5, 0x8, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000036000102fcff0700040000000100000006"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r3, r4, 0x0, 0x20fffe82) 1.459388301s ago: executing program 2 (id=711): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x5}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8100, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.070429959s ago: executing program 2 (id=712): syz_usb_connect(0x6, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400", @ANYRES8=0x0, @ANYRES16], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x59, 0x0, 0x77, 0x4}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x3e, 0x30, 0x2e, 0x2e, 0x2e, 0x30]}}, &(0x7f00000000c0)=""/188, 0x64, 0xbc, 0x1, 0x6863b6c2, 0x10000}, 0x28) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=cp857,time_offset=0x0000000000000003,errors=remount-ro,fmask=00000000000000000000006,iocharset=cp862,allow_utime=00000000000000000077777,namecase=1,dmask=00000000000000000000201,utf8,dmask=000000000000\x00'/224, @ANYRES64, @ANYRESOCT=0x0, @ANYRES16], 0x9, 0x155d, &(0x7f0000002640)="$eJzs3AucjdX6OPDnWWu9Y0jsJrmvtZ6XnVwWSZJLklySpBKS3BKSJEcSEkNI0pCE5J7EkFsuE5PG/X6/JDRJmiQJyS1Z/89gjs6p/nXO6Rznd+b5fj77Yz2z9lrv8+5nv/td7ztmf9NlSI1GNavWJyL4l+DFf+IBIBYABgBATgAIAKBsXNm49P6sEuP/tY2wP1eDxCudAbuSuP6ZG9c/c+P6Z25c/8yN65+5cf0zN65/5sb1Zywz2zwt3zX8yLwPvv+f6aSO/muTz///Q9JKjvlibcnrugLEXDgE/4CYf3dO7L8aH///s4Lf7Dkj/9rk+mduXP/M6g8uENj/ND7+M4Msv9nD9c/cuP6MZWZX+v7zn/zIONX94TEQ+S97DY5kvbgH/6HtXcn3HmOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxzOO0v0wBQEb7SufFGGOMMcYYY4yxP4/PcqUzYIwxxhhjjDHG2L8fggAJCgKIgSwQC1khGwgAuBpyQE6IwDUQB9dCLrgOckMeyAv5ID8UgIKgwYAFghAKQWGIwvVQBG6AolAMikMJcFASSsGNUBpugjJwM5SFW6Ac3ArloQJUhEpwG1SG26EK3AFV4U6oBtWhBtSEu6AW3A214R6oA/dCXbgP7ocHoB48CPWhATSEh6ARPAyN4RFoAk2hGTSHFv/U+OehB7wAPaEXxENv6AMvQl/oB/3hJRgAL8NAeAUGwauQAINhCLwGQ+F1GAZvwHAYASPhTRgFb8FoGANjYRyMhwkwEd6GSfAOTIZ3YQpMhUSYBtPhPZgBM2EWzIY58D7MhXkwHxZAEnwAC2ERJMOHsBg+ghRYAkthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW2EbbIcdsBM+hl3wCeyGPbAXPoVU+OwfHH/q78Z3RUBAgQIVKozBGIzFWMyG2TA7ZsccmAMjGME4jMNcmAtzY27Mi3kxP+bHglgQDRokJCyEhTCKUSyCRbAoFsXiWBwdOiyFpbA03oRlsAyWxbJYDstheayAFbASVsLKWBmrYBWsilWxGlbDGlgD78K7sDfWxtpYB+tgXaybcXsK62N9bIgNsRE2wsbYGJtgE2yGzbAFtsCW2BJbYStsg22wLbbFdtgO22N77IAdsCN2xE7YCTtjZ+yCXbArdsNuac9nAXwBX8BeWE30xj7YB/tiQpb++BK+hC/jQHwFX8FXMQEH4xB8DV/D13EYnsThOAJH4kisLN7C0TgGSYzD8TgeJ+JEnISTMD3Rd3EqJuI0nI7TcQbOxJk4G+fg+/g+zsN5uACTMAkX4iJMxmRcjKcwBZfgUlyGy3EFLsdVuBpX4Vpch2txA27ATbgJt+AW3IbbcAfuwI9RAeAnuAf3YAKmYiruw324H/fjATyAaZiGB/EgHsJDeBgP4xE8gkfxGB7HY3gCT+BJPIWn8TSexbN4Dp/N/1XDj4utSQCRTgklYkSMiBWxIpvIJrKL7CKHyCEiIiLiRJzIJXKJ3CK3yCvyivwivygoCgojjCARxgCAiIqoKCKKiKKiqCguigsnnCglSonSorQoI8qIsuIWUU7cKsqLCqK1qyQqicqijasi7hBVRVVRTVQXNURNUVPUErVEbVFb1BF1RF1RV9wvHhD1RG/sjw1EemUaicHYWAzBJqKpkJc+wVqKYdhKtBZtxONiBA7HdqKlay+eEh3EaOwo/iLG4DOisxiHXcRzoqvoJrqL50UP0cr1FL3EZOwt+oip2Ff0E/3FS2IGVhezcU7WGuJVkSAGiyHiNbEAXxfDxBtiuBghRoo3xSjxlhgtxoixYpwYLyaIieJtMUm8I4R4V0wRU0WimCami/fEDDFTzBKzxRzxvpgr5on5YoFIEh+IhWKRSBYfisXiI5EiloilYplYLlaIlWKVWC3WiLVinVgvNoiNYpPYLLaIrSIWtosdYqf4WOwSn4jdYo/YKz4VqeIzsU98LvaLL8QB8aVIE1+Jg+JrcUh8Iw6Lb8UR8Z04Ko6J4+J7cUL8IE6KU+K0OCPOih/FOfGTOC+8AIlSSCmVDGSMzCJjZVaZTV4ls8vg0qt7jYyT18pc8jqZW+aReWU+mV8WkAWllkZaSTKUhWRhGZXXyyLyBllUFpPFZQnpZElZSt4oS8ubZBl5sywrb5Hl5K2yvKwgK8pK8jZZWd4uIXJxG9VkdVlD1pR3yXi4W9aW98g68l5ZV94n75cPyHryQVlfNpAN5UOykXxYNpaPyCayqWwmm8sW8lHZUj4mW8nWso18XLaVT8h28knZXj4lO0h/6S3yjOwsn5Vd5HOyq+wmu8uf5HnpZU/ZS0JvkH3ki7Kv7Cf7xwKAfFkOlK/IQfJVmSAHyyHyNTlUvi6HyTfkcDlCjpRvylHyLTlajpFj5Tg5Xk6QE+XbcpJ8R06W78opcqpMlNNkfzngwkyzpPzd8W//yvhBF7a+SW6WW+RWuU1ulzvkTvmx3CV3yd1yt9wr98pUmSr3yX1yv9wvD8gDMk2myYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz116DUChEkoqpQIVo7KoWJVVZVNXqezqapVD5VQRdY2KU9eqXOo6lVvlUXlVPpVfFVAFlVZGWUUqVIVUYRVV1+OlN4wqrkoop0qqUurGC+MzfsXwO+NVEXWDKqqK/Xy8x0v5xf9Gfi1UC9VStVStVCvVRrVRbVVb1U61U+1Ve9VBdVAdVUfVSXVSnVVn1UV1UV1VV9VddVc9VA/VU/VU8Spe9VEvqr6qn+qvXlID1MtqoBqoBqlBKkElqCFqiBqqhqphapgaroarkWqkGqVGqdFqtBqrxqrxaryaqCaqSWqSmqwmqylqikpUiWq6mq5mqBlqlpql5qg5aq6aq+ar+SpJJamFaqFKVslqsVqsUtQStUQtU8vUCrVCrVKr1Bq1Rq1T69QGtUGlqM1qs9qqtqrtarvaqXaqXWqX2i12q71qr0pVqWqf2qf2q/3qgDqg0lSaOqgOqkPqkDqsDqsj6og6qo6q4+q4OqFOqJPqpDqtTquz6qw6p86p8+p8+rIvEIEIVKCCmCAmiA1ig2xBtiB7kD3IEeQIIkEkiAviglzBdUHuIE+QN8gX5A8KBAUDHZjABuJSbaPB9UGR4IagaFAsKB6UCFxQMigV3BiUDm4KygQ3B2WDW4Jywa1B+aBCUDGoFNwWVA5uD6oEdwRVgzuDakH1oEZQM7grqBXcHdSOhaBOcG9QN7gvuD94IKgXPBjUDxoEDYOHgkbBw0Hj4JGgSdA0aBY0D1r8M/MH9/zG/N6fzPOY66l76XjdW/fRL+q+up/ur1/SA/TLeqB+RQ/Sr+oEPVgP0a/pofp1PUy/oYfrEXqkflOP0m/p0XqMHqvH6fF6gp6o39aT9Dt6sn5XT9FTdaKepqfr9/QMPVPP0rP1HP2+nqvn6fl6gU7SH+iFepFO1h/qxfojnaKX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepvernfonfpjvUt/onfrPXqv/lSn6s/0Pv253q+/0Af0lzpNf6UP6q/1If2NPqy/1Uf0d/qoPqaP6+/1Cf2DPqlP6dP6jD6rf9Tn9E/6vPbpi/v007tRRpkYE2NiTazJZrKZMpDd5DA5TMRETJyJM7lMLpPb5DZ5TV6T3+Q3BU1Bk44MmUKmkImaqCliipiipqgpboobZ5wpZUqZ0qa0KWPKmLKmrClnypnyprypaCqa28xt5nZzu7nD3GHuNHea6qa6qWlqmlqmlqltaps6po6pa+qa+839pp6pZ+qb+qahaWgamUamsWlsmpgmpplpZlqYFqalaWlamVamjWlj2pq2pp1pZ9qb9qaD6WA6mo6mk+lkOpvOpovpYrqarqa76W56mB6mp+lp4k286WP6mL6mr+lv+psBZoAZaAaaQWaQSTAJZogZYoaaoWaYGWaGmxFmZPqHnHnLjDZjzFgzzow3481EM9FMMpPMZDPZTDFTTKJJNNPNdDPDzDCzzCwzx8wxc81cM9/MN0kmySw0C02ySTaLzWKTYlLMUrPULDfLzUqz0qw2q81as9ash/Vmo9loNpvNZqvZarab7Wan2Wl2mV1mt9lt9pq9JtWkmn1mn9lv9psD5oBJM2nmoDloDplD5rA5bI6YI+aoOWqOm+PmhDlhTpqT5rQ5bc6aPJfOl95kfJhnt1fbHDanjbVZbTZ7lb0YZ6y8CtiCVtvcNo/Na/PZ/PZibKy1RW0xW9yWsM6WtKXsjb+Iy9sKtqKtZG+zle3ttsov4lr2blvb3mPr2HttTXvX38R17X02fXVSDxHANrUNbXPbyD5sG9tHbBPb1DazzW1b+4RtZ5+07e1TtoN9+hfxQrvIrrZr7Fq7zu62e+xpe8Yest/Ys/ZH29P2sgPsy3agfcUOsq/aBDv4F/FI+6YdZd+yo+0YO9aO+0U8xU61iXaanW7fszPszF/ESfYDO8cm27l2np1vF1yI03NKth/axfYjm2IDWGqX2eV2hV1pV2Xk6nPaDXaj3WR32U/sVrvNbrc77M6Mctg9dq/91Kbaz+xB+7Xdb7+wB+xhm2a/uhCn799h+609Yr+zR+0xe9x+b0/YH1TG6PR9/97+ZM9bb4GQgCQpCiiGslAsZaVsdBVlp6spB+WkCF1DcXQt5aLrKDflobyUj/JTASpImgxZIgqpEBWmKF1PGekVpxLkqCSVohupNN1EZehmKku3UDm6lcpTBapIleg2qky3UxW6g6rSnVSNqlMNqkl3US26m2rTPVSH7qW6dB/dTw9QPXqQ6lMDakgPUSN6mBrTI9SEmlIzak4t6FFqSY9RK2pNbehxaktPUDt6ktrTU9SBnqaO9BfqRM9QZ3qWutBz1JW6UXd6nnrQC9STelE89aY+9CL1pX7Un16iAfQyDaRXaBC9Sgk0mIbQazSUXqdh9AYNpxE0kt6kUfQWjaYxNJbG0XiaQBPpbZpE79Bkepem0FRKpGk0nd6jGTSTZtFsmkPv01yaR/NpASXRB7SQFlEyfUiL6SNKoSW0lJbRclpBK2kVraY1tJbW0XraQBtpE22mLbSVttF22kE76WPaRZ/QbtpDe+lTSqXPCOlz2k9f0AH6ktLoKzpIX9Mh+oYO07e+F31HR+kYHafv6QT9QCfpFJ2mM3SWfqRz9BOdJ08QYihCGaowCGPCLGFsmDXMFl4VZg+vDnOEOcNIeE0YF14b5gqvC3OHecK8Yb4wf1ggLBjq0IQ2pDAMC4WFw2h4fVgkvCEsGhYLi4clQheWDEuFN4alw5vCMuHNYdnwlrBceGtYPqwQPnxvpfC2sHJ4e1glvCOsGt4ZVgurhzXCmuFdYa3w7rB2eE9YJ7w3LBPeF94fPhDWCx8M64cNwobhQ2Gj8OGwcfhI2CRsGjYLm4ctwkfDluFjYauwddgmfDxsGz4RtgufDNuHT4Udwqcv9N+36Lf748PeYZ/wxfDF0Pt75PzogmhS9IPowuiiaHL0w+ji6EfRlOiS6NLosujy6Iroyuiq6Oromuja6Lro+uiG6Mbopqj3NbOAQyecdMoFLsZlcbEuq8vmrnLZ3dUuh8vpIu4aF+eudbncdS63y+PyunwuvyvgCjrtjLOOXOgKucIu6q53RdwNrqgr5oq7Es65kq6Ua+5auBaupXvMtXKtXRv3uHvcPeGecE+6J91TroN72nV0f3Gd3DOus3vWPeuec11dN9fdPe96uAk5Lh6T8a6P81n6ur6uv+vvBrgBbqAb6Aa5QS7BJbghbogb6oa6YW6YG+6Gu5FupBvlRrnRbrQb68a68W68m+gmuklukpvsJrspbopLdIluupvuZrgZrvLMi1uZ6+a6+W6+S3JJbqFLXzMmu8VusUtxKW6pW+qWu+VupVvpVrvVbq1b69a79W6j2+g2u81uq9vqtrvtbqfb6Xa5XW63z3lxUpfq9rl9br/b7w64L12a+8oddF+7Q+4bd9h9646479xRd8wdd9+7E+4Hd9KdcqfdGXfW/ejOuZ/ceefd+MiEyMTI25FJkXcikyPvRqZEpkYSI9Mi0yPvRWZEZkZmRWZH5kTej8yNzIvMjyyIJEU+iCyMLIokRz6MLI58FEmJLIksjSyL/BhZEfG+wNbQF/KFfdRf74v4G3xRX8wX9yW88yV9KX+jL+1v8mX8zb6sv8WX87f68r6Cr+gf8U18U9/MN/ct/KO+pX/Mt/KtfRv/uG/rn/Dt/JO+vX/Kd/BP+47+L77Thb/SetZ38c/5rr6b7+6f9z38C76n7+XjfW/fx7/o+/p+vr9/yQ/wL/uB/hU/yL/qE/xgP8S/5of61/0w/4Yf7kf4kTFv+lEZl8gwzo/3E/xE/7af5N/xk/27foqf6hP9ND/dv+dn+Jl+lp/t5/j3/Vw/z8/3C3yS/8Av9It8sv/QL/Yf+RS/JOOmsl/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T32q/8zv85/7/f4Lf8B/6dP8V/6g/9of8t/4w/5bf8R/54/6Y/64/96f8D/4k/6UP+3P+LP+R3/O/+TP89+sMcYYY4z9IRMuN8Xf9ly8A9T7V8aInz25DwBcvS1f2s/701eU63NfbPeb3evCwuypXl0aZDyqVYuPj7/03BQJQeF5ABm/CUoXA5fjJdAGnoD20BpK/2r+/US3s/Q780dvAcj2szGxcDm+PP/nABj/K/M/+vjIheXC03H/n/nnARQtfHlMVrgcL4E2F+6vtIYyv5F/npa/k3/WL8YDtPrZmOxwOb6cfyl4DJ6G9n/zTMYYY4wxxhhj7KJ+omKnjOvPjP/x+WvX5/nV5TFZ4HL8e9fnjDHGGGOMMcYYu/Ke6db9yUfbt2/d6R9vVPn956jLP8n+j26iMfyzif2xxuefNqB/z8z/RxveA/y1cADwL04IkN6Q/8m92PIf2VbCpUPn77uWn/EB/HeU8s9oXOEPJsYYY4wxxtif7vKi/29/rq5UQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWCb0r37HG/yBb+m70vvIGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMXWn/LwAA//9nj/bJ") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40047211, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_get$pid(0x1, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 988.489204ms ago: executing program 1 (id=713): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/128, 0x80}], 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="011802"], 0x40}, 0x1, 0x0, 0x0, 0x418c0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r1, @ANYBLOB=' \x00'], 0x38}}, 0x0) 719.30849ms ago: executing program 0 (id=714): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x15, 0xb, 0x492f, 0x5, 0x40, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)="bb9f0d81c2d39f9d8f0fb820a6c7ba6e6073e81379a25ec9f82e96f82a0ea21f669d966e8e2e107d09bf85ad6bb920407ad49cd9e02841639b29ef7d6dd3cd0491411a012fcf163647c7b3d7e6a51bc2a7e12152a682a3", &(0x7f0000000000)="302bb29144f90deecbd25f2b53afcf4032103e779b286f370b43ca54e85a30dab242420400000000000000986df29102ecebaaa69b193c73af2f55487cd48ebc539879cc8f5e3aad2d2d5e33033e26e86f2127739e02392817fec6505feba62827fdc67ebe8ab4d7ce0a1a4d9dd2a75e574d53e427c5b4c51fae6c0d6c4380d5074abfc8e282fe974acb764de1b1835de7a71b07490f59ca8d00f84c88e27cab27366b893fcd9297445c1f65bd7d31aef0bc66048acfe3f1cb3f1489b0dafdee34cf02ef9324ecc093d79bd9dee7f3a11d48f51504671a7a8937a34c5bd96b949fff845cf2fd1328fa6d5e3183a066819f8a", 0xca, r0, 0x4}, 0xffffffffffffffbe) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xd) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000200)=0x100000001) r3 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r3}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x4040, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000bc0)={0x24, &(0x7f0000000240)={0x40, 0x5, 0xc, {0xc, 0x23, "f8ba937b52291634046f"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x6}, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500200000008990425104000010203010902a60003010110020904000000010100000a2401040029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0) syz_usb_ep_write(r5, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") readv(r2, &(0x7f0000001300)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) ppoll(&(0x7f00000000c0)=[{r2, 0x1000}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) r7 = socket(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r8 = epoll_create1(0x80000) r9 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DROP_PRIVILEGES(r9, 0x4004551e, &(0x7f00000003c0)=0x8) ioctl$USBDEVFS_SETINTERFACE(r9, 0x80085504, &(0x7f0000000000)={0x6, 0x1ff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000500)={0xe000200c}) 594.014105ms ago: executing program 1 (id=715): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003440)=ANY=[@ANYBLOB, @ANYRES8=r0], 0xb8}, 0x1, 0x0, 0x0, 0xc800}, 0x10002) r1 = io_uring_setup(0x206e, &(0x7f0000002380)={0x0, 0x80023f8, 0x40}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, 0x0, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x100, 0x3, 0x2}, 0x18, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0xffffffffffffffda, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x3, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7ffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000007880)=""/102400, 0x19000) socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) landlock_restrict_self(r5, 0x0) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x167) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000429bd7000fbdbdf2500000000000000000000000000000001fc02000000000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000700000000000000fdffffffffffffff04000000000000008fda201100000000feffffffffffffff00000000000000000000000000000000000000001000000006000000c06b6e00f975fb829aa43a17"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) 519.451394ms ago: executing program 5 (id=716): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r0, 0x0, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r4, 0x7) splice(r4, 0x0, r3, 0x0, 0x100002, 0x9) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x13, &(0x7f00000002c0), 0x4) tee(r2, r6, 0x81, 0xb) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) openat$cgroup_ro(r2, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) set_robust_list(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r9, 0x112, 0x9, 0x0, &(0x7f0000000480)) vmsplice(r5, 0x0, 0x0, 0x6) preadv(r1, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xb, 0xfffffffd, 0x9, 0x4}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a41080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x20040810) 213.334262ms ago: executing program 1 (id=717): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000100)={'wlan0\x00', @ifru_hwaddr=@random="1a3a54452e63"}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 103.408737ms ago: executing program 5 (id=718): syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00e5496ddf42b572c11a00800a80", @ANYBLOB="6909158d8fcf52e50a3817f1990f9a42e106dd14f24a70b5aca8581eb5d746c4fb2b1743085a353e79e8a44410bc6f6bd1352e1b06ce726d2cf192e0b86c32643cd43652250bf2607aabe85403f5b9aa9bfaf0c7cc23172a247694348fa12551a8933bdd9fdd6b379859eadb452782610222e05cfac4c1c71754f99d9a8d5a577ba479fbade366db61121baa7ea51f6eceac776d64c7aa009a6d0d145e91d56f36179feb13f48c9e4b4b6bae4ddb5ee20aed376f9b6a3a5a34e8958c21"], 0x1, 0x14b, &(0x7f0000000340)="$eJzsz79LAmEcBvBH9DRL+0EGFmRCQ5JI50k1NSgkCV1S4dIk2CsFSpFQjUrUEG2tDZLQJP4LmrUYClH/RItb0Bqvd/Rrcu/5DMe9z/f9PtytrnQC8EMBkJEPAIdHolAQu/6tpB7ffqvXozK0AxiQLwd5c25cbkSBPWxeNOShBMj4wQ2HMUVOnrtRIAAgNgRk93NClVkJGJSZx8jCZhaYBZoTRqb9yC6NPhExsykbEBv56tOzWQVzsm/su+8dwOlNsFZ92mi3EqH5u2krzhPBmXHL79wnrrT4ZMXltSIlHm8R681fF1qhZ2et+tJp6+tJ3dGJaNpSRA2r6qLb/DvY1lzHwM6fPju8PlsKOLMA171Z994id5rlj2R+eLlsbhdPrM7eJ2bSXqWS9oyiiH4pfd8kIiIiIiIiIiIiIiIiIqL/4DMAAP//FcJbeA==") 0s ago: executing program 2 (id=719): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x1200004, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="33b59d6edb0500174ede7fd5f8b01be6325bb962454b3767052873c80c5f2c573ed5f4429de9f22d38503c73041915fe06e7e3b92c12f5c0d1c60ce3bafce2fcc95dd1d85553f94a39a1ef9aba9e2f00af7b50d3596cc1e448275ad4618db4b4e2cafd969271ba2c8dd354f9dba9bf7df6dfa6b7617f36b7cc8d4623d59f15558ddfdeed68d6f318f7fee8", @ANYBLOB="3cbed6e52efe7e5218c0f9829b50d40a4da4d0accda131734cbe6c66d4eb9ac85f5cb845dd4a8185d66e14c9511af49b481c0a86d034e702e2df26bc8d2020116977c6008d4a10ec2ff5b5a2c73d099f1d28", @ANYRESDEC], 0x9f, 0x197, &(0x7f00000001c0)="$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") kernel console output (not intermixed with test programs): ice fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.492 (8007) [ 265.961574][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.983743][ T8007] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 265.993945][ T8007] BTRFS info (device loop3): using sha256 checksum algorithm [ 266.074935][ T8003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.116977][ T8007] BTRFS info (device loop3): enabling ssd optimizations [ 266.124151][ T8007] BTRFS info (device loop3): turning on sync discard [ 266.130848][ T8007] BTRFS info (device loop3): enabling free space tree [ 266.137775][ T8007] BTRFS info (device loop3): use zlib compression, level 3 [ 266.156052][ T5881] usb 2-1: config 0 descriptor?? [ 266.164495][ T8003] netlink: 44 bytes leftover after parsing attributes in process `syz.2.489'. [ 266.186355][ T7995] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.535007][ T5881] ath6kl: Failed to submit usb control message: -71 [ 266.649259][ T31] audit: type=1800 audit(1783256716.085:371): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.492" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 267.220107][ T5881] ath6kl: unable to send the bmi data to the device: -71 [ 267.228886][ T5881] ath6kl: Unable to send get target info: -71 [ 267.271187][ T5881] ath6kl: Failed to init ath6kl core: -71 [ 267.337476][ T5881] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 267.427605][ T7988] loop6: detected capacity change from 0 to 32768 [ 267.442230][ T5881] usb 2-1: USB disconnect, device number 20 [ 267.476438][ T31] audit: type=1326 audit(1783256716.935:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.0.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572c99de59 code=0x7ffc0000 [ 267.491598][ T11] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 267.545173][ T7988] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.485 (7988) [ 267.611059][ T8036] loop2: detected capacity change from 0 to 256 [ 267.618084][ T31] audit: type=1326 audit(1783256716.945:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.0.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572c99de59 code=0x7ffc0000 [ 267.661822][ T8036] FAT-fs (loop2): Directory bread(block 1285) failed [ 267.677476][ T8037] loop0: detected capacity change from 0 to 1024 [ 267.685459][ T8036] FAT-fs (loop2): Directory bread(block 1286) failed [ 267.717827][ T8037] EXT4-fs: inline encryption not supported [ 267.725236][ T8036] FAT-fs (loop2): Directory bread(block 1287) failed [ 267.732111][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 267.749790][ T31] audit: type=1326 audit(1783256716.995:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.0.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572c99de59 code=0x7ffc0000 [ 267.758306][ T8036] FAT-fs (loop2): Directory bread(block 1288) failed [ 267.809485][ T11] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 267.848553][ T7988] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 267.865270][ T31] audit: type=1326 audit(1783256716.995:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.0.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572c99de59 code=0x7ffc0000 [ 267.871093][ T11] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 267.923979][ T8037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.924950][ T7988] BTRFS info (device loop6): using crc32c checksum algorithm [ 267.972607][ T7988] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 267.973019][ T7988] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 267.987398][ T11] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 267.997253][ T31] audit: type=1326 audit(1783256716.995:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.0.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f572c99de59 code=0x7ffc0000 [ 268.042365][ T11] usb 6-1: config 250 has no interface number 0 [ 268.049047][ T11] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 268.061844][ T8036] FAT-fs (loop2): Directory bread(block 1285) failed [ 268.064104][ T7988] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 268.080421][ T11] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 268.103186][ T8036] FAT-fs (loop2): Directory bread(block 1286) failed [ 268.110696][ T7988] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 268.111010][ T7988] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 268.126117][ T8036] FAT-fs (loop2): Directory bread(block 1287) failed [ 268.141400][ T5881] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 268.158807][ T31] audit: type=1326 audit(1783256716.995:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.0.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572c99de59 code=0x7ffc0000 [ 268.160953][ T7988] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 268.191625][ T11] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 268.220478][ T8036] FAT-fs (loop2): Directory bread(block 1288) failed [ 268.234674][ T31] audit: type=1326 audit(1783256717.005:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.0.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572c99de59 code=0x7ffc0000 [ 268.241748][ T8036] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 268.275803][ T11] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 268.281343][ T7988] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 268.302149][ T11] usb 6-1: config 250 interface 228 has no altsetting 0 [ 268.330554][ T7988] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 268.330893][ T7988] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 268.343806][ T31] audit: type=1326 audit(1783256717.005:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.0.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572c99de59 code=0x7ffc0000 [ 268.373041][ T11] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 268.391457][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 268.436256][ T11] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 268.460816][ T5881] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 268.470157][ T7988] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 268.470449][ T7988] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 268.476931][ T11] usb 6-1: Product: syz [ 268.489651][ T5881] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.510385][ T7988] BTRFS error (device loop6): open_ctree failed: -12 [ 268.521351][ T5881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.533905][ T31] audit: type=1326 audit(1783256717.005:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.0.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f572c99de59 code=0x7ffc0000 [ 268.607067][ T5881] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.628103][ T11] usb 6-1: SerialNumber: syz [ 268.667323][ T5881] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.668180][ T5627] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.686649][ T31] audit: type=1326 audit(1783256717.005:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.0.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572c99de59 code=0x7ffc0000 [ 268.747696][ T5881] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.784093][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.851936][ T31] audit: type=1326 audit(1783256717.005:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.0.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572c99de59 code=0x7ffc0000 [ 268.935790][ T8060] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005 [ 269.184327][ T11] usb 6-1: can't set config #250, error -71 [ 269.400829][ T5881] usb 2-1: usb_control_msg returned -32 [ 269.456589][ T5881] usbtmc 2-1:16.0: can't read capabilities [ 269.500830][ T11] usb 6-1: USB disconnect, device number 5 [ 270.664483][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.764135][ T8065] loop5: detected capacity change from 0 to 64 [ 270.846969][ T24] usb 2-1: USB disconnect, device number 21 [ 271.230032][ T8077] FAULT_INJECTION: forcing a failure. [ 271.230032][ T8077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.321488][ T8077] CPU: 1 UID: 0 PID: 8077 Comm: syz.3.505 Not tainted syzkaller #0 PREEMPT(full) [ 271.321521][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 271.321537][ T8077] Call Trace: [ 271.321546][ T8077] [ 271.321556][ T8077] dump_stack_lvl+0xe8/0x150 [ 271.321599][ T8077] should_fail_ex+0x40c/0x560 [ 271.321633][ T8077] _copy_from_user+0x2d/0xb0 [ 271.321671][ T8077] memdup_user+0x5e/0xd0 [ 271.321707][ T8077] strndup_user+0x68/0xd0 [ 271.321742][ T8077] __se_sys_mount+0x9d/0x420 [ 271.321775][ T8077] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.321805][ T8077] ? ksys_write+0x242/0x270 [ 271.321846][ T8077] ? __pfx___se_sys_mount+0x10/0x10 [ 271.321887][ T8077] ? srso_alias_return_thunk+0x5/0xfbef5 [ 271.321916][ T8077] ? __x64_sys_mount+0x20/0xc0 [ 271.321948][ T8077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.321975][ T8077] do_syscall_64+0x174/0x580 [ 271.322009][ T8077] ? trace_irq_disable+0x3b/0x140 [ 271.322048][ T8077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.322072][ T8077] RIP: 0033:0x7fdf6af9de59 [ 271.322094][ T8077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.322115][ T8077] RSP: 002b:00007fdf6bdf4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 271.322141][ T8077] RAX: ffffffffffffffda RBX: 00007fdf6b225fa0 RCX: 00007fdf6af9de59 [ 271.322158][ T8077] RDX: 0000200000000380 RSI: 0000200000000680 RDI: 0000000000000000 [ 271.322175][ T8077] RBP: 00007fdf6bdf4090 R08: 0000200000002780 R09: 0000000000000000 [ 271.322192][ T8077] R10: 0000000000014c98 R11: 0000000000000246 R12: 0000000000000001 [ 271.322207][ T8077] R13: 00007fdf6b226038 R14: 00007fdf6b225fa0 R15: 00007fff5b2f0228 [ 271.322246][ T8077] [ 271.747095][ T8082] loop1: detected capacity change from 0 to 256 [ 271.769673][ T8082] exfat: Deprecated parameter 'namecase' [ 271.829562][ T8082] exfat: Deprecated parameter 'utf8' [ 271.931007][ T8082] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 272.184230][ T8085] netlink: 'syz.3.507': attribute type 23 has an invalid length. [ 272.524127][ T8062] loop6: detected capacity change from 0 to 32768 [ 272.572830][ T8088] loop3: detected capacity change from 0 to 2048 [ 272.574934][ T8062] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.500 (8062) [ 272.611254][ T8088] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 272.660384][ T8088] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 272.690300][ T8088] UDF-fs: Scanning with blocksize 512 failed [ 272.751140][ T8088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.894791][ T8088] netlink: 44 bytes leftover after parsing attributes in process `syz.3.508'. [ 273.291450][ T31] kauditd_printk_skb: 75 callbacks suppressed [ 273.291472][ T31] audit: type=1800 audit(1783256722.755:458): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.511" name="file2" dev="tmpfs" ino=82 res=0 errno=0 [ 273.325851][ T8098] loop5: detected capacity change from 0 to 32768 [ 273.355266][ T8098] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.512 (8098) [ 273.386118][ T8098] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.396304][ T8098] BTRFS info (device loop5): using crc32c checksum algorithm [ 273.530739][ T8098] BTRFS info (device loop5): enabling ssd optimizations [ 273.537998][ T8098] BTRFS info (device loop5): turning on flush-on-commit [ 273.547454][ T8098] BTRFS info (device loop5): turning on async discard [ 273.554382][ T8098] BTRFS info (device loop5): enabling free space tree [ 273.561510][ T8098] BTRFS info (device loop5): force zlib compression, level 3 [ 273.589929][ T31] audit: type=1800 audit(1783256723.055:459): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.512" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 273.627382][ T8071] loop0: detected capacity change from 0 to 32768 [ 273.655745][ T8071] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.501 (8071) [ 273.657818][ T8109] loop1: detected capacity change from 0 to 2048 [ 273.715991][ T8109] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 273.769693][ T8071] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 273.820438][ T31] audit: type=1800 audit(1783256723.285:460): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.512" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 273.844376][ T8071] BTRFS info (device loop0): using sha256 checksum algorithm [ 273.932724][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.512'. [ 274.182567][ T10] block nbd4: Possible stuck request ffff8880278c0000: control (read@0,1024B). Runtime 120 seconds [ 274.193440][ T10] block nbd4: Possible stuck request ffff8880278c01c0: control (read@1024,1024B). Runtime 120 seconds [ 274.204575][ T10] block nbd4: Possible stuck request ffff8880278c0380: control (read@2048,1024B). Runtime 120 seconds [ 274.215761][ T10] block nbd4: Possible stuck request ffff8880278c0540: control (read@3072,1024B). Runtime 120 seconds [ 274.282763][ T8141] FAULT_INJECTION: forcing a failure. [ 274.282763][ T8141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.388336][ T8141] CPU: 1 UID: 0 PID: 8141 Comm: syz.2.503 Not tainted syzkaller #0 PREEMPT(full) [ 274.388368][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 274.388384][ T8141] Call Trace: [ 274.388393][ T8141] [ 274.388403][ T8141] dump_stack_lvl+0xe8/0x150 [ 274.388446][ T8141] should_fail_ex+0x40c/0x560 [ 274.388482][ T8141] _copy_to_user+0x31/0xb0 [ 274.388522][ T8141] simple_read_from_buffer+0xe1/0x170 [ 274.388563][ T8141] proc_fail_nth_read+0x1bb/0x230 [ 274.388596][ T8141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.388630][ T8141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.388667][ T8141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.388694][ T8141] ? rw_verify_area+0x24a/0x4c0 [ 274.388734][ T8141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.388767][ T8141] vfs_read+0x213/0xa80 [ 274.388809][ T8141] ? __pfx___mutex_lock+0x10/0x10 [ 274.388845][ T8141] ? __pfx_vfs_read+0x10/0x10 [ 274.388884][ T8141] ? __fget_files+0x2a/0x420 [ 274.388921][ T8141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.388950][ T8141] ? __fget_files+0x3a2/0x420 [ 274.388980][ T8141] ? __fget_files+0x2a/0x420 [ 274.389016][ T8141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.389050][ T8141] ksys_read+0x150/0x270 [ 274.389090][ T8141] ? __pfx_ksys_read+0x10/0x10 [ 274.389138][ T8141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.389165][ T8141] do_syscall_64+0x174/0x580 [ 274.389199][ T8141] ? trace_irq_disable+0x3b/0x140 [ 274.389242][ T8141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.389267][ T8141] RIP: 0033:0x7f0d8c15e68e [ 274.389288][ T8141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 274.389307][ T8141] RSP: 002b:00007f0d8cfb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.389333][ T8141] RAX: ffffffffffffffda RBX: 00007f0d8cfb76c0 RCX: 00007f0d8c15e68e [ 274.389354][ T8141] RDX: 000000000000000f RSI: 00007f0d8cfb70a0 RDI: 0000000000000005 [ 274.389369][ T8141] RBP: 00007f0d8cfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 274.389385][ T8141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.389400][ T8141] R13: 00007f0d8c426038 R14: 00007f0d8c425fa0 R15: 00007ffc5581c048 [ 274.389439][ T8141] [ 274.718667][ T8144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.515'. [ 274.776862][ T8071] BTRFS error (device loop0): open_ctree failed: -4 [ 274.894927][ T5623] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 275.526386][ T8150] fuse: fd is not a fuse device [ 275.678462][ T8156] loop1: detected capacity change from 0 to 32768 [ 275.718456][ T8155] loop2: detected capacity change from 0 to 256 [ 275.725801][ T8156] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 275.734179][ T8156] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 275.736190][ T8164] loop3: detected capacity change from 0 to 256 [ 275.809627][ T8156] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 275.823485][ T8164] exfat: Deprecated parameter 'namecase' [ 275.829278][ T5758] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 275.850844][ T5758] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 275.860125][ T8164] exfat: Deprecated parameter 'utf8' [ 275.919211][ T8155] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 275.981228][ T5758] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 130ms [ 275.984132][ T8164] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 276.041015][ T5758] gfs2: fsid=syz:syz.0: jid=0: Done [ 276.066129][ T8156] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 276.104477][ T8156] syz.1.521: attempt to access beyond end of device [ 276.104477][ T8156] loop1: rw=12288, sector=939524096, nr_sectors = 8 limit=32768 [ 276.118762][ T8156] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 117440512 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1445 [ 276.134569][ T8156] CPU: 1 UID: 0 PID: 8156 Comm: syz.1.521 Not tainted syzkaller #0 PREEMPT(full) [ 276.134602][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 276.134619][ T8156] Call Trace: [ 276.134628][ T8156] [ 276.134639][ T8156] dump_stack_lvl+0xe8/0x150 [ 276.134687][ T8156] gfs2_withdraw+0xc3/0x1b0 [ 276.134735][ T8156] gfs2_quota_init+0x10e6/0x1210 [ 276.134807][ T8156] ? __pfx_gfs2_quota_init+0x10/0x10 [ 276.134847][ T8156] ? __pfx_wake_up_bit+0x10/0x10 [ 276.134888][ T8156] ? inode_go_inval+0x2a0/0x360 [ 276.134936][ T8156] gfs2_make_fs_rw+0x143/0x230 [ 276.134969][ T8156] gfs2_fill_super+0x1a9f/0x20b0 [ 276.135036][ T8156] ? __pfx_gfs2_fill_super+0x10/0x10 [ 276.135085][ T8156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.135130][ T8156] ? init_locking+0xb8/0x210 [ 276.135178][ T8156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.135214][ T8156] ? sb_set_blocksize+0x155/0x240 [ 276.135269][ T8156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.135306][ T8156] ? setup_bdev_super+0x4c1/0x5b0 [ 276.135364][ T8156] get_tree_bdev_flags+0x430/0x4f0 [ 276.135416][ T8156] ? __pfx_gfs2_fill_super+0x10/0x10 [ 276.135467][ T8156] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 276.135523][ T8156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.135573][ T8156] gfs2_get_tree+0x51/0x1e0 [ 276.135629][ T8156] vfs_get_tree+0x92/0x2a0 [ 276.135663][ T8156] do_new_mount+0x319/0xdc0 [ 276.135705][ T8156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.135745][ T8156] ? __pfx_do_new_mount+0x10/0x10 [ 276.135784][ T8156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.135817][ T8156] ? ns_capable+0x89/0xe0 [ 276.135853][ T8156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.135886][ T8156] ? path_mount+0x647/0x1040 [ 276.135926][ T8156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.135958][ T8156] ? user_path_at+0xd4/0x160 [ 276.136005][ T8156] __se_sys_mount+0x31d/0x420 [ 276.136051][ T8156] ? __pfx___se_sys_mount+0x10/0x10 [ 276.136086][ T8156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.136129][ T8156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.136161][ T8156] ? __x64_sys_mount+0x20/0xc0 [ 276.136198][ T8156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.136234][ T8156] do_syscall_64+0x174/0x580 [ 276.136273][ T8156] ? trace_irq_disable+0x3b/0x140 [ 276.136319][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.136347][ T8156] RIP: 0033:0x7fccb3f9f0ca [ 276.136372][ T8156] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.136396][ T8156] RSP: 002b:00007fccb4e8be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 276.136424][ T8156] RAX: ffffffffffffffda RBX: 00007fccb4e8bee0 RCX: 00007fccb3f9f0ca [ 276.136446][ T8156] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007fccb4e8bea0 [ 276.136466][ T8156] RBP: 00002000000124c0 R08: 00007fccb4e8bee0 R09: 0000000000000000 [ 276.136483][ T8156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 276.136498][ T8156] R13: 00007fccb4e8bea0 R14: 00000000000125f6 R15: 0000200000000180 [ 276.136538][ T8156] [ 276.136573][ T8156] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 277.088855][ T8184] loop3: detected capacity change from 0 to 16 [ 277.140546][ T8187] FAULT_INJECTION: forcing a failure. [ 277.140546][ T8187] name failslab, interval 1, probability 0, space 0, times 0 [ 277.172457][ T8184] erofs (device loop3): mounted with root inode @ nid 36. [ 277.212232][ T8187] CPU: 1 UID: 0 PID: 8187 Comm: syz.1.528 Not tainted syzkaller #0 PREEMPT(full) [ 277.212266][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 277.212281][ T8187] Call Trace: [ 277.212290][ T8187] [ 277.212299][ T8187] dump_stack_lvl+0xe8/0x150 [ 277.212342][ T8187] should_fail_ex+0x40c/0x560 [ 277.212377][ T8187] should_failslab+0xa8/0x100 [ 277.212417][ T8187] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 277.212448][ T8187] ? local_lock_release+0x9c/0x160 [ 277.212483][ T8187] ? __alloc_skb+0x1d7/0x7a0 [ 277.212515][ T8187] ? __alloc_skb+0x1d7/0x7a0 [ 277.212556][ T8187] __alloc_skb+0x1d7/0x7a0 [ 277.212595][ T8187] alloc_skb_with_frags+0xc6/0x760 [ 277.212634][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.212663][ T8187] ? __lock_acquire+0x683/0x2cf0 [ 277.212713][ T8187] sock_alloc_send_pskb+0x878/0x990 [ 277.212766][ T8187] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 277.212803][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.212843][ T8187] __ip6_append_data+0x2de9/0x40c0 [ 277.212876][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.212904][ T8187] ? __lock_acquire+0x683/0x2cf0 [ 277.212960][ T8187] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 277.213008][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.213040][ T8187] ? ip6_mtu+0x7d/0x490 [ 277.213071][ T8187] ? __pfx___ip6_append_data+0x10/0x10 [ 277.213103][ T8187] ? __pfx_ip6_mtu+0x10/0x10 [ 277.213128][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.213157][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.213194][ T8187] ip6_make_skb+0x2af/0x320 [ 277.213227][ T8187] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 277.213265][ T8187] ? __pfx_ip6_make_skb+0x10/0x10 [ 277.213293][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.213331][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.213367][ T8187] ? ip6_dst_hoplimit+0x65/0x3e0 [ 277.213392][ T8187] ? ip6_dst_hoplimit+0x65/0x3e0 [ 277.213423][ T8187] udpv6_sendmsg+0x1dfb/0x2610 [ 277.213472][ T8187] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 277.213496][ T8187] ? kasan_quarantine_put+0xbb/0x1f0 [ 277.213581][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.213609][ T8187] ? inet_send_prepare+0x5b/0x260 [ 277.213645][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.213673][ T8187] ? inet6_sendmsg+0xe4/0x120 [ 277.213712][ T8187] ? __pfx_inet6_sendmsg+0x10/0x10 [ 277.213755][ T8187] sock_sendmsg_nosec+0x90/0x180 [ 277.213787][ T8187] ____sys_sendmsg+0x54e/0x850 [ 277.213833][ T8187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.213874][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.213909][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.213936][ T8187] ? import_iovec+0x73/0xa0 [ 277.213978][ T8187] ___sys_sendmsg+0x2a5/0x360 [ 277.214013][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.214041][ T8187] ? __lock_acquire+0x683/0x2cf0 [ 277.214079][ T8187] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.214114][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.214149][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.214176][ T8187] ? kstrtouint+0x6e/0xe0 [ 277.214236][ T8187] ? __fget_files+0x2a/0x420 [ 277.214267][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.214295][ T8187] ? __fget_files+0x3a2/0x420 [ 277.214341][ T8187] __sys_sendmmsg+0x273/0x4d0 [ 277.214385][ T8187] ? __pfx___sys_sendmmsg+0x10/0x10 [ 277.214435][ T8187] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 277.214487][ T8187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.214516][ T8187] ? ksys_write+0x242/0x270 [ 277.214558][ T8187] ? __pfx_ksys_write+0x10/0x10 [ 277.214604][ T8187] __x64_sys_sendmmsg+0xa0/0xc0 [ 277.214643][ T8187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.214669][ T8187] do_syscall_64+0x174/0x580 [ 277.214703][ T8187] ? trace_irq_disable+0x3b/0x140 [ 277.214748][ T8187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.214772][ T8187] RIP: 0033:0x7fccb3f9de59 [ 277.214795][ T8187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.214815][ T8187] RSP: 002b:00007fccb4e8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 277.214839][ T8187] RAX: ffffffffffffffda RBX: 00007fccb4225fa0 RCX: 00007fccb3f9de59 [ 277.214858][ T8187] RDX: 0000000000000002 RSI: 0000200000003d00 RDI: 0000000000000003 [ 277.214873][ T8187] RBP: 00007fccb4e8c090 R08: 0000000000000000 R09: 0000000000000000 [ 277.214888][ T8187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.214903][ T8187] R13: 00007fccb4226038 R14: 00007fccb4225fa0 R15: 00007ffcde7f4598 [ 277.214942][ T8187] [ 277.790017][ T8158] loop0: detected capacity change from 0 to 32768 [ 277.878493][ T8158] (syz.0.520,8158,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 277.894841][ T8158] (syz.0.520,8158,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 277.957260][ T8158] JBD2: Ignoring recovery information on journal [ 278.197711][ T8158] JBD2: journal reset failed [ 278.217010][ T8191] loop2: detected capacity change from 0 to 32768 [ 278.221015][ T8158] (syz.0.520,8158,1):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 278.237344][ T8191] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.530 (8191) [ 278.254323][ T8158] (syz.0.520,8158,0):ocfs2_check_volume:2373 ERROR: ocfs2 journal load failed! -4 [ 278.279670][ T8191] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.289948][ T8191] BTRFS info (device loop2): using crc32c checksum algorithm [ 278.317388][ T8197] 9p: Bad value for 'rfdno' [ 278.447181][ T8191] BTRFS info (device loop2): enabling ssd optimizations [ 278.454364][ T8191] BTRFS info (device loop2): turning on flush-on-commit [ 278.462662][ T8191] BTRFS info (device loop2): turning on async discard [ 278.469432][ T8191] BTRFS info (device loop2): enabling free space tree [ 278.476236][ T8191] BTRFS info (device loop2): force zlib compression, level 3 [ 278.514402][ T31] audit: type=1800 audit(1783256727.985:461): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.530" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 278.626645][ T8205] loop5: detected capacity change from 0 to 2048 [ 278.685408][ T31] audit: type=1800 audit(1783256728.045:462): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.530" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 278.754693][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 278.850907][ T8205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.176059][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 280.380441][ T5626] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.439425][ T1554] kernel write not supported for file /264/gid_map (pid: 1554 comm: kworker/0:2) [ 280.878948][ T8199] loop1: detected capacity change from 0 to 32768 [ 280.909481][ T8199] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.532 (8199) [ 280.991533][ T1554] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 281.041005][ T8195] loop6: detected capacity change from 0 to 32768 [ 281.061017][ T8199] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 281.093178][ T8195] BTRFS info: device /dev/loop6 (7:6) using temp-fsid 51ea87ae-8058-402f-a796-307902301e9b [ 281.096966][ T8199] BTRFS info (device loop1): using sha256 checksum algorithm [ 281.142992][ T8195] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.529 (8195) [ 281.308398][ T8199] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 281.308786][ T8199] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 281.353233][ T8199] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 281.373512][ T8236] loop3: detected capacity change from 0 to 32768 [ 281.392206][ T8199] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 281.392534][ T8199] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 281.420372][ T8236] BTRFS info: device /dev/loop3 (7:3) using temp-fsid e2a07afd-10f2-49a8-9b40-a6abfef87e01 [ 281.441834][ T8236] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.538 (8236) [ 281.458980][ T1554] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.469580][ T1554] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.480403][ T8236] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 281.490533][ T8236] BTRFS info (device loop3): using sha256 checksum algorithm [ 281.499395][ T1554] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 281.508860][ T1554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.518777][ T8199] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 281.519064][ T8199] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 281.520850][ T1554] usb 3-1: config 0 descriptor?? [ 281.594088][ T8199] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 281.608344][ T8199] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 281.665309][ T8199] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 281.713190][ T8199] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 281.763404][ T8236] BTRFS info (device loop3): enabling ssd optimizations [ 281.779894][ T8236] BTRFS info (device loop3): turning on sync discard [ 281.786825][ T8236] BTRFS info (device loop3): enabling free space tree [ 281.793657][ T8236] BTRFS info (device loop3): use zlib compression, level 3 [ 281.856812][ T8199] BTRFS error (device loop1): open_ctree failed: -12 [ 282.003027][ T5758] usb 3-1: USB disconnect, device number 8 [ 282.295725][ T31] audit: type=1800 audit(1783256731.735:463): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.538" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 282.938650][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.380731][ T5627] BTRFS info (device loop3): last unmount of filesystem e2a07afd-10f2-49a8-9b40-a6abfef87e01 [ 283.415947][ T8276] FAULT_INJECTION: forcing a failure. [ 283.415947][ T8276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.520446][ T8276] CPU: 1 UID: 0 PID: 8276 Comm: syz.2.543 Not tainted syzkaller #0 PREEMPT(full) [ 283.520479][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 283.520494][ T8276] Call Trace: [ 283.520503][ T8276] [ 283.520514][ T8276] dump_stack_lvl+0xe8/0x150 [ 283.520557][ T8276] should_fail_ex+0x40c/0x560 [ 283.520592][ T8276] _copy_from_user+0x2d/0xb0 [ 283.520631][ T8276] __copy_msghdr+0x390/0x590 [ 283.520676][ T8276] ___sys_sendmsg+0x213/0x360 [ 283.520712][ T8276] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.520748][ T8276] ? __lock_acquire+0x683/0x2cf0 [ 283.520788][ T8276] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.520825][ T8276] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.520861][ T8276] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.520890][ T8276] ? kstrtouint+0x6e/0xe0 [ 283.520950][ T8276] ? __fget_files+0x2a/0x420 [ 283.520982][ T8276] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.521011][ T8276] ? __fget_files+0x3a2/0x420 [ 283.521057][ T8276] __sys_sendmmsg+0x273/0x4d0 [ 283.521102][ T8276] ? __pfx___sys_sendmmsg+0x10/0x10 [ 283.521152][ T8276] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 283.521205][ T8276] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.521234][ T8276] ? ksys_write+0x242/0x270 [ 283.521276][ T8276] ? __pfx_ksys_write+0x10/0x10 [ 283.521325][ T8276] __x64_sys_sendmmsg+0xa0/0xc0 [ 283.521363][ T8276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.521390][ T8276] do_syscall_64+0x174/0x580 [ 283.521424][ T8276] ? trace_irq_disable+0x3b/0x140 [ 283.521464][ T8276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.521489][ T8276] RIP: 0033:0x7f0d8c19de59 [ 283.521511][ T8276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.521532][ T8276] RSP: 002b:00007f0d8cfb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 283.521558][ T8276] RAX: ffffffffffffffda RBX: 00007f0d8c425fa0 RCX: 00007f0d8c19de59 [ 283.521576][ T8276] RDX: 0000000000000002 RSI: 0000200000003440 RDI: 0000000000000003 [ 283.521591][ T8276] RBP: 00007f0d8cfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 283.521607][ T8276] R10: 0000000024008080 R11: 0000000000000246 R12: 0000000000000001 [ 283.521622][ T8276] R13: 00007f0d8c426038 R14: 00007f0d8c425fa0 R15: 00007ffc5581c048 [ 283.521662][ T8276] [ 284.005263][ T8282] loop0: detected capacity change from 0 to 256 [ 284.005672][ T8274] loop6: detected capacity change from 0 to 32768 [ 284.026898][ T8274] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.542 (8274) [ 284.067800][ T8274] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 284.078079][ T8274] BTRFS info (device loop6): using sha256 checksum algorithm [ 284.463201][ T8282] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 284.528584][ T31] audit: type=1800 audit(1783256733.995:464): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.546" name="file2" dev="loop0" ino=1048628 res=0 errno=0 [ 284.661774][ T8274] BTRFS info (device loop6): enabling ssd optimizations [ 284.668779][ T8274] BTRFS info (device loop6): turning on sync discard [ 284.675662][ T8274] BTRFS info (device loop6): enabling free space tree [ 284.682542][ T8274] BTRFS info (device loop6): use zlib compression, level 3 [ 284.754640][ T31] audit: type=1800 audit(1783256734.025:465): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.546" name="file2" dev="loop0" ino=1048628 res=0 errno=0 [ 285.144137][ T8305] loop2: detected capacity change from 0 to 4096 [ 286.066977][ T31] audit: type=1800 audit(1783256734.955:466): pid=8308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.542" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 286.141442][ T11] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 287.088483][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 287.255563][ T8305] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 288.555849][ T11] usb 6-1: device descriptor read/all, error -71 [ 288.683120][ T7357] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 289.989993][ T8330] serio: Serial port ptm0 [ 290.395514][ T8332] loop0: detected capacity change from 0 to 32768 [ 290.429411][ T8332] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 290.440019][ T8332] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 290.479947][ T8332] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 290.497180][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 290.558377][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 290.865454][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 307ms [ 290.898105][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 290.926778][ T8332] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 290.953115][ T8332] syz.0.554: attempt to access beyond end of device [ 290.953115][ T8332] loop0: rw=12288, sector=939524096, nr_sectors = 8 limit=32768 [ 290.968570][ T8332] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 117440512 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1445 [ 290.985202][ T8332] CPU: 1 UID: 0 PID: 8332 Comm: syz.0.554 Not tainted syzkaller #0 PREEMPT(full) [ 290.985233][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 290.985255][ T8332] Call Trace: [ 290.985264][ T8332] [ 290.985274][ T8332] dump_stack_lvl+0xe8/0x150 [ 290.985319][ T8332] gfs2_withdraw+0xc3/0x1b0 [ 290.985362][ T8332] gfs2_quota_init+0x10e6/0x1210 [ 290.985424][ T8332] ? __pfx_gfs2_quota_init+0x10/0x10 [ 290.985459][ T8332] ? __pfx_wake_up_bit+0x10/0x10 [ 290.985495][ T8332] ? inode_go_inval+0x2a0/0x360 [ 290.985537][ T8332] gfs2_make_fs_rw+0x143/0x230 [ 290.985567][ T8332] gfs2_fill_super+0x1a9f/0x20b0 [ 290.985622][ T8332] ? __pfx_gfs2_fill_super+0x10/0x10 [ 290.985660][ T8332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.985695][ T8332] ? init_locking+0xb8/0x210 [ 290.985731][ T8332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.985759][ T8332] ? sb_set_blocksize+0x155/0x240 [ 290.985795][ T8332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.985822][ T8332] ? setup_bdev_super+0x4c1/0x5b0 [ 290.985868][ T8332] get_tree_bdev_flags+0x430/0x4f0 [ 290.985909][ T8332] ? __pfx_gfs2_fill_super+0x10/0x10 [ 290.985949][ T8332] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 290.985993][ T8332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.986031][ T8332] gfs2_get_tree+0x51/0x1e0 [ 290.986074][ T8332] vfs_get_tree+0x92/0x2a0 [ 290.986101][ T8332] do_new_mount+0x319/0xdc0 [ 290.986133][ T8332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.986169][ T8332] ? __pfx_do_new_mount+0x10/0x10 [ 290.986203][ T8332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.986232][ T8332] ? ns_capable+0x89/0xe0 [ 290.986268][ T8332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.986296][ T8332] ? path_mount+0x647/0x1040 [ 290.986332][ T8332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.986360][ T8332] ? user_path_at+0xd4/0x160 [ 290.986400][ T8332] __se_sys_mount+0x31d/0x420 [ 290.986440][ T8332] ? __pfx___se_sys_mount+0x10/0x10 [ 290.986471][ T8332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.986508][ T8332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.986538][ T8332] ? __x64_sys_mount+0x20/0xc0 [ 290.986570][ T8332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.986598][ T8332] do_syscall_64+0x174/0x580 [ 290.986633][ T8332] ? trace_irq_disable+0x3b/0x140 [ 290.986672][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.986697][ T8332] RIP: 0033:0x7f572c99f0ca [ 290.986720][ T8332] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.986740][ T8332] RSP: 002b:00007f572d8dae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 290.986766][ T8332] RAX: ffffffffffffffda RBX: 00007f572d8daee0 RCX: 00007f572c99f0ca [ 290.986784][ T8332] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f572d8daea0 [ 290.986802][ T8332] RBP: 00002000000124c0 R08: 00007f572d8daee0 R09: 0000000000000000 [ 290.986819][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 290.986835][ T8332] R13: 00007f572d8daea0 R14: 00000000000125f6 R15: 0000200000000180 [ 290.986874][ T8332] [ 290.986906][ T8332] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 291.191473][ T11] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 291.438103][ T8348] loop5: detected capacity change from 0 to 4096 [ 291.445359][ T8348] ntfs3: Unknown parameter '' [ 291.733335][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.782783][ T11] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.838091][ T11] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 291.901042][ T8328] loop1: detected capacity change from 0 to 32768 [ 291.905651][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.934268][ T8328] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.553 (8328) [ 291.964278][ T8350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.560'. [ 291.988683][ T11] usb 3-1: config 0 descriptor?? [ 292.191137][ T31] audit: type=1326 audit(1783256741.655:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.0.558" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f572c99de59 code=0x0 [ 292.390243][ T8356] loop6: detected capacity change from 0 to 32768 [ 292.418488][ T8356] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 292.427199][ T8328] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 292.427233][ T8328] BTRFS info (device loop1): using sha256 checksum algorithm [ 292.445959][ T8356] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 292.475048][ T8356] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 292.485015][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 292.504466][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 292.525042][ T5779] usb 3-1: USB disconnect, device number 9 [ 292.661137][ T8328] BTRFS info (device loop1): enabling ssd optimizations [ 292.721550][ T8328] BTRFS info (device loop1): turning on async discard [ 292.738662][ T8328] BTRFS info (device loop1): enabling free space tree [ 292.796577][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 292ms [ 292.801406][ T5632] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 292.832003][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 292.850579][ T8356] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 292.882642][ T5629] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 292.980735][ T5632] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.004169][ T5632] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.006232][ T8356] gfs2: fsid=syz:syz.0: found 1 quota changes [ 293.031967][ T5632] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 293.078653][ T5632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.159646][ T5632] usb 6-1: config 0 descriptor?? [ 293.477035][ T8356] syz.6.561: attempt to access beyond end of device [ 293.477035][ T8356] loop6: rw=12288, sector=6755399441055880, nr_sectors = 8 limit=32768 [ 293.562743][ T8358] loop3: detected capacity change from 0 to 32768 [ 293.650331][ T5632] hkems 0003:2006:0118.0004: item fetching failed at offset 5/7 [ 293.652366][ T8358] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 293.671413][ T8390] FAULT_INJECTION: forcing a failure. [ 293.671413][ T8390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.672893][ T5632] hkems 0003:2006:0118.0004: parse failed [ 293.722579][ T7357] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 293.724287][ T5632] hkems 0003:2006:0118.0004: probe with driver hkems failed with error -22 [ 293.745094][ T8390] CPU: 1 UID: 0 PID: 8390 Comm: syz.0.564 Not tainted syzkaller #0 PREEMPT(full) [ 293.745126][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 293.745140][ T8390] Call Trace: [ 293.745149][ T8390] [ 293.745159][ T8390] dump_stack_lvl+0xe8/0x150 [ 293.745203][ T8390] should_fail_ex+0x40c/0x560 [ 293.745237][ T8390] strncpy_from_user+0x36/0x2c0 [ 293.745277][ T8390] do_getname+0x77/0x250 [ 293.745308][ T8390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.745336][ T8390] __se_sys_rename+0x2b/0x2c0 [ 293.745367][ T8390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.745393][ T8390] do_syscall_64+0x174/0x580 [ 293.745427][ T8390] ? trace_irq_disable+0x3b/0x140 [ 293.745469][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.745493][ T8390] RIP: 0033:0x7f572c99de59 [ 293.745515][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.745533][ T8390] RSP: 002b:00007f572d899028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 293.745558][ T8390] RAX: ffffffffffffffda RBX: 00007f572cc26180 RCX: 00007f572c99de59 [ 293.745575][ T8390] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 293.745591][ T8390] RBP: 00007f572d899090 R08: 0000000000000000 R09: 0000000000000000 [ 293.745606][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.745620][ T8390] R13: 00007f572cc26218 R14: 00007f572cc26180 R15: 00007ffe53329658 [ 293.745658][ T8390] [ 293.755827][ T7357] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 293.954284][ T7357] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:7357 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 293.967488][ T7357] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 293.983297][ T7357] CPU: 1 UID: 0 PID: 7357 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 293.983328][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 293.983342][ T7357] Call Trace: [ 293.983351][ T7357] [ 293.983360][ T7357] dump_stack_lvl+0xe8/0x150 [ 293.983402][ T7357] gfs2_withdraw+0xc3/0x1b0 [ 293.983444][ T7357] inode_go_instantiate+0xbc7/0x12c0 [ 293.983487][ T7357] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.983521][ T7357] ? __pfx_inode_go_instantiate+0x10/0x10 [ 293.983556][ T7357] ? do_raw_spin_unlock+0xf5/0x210 [ 293.983587][ T7357] ? __pfx_wake_bit_function+0x10/0x10 [ 293.983622][ T7357] gfs2_instantiate+0x168/0x220 [ 293.983666][ T7357] gfs2_glock_wait+0x1d4/0x2a0 [ 293.983696][ T7357] do_sync+0x49c/0xbb0 [ 293.983727][ T7357] ? gfs2_quota_sync+0x353/0x450 [ 293.983769][ T7357] ? __pfx_do_sync+0x10/0x10 [ 293.983811][ T7357] ? gfs2_quota_sync+0x353/0x450 [ 293.983842][ T7357] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.983870][ T7357] ? preempt_schedule_thunk+0x16/0x40 [ 293.983909][ T7357] gfs2_quota_sync+0x353/0x450 [ 293.983953][ T7357] gfs2_sync_fs+0x4c/0xb0 [ 293.983984][ T7357] sync_filesystem+0xee/0x230 [ 293.984026][ T7357] generic_shutdown_super+0x77/0x2d0 [ 293.984067][ T7357] kill_block_super+0x44/0x90 [ 293.984107][ T7357] deactivate_locked_super+0xbc/0x130 [ 293.984144][ T7357] cleanup_mnt+0x3d3/0x460 [ 293.984187][ T7357] task_work_run+0x1d9/0x270 [ 293.984230][ T7357] ? __pfx_task_work_run+0x10/0x10 [ 293.984286][ T7357] exit_to_user_mode_loop+0x1fa/0x730 [ 293.984318][ T7357] ? rcu_is_watching+0x15/0xb0 [ 293.984356][ T7357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.984383][ T7357] do_syscall_64+0x353/0x580 [ 293.984417][ T7357] ? trace_irq_disable+0x3b/0x140 [ 293.984456][ T7357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.984481][ T7357] RIP: 0033:0x7f5c9d19f097 [ 293.984504][ T7357] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 293.984524][ T7357] RSP: 002b:00007fff0cdd2bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 293.984549][ T7357] RAX: 0000000000000000 RBX: 00007f5c9d2332ca RCX: 00007f5c9d19f097 [ 293.984564][ T7357] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0cdd2c90 [ 293.984576][ T7357] RBP: 00007fff0cdd2c90 R08: 00007fff0cdd3c90 R09: 00000000ffffffff [ 293.984590][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0cdd3d20 [ 293.984602][ T7357] R13: 00007f5c9d2332ca R14: 0000000000047983 R15: 00007fff0cdd3d60 [ 293.984637][ T7357] [ 293.987019][ T8350] (syz.3.560,8350,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 294.045712][ T7357] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 294.284778][ T8358] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #64 has bitmap size 448 but physical max of 256 [ 294.480806][ T8358] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 294.513069][ T8358] OCFS2: File system is now read-only. [ 294.549123][ T8358] (syz.3.560,8358,1):ocfs2_test_suballoc_bit:3237 ERROR: read group 64 failed -30 [ 294.606471][ T8358] (syz.3.560,8358,1):ocfs2_test_suballoc_bit:3248 ERROR: status = -30 [ 294.669254][ T8358] (syz.3.560,8358,1):ocfs2_test_inode_bit:3313 ERROR: test suballoc bit failed -30 [ 294.705109][ T24] usb 6-1: USB disconnect, device number 8 [ 294.731422][ T8358] (syz.3.560,8358,0):ocfs2_test_inode_bit:3323 ERROR: status = -30 [ 294.769606][ T8358] (syz.3.560,8358,0):ocfs2_get_parent:167 ERROR: test inode bit failed -30 [ 294.885794][ T5627] ocfs2: Unmounting device (7,3) on (node local) [ 295.011425][ T5779] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 295.192442][ T5779] usb 1-1: Using ep0 maxpacket: 8 [ 295.249798][ T8406] loop2: detected capacity change from 0 to 32768 [ 295.269674][ T8406] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 295.277121][ T8406] CPU: 0 UID: 0 PID: 8406 Comm: syz.2.571 Not tainted syzkaller #0 PREEMPT(full) [ 295.277144][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 295.277156][ T8406] Call Trace: [ 295.277164][ T8406] [ 295.277171][ T8406] dump_stack_lvl+0xe8/0x150 [ 295.277205][ T8406] sysfs_create_dir_ns+0x271/0x2a0 [ 295.277234][ T8406] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 295.277262][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.277287][ T8406] ? do_raw_spin_unlock+0xf5/0x210 [ 295.277313][ T8406] kobject_add_internal+0x622/0xcd0 [ 295.277340][ T8406] kobject_init_and_add+0x12b/0x1a0 [ 295.277378][ T8406] ? __pfx_kobject_init_and_add+0x10/0x10 [ 295.277411][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.277433][ T8406] ? __raw_spin_lock_init+0x45/0x100 [ 295.277455][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.277477][ T8406] ? __init_swait_queue_head+0xa8/0x150 [ 295.277500][ T8406] gfs2_sys_fs_add+0x257/0x480 [ 295.277523][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.277544][ T8406] ? is_dynamic_key+0x1aa/0x1c0 [ 295.277572][ T8406] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 295.277605][ T8406] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 295.277647][ T8406] gfs2_fill_super+0x1328/0x20b0 [ 295.277690][ T8406] ? __pfx_gfs2_fill_super+0x10/0x10 [ 295.277719][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.277746][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.277772][ T8406] ? sb_set_blocksize+0x155/0x240 [ 295.277799][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.277821][ T8406] ? setup_bdev_super+0x4c1/0x5b0 [ 295.277856][ T8406] get_tree_bdev_flags+0x430/0x4f0 [ 295.277888][ T8406] ? __pfx_gfs2_fill_super+0x10/0x10 [ 295.277919][ T8406] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 295.277953][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.277982][ T8406] gfs2_get_tree+0x51/0x1e0 [ 295.278015][ T8406] vfs_get_tree+0x92/0x2a0 [ 295.278035][ T8406] do_new_mount+0x319/0xdc0 [ 295.278059][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.278086][ T8406] ? __pfx_do_new_mount+0x10/0x10 [ 295.278112][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.278134][ T8406] ? ns_capable+0x89/0xe0 [ 295.278157][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.278178][ T8406] ? path_mount+0x647/0x1040 [ 295.278205][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.278227][ T8406] ? user_path_at+0xd4/0x160 [ 295.278257][ T8406] __se_sys_mount+0x31d/0x420 [ 295.278288][ T8406] ? __pfx___se_sys_mount+0x10/0x10 [ 295.278311][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.278339][ T8406] ? srso_alias_return_thunk+0x5/0xfbef5 [ 295.278360][ T8406] ? __x64_sys_mount+0x20/0xc0 [ 295.278385][ T8406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.278406][ T8406] do_syscall_64+0x174/0x580 [ 295.278431][ T8406] ? trace_irq_disable+0x3b/0x140 [ 295.278462][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.278480][ T8406] RIP: 0033:0x7f0d8c19f0ca [ 295.278498][ T8406] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.278513][ T8406] RSP: 002b:00007f0d8cfb6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 295.278532][ T8406] RAX: ffffffffffffffda RBX: 00007f0d8cfb6ee0 RCX: 00007f0d8c19f0ca [ 295.278547][ T8406] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f0d8cfb6ea0 [ 295.278561][ T8406] RBP: 00002000000124c0 R08: 00007f0d8cfb6ee0 R09: 0000000000000000 [ 295.278574][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 295.278587][ T8406] R13: 00007f0d8cfb6ea0 R14: 00000000000125f6 R15: 0000200000000180 [ 295.278618][ T8406] [ 295.278641][ T8406] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 295.310338][ T5779] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 295.315177][ T8406] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 295.349288][ T5779] usb 1-1: New USB device found, idVendor=17ef, idProduct=3062, bcdDevice=18.e5 [ 296.001524][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.011392][ T5779] usb 1-1: Product: syz [ 296.332104][ T8418] capability: warning: `syz.1.573' uses 32-bit capabilities (legacy support in use) [ 296.520086][ T5779] usb 1-1: Manufacturer: syz [ 296.978074][ T5779] usb 1-1: SerialNumber: syz [ 297.173545][ T8416] loop2: detected capacity change from 0 to 32768 [ 297.192983][ T8416] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.574 (8416) [ 297.210223][ T8416] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 297.220356][ T8416] BTRFS info (device loop2): using crc32c checksum algorithm [ 297.282775][ T5779] r8152-cfgselector 1-1: Unknown version 0x0000 [ 297.353852][ T8416] BTRFS info (device loop2): enabling ssd optimizations [ 297.361012][ T8416] BTRFS info (device loop2): turning on flush-on-commit [ 297.367975][ T8416] BTRFS info (device loop2): turning on async discard [ 297.375075][ T8416] BTRFS info (device loop2): enabling free space tree [ 297.382526][ T8416] BTRFS info (device loop2): force zlib compression, level 3 [ 297.456876][ T31] audit: type=1800 audit(1783256746.915:468): pid=8416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.574" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 297.531731][ T31] audit: type=1800 audit(1783256746.995:469): pid=8416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.574" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 297.804593][ T8443] loop1: detected capacity change from 0 to 256 [ 297.841451][ T8443] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 297.879721][ T5626] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 297.908911][ T31] audit: type=1800 audit(1783256747.375:470): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.577" name="file2" dev="loop1" ino=1048629 res=0 errno=0 [ 297.934541][ T31] audit: type=1800 audit(1783256747.405:471): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.577" name="file2" dev="loop1" ino=1048629 res=0 errno=0 [ 298.222510][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 298.289335][ T8448] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 298.320502][ T8448] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 298.391509][ T24] usb 2-1: device descriptor read/64, error -71 [ 298.870521][ T8451] loop5: detected capacity change from 0 to 32768 [ 298.881156][ T8451] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 298.888598][ T8451] CPU: 1 UID: 0 PID: 8451 Comm: syz.5.580 Not tainted syzkaller #0 PREEMPT(full) [ 298.888627][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 298.888642][ T8451] Call Trace: [ 298.888651][ T8451] [ 298.888660][ T8451] dump_stack_lvl+0xe8/0x150 [ 298.888703][ T8451] sysfs_create_dir_ns+0x271/0x2a0 [ 298.888741][ T8451] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 298.888778][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.888808][ T8451] ? do_raw_spin_unlock+0xf5/0x210 [ 298.888844][ T8451] kobject_add_internal+0x622/0xcd0 [ 298.888879][ T8451] kobject_init_and_add+0x12b/0x1a0 [ 298.888928][ T8451] ? __pfx_kobject_init_and_add+0x10/0x10 [ 298.888971][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.888999][ T8451] ? __raw_spin_lock_init+0x45/0x100 [ 298.889030][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.889059][ T8451] ? __init_swait_queue_head+0xa8/0x150 [ 298.889090][ T8451] gfs2_sys_fs_add+0x257/0x480 [ 298.889128][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.889157][ T8451] ? is_dynamic_key+0x1aa/0x1c0 [ 298.889192][ T8451] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 298.889235][ T8451] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 298.889291][ T8451] gfs2_fill_super+0x1328/0x20b0 [ 298.889349][ T8451] ? __pfx_gfs2_fill_super+0x10/0x10 [ 298.889386][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.889422][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.889452][ T8451] ? sb_set_blocksize+0x155/0x240 [ 298.889488][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.889516][ T8451] ? setup_bdev_super+0x4c1/0x5b0 [ 298.889561][ T8451] get_tree_bdev_flags+0x430/0x4f0 [ 298.889602][ T8451] ? __pfx_gfs2_fill_super+0x10/0x10 [ 298.889642][ T8451] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 298.889685][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.889724][ T8451] gfs2_get_tree+0x51/0x1e0 [ 298.889768][ T8451] vfs_get_tree+0x92/0x2a0 [ 298.889795][ T8451] do_new_mount+0x319/0xdc0 [ 298.889827][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.889863][ T8451] ? __pfx_do_new_mount+0x10/0x10 [ 298.889897][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.889926][ T8451] ? ns_capable+0x89/0xe0 [ 298.889956][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.889984][ T8451] ? path_mount+0x647/0x1040 [ 298.890019][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.890047][ T8451] ? user_path_at+0xd4/0x160 [ 298.890087][ T8451] __se_sys_mount+0x31d/0x420 [ 298.890133][ T8451] ? __pfx___se_sys_mount+0x10/0x10 [ 298.890164][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.890202][ T8451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.890230][ T8451] ? __x64_sys_mount+0x20/0xc0 [ 298.890263][ T8451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.890291][ T8451] do_syscall_64+0x174/0x580 [ 298.890326][ T8451] ? trace_irq_disable+0x3b/0x140 [ 298.890366][ T8451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.890393][ T8451] RIP: 0033:0x7f712df9f0ca [ 298.890415][ T8451] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.890437][ T8451] RSP: 002b:00007f712ee38e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 298.890463][ T8451] RAX: ffffffffffffffda RBX: 00007f712ee38ee0 RCX: 00007f712df9f0ca [ 298.890482][ T8451] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f712ee38ea0 [ 298.890500][ T8451] RBP: 00002000000124c0 R08: 00007f712ee38ee0 R09: 0000000000000000 [ 298.890517][ T8451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 298.890533][ T8451] R13: 00007f712ee38ea0 R14: 00000000000125c7 R15: 0000200000000180 [ 298.890574][ T8451] [ 298.890599][ T8451] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 299.269269][ T8451] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 299.281268][ T5779] r8152-cfgselector 1-1: USB disconnect, device number 18 [ 299.412892][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 299.553981][ T8451] netlink: 84 bytes leftover after parsing attributes in process `syz.5.580'. [ 299.567409][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.580'. [ 299.598032][ T24] usb 2-1: device descriptor read/64, error -71 [ 299.631831][ T7357] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566 [ 299.668369][ T7357] CPU: 0 UID: 0 PID: 7357 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 299.668401][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 299.668416][ T7357] Call Trace: [ 299.668425][ T7357] [ 299.668435][ T7357] dump_stack_lvl+0xe8/0x150 [ 299.668477][ T7357] gfs2_assert_warn_i+0x18c/0x2c0 [ 299.668526][ T7357] gfs2_make_fs_ro+0x30d/0x320 [ 299.668558][ T7357] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 299.668587][ T7357] ? __pfx_autoremove_wake_function+0x10/0x10 [ 299.668618][ T7357] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.668650][ T7357] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.668678][ T7357] ? flush_work+0xd/0x30 [ 299.668715][ T7357] gfs2_put_super+0x235/0x870 [ 299.668757][ T7357] ? __pfx_gfs2_put_super+0x10/0x10 [ 299.668786][ T7357] generic_shutdown_super+0x13d/0x2d0 [ 299.668827][ T7357] kill_block_super+0x44/0x90 [ 299.668868][ T7357] deactivate_locked_super+0xbc/0x130 [ 299.668906][ T7357] cleanup_mnt+0x3d3/0x460 [ 299.668950][ T7357] task_work_run+0x1d9/0x270 [ 299.668992][ T7357] ? __pfx_task_work_run+0x10/0x10 [ 299.669042][ T7357] exit_to_user_mode_loop+0x1fa/0x730 [ 299.669074][ T7357] ? rcu_is_watching+0x15/0xb0 [ 299.669114][ T7357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.669142][ T7357] do_syscall_64+0x353/0x580 [ 299.669175][ T7357] ? trace_irq_disable+0x3b/0x140 [ 299.669213][ T7357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.669237][ T7357] RIP: 0033:0x7f5c9d19f097 [ 299.669259][ T7357] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 299.669279][ T7357] RSP: 002b:00007fff0cdd2bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 299.669305][ T7357] RAX: 0000000000000000 RBX: 00007f5c9d2332ca RCX: 00007f5c9d19f097 [ 299.669321][ T7357] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0cdd2c90 [ 299.669337][ T7357] RBP: 00007fff0cdd2c90 R08: 00007fff0cdd3c90 R09: 00000000ffffffff [ 299.669353][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0cdd3d20 [ 299.669369][ T7357] R13: 00007f5c9d2332ca R14: 0000000000047983 R15: 00007fff0cdd3d60 [ 299.669408][ T7357] [ 299.898775][ T24] usb usb2-port1: attempt power cycle [ 300.078518][ T8460] loop0: detected capacity change from 0 to 16 [ 300.094029][ T8460] erofs (device loop0): mounted with root inode @ nid 36. [ 300.119038][ T8460] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 300.129213][ T8460] syz.0.581: attempt to access beyond end of device [ 300.129213][ T8460] loop0: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 300.177841][ T8460] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 300.189420][ T8460] erofs (device loop0): read error -117 @ 0 of nid 89 [ 300.204225][ T31] audit: type=1800 audit(1783256749.665:472): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.581" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 300.241464][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 300.287962][ T24] usb 2-1: device descriptor read/8, error -71 [ 300.621542][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 300.672102][ T24] usb 2-1: device descriptor read/8, error -71 [ 300.802736][ T24] usb usb2-port1: unable to enumerate USB device [ 302.067265][ T8479] loop2: detected capacity change from 0 to 256 [ 302.118704][ T8479] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 302.126149][ T8479] FAT-fs (loop2): Can't find a valid FAT filesystem [ 303.284841][ T8482] netlink: 'syz.3.587': attribute type 23 has an invalid length. [ 304.227720][ T8495] loop6: detected capacity change from 0 to 1024 [ 304.272541][ T10] block nbd4: Possible stuck request ffff8880278c0000: control (read@0,1024B). Runtime 150 seconds [ 304.283390][ T10] block nbd4: Possible stuck request ffff8880278c01c0: control (read@1024,1024B). Runtime 150 seconds [ 304.294556][ T10] block nbd4: Possible stuck request ffff8880278c0380: control (read@2048,1024B). Runtime 150 seconds [ 304.305789][ T10] block nbd4: Possible stuck request ffff8880278c0540: control (read@3072,1024B). Runtime 150 seconds [ 304.416768][ T8495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.566812][ T8495] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 16: comm syz.6.566: path /18/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 304.626836][ T8495] EXT4-fs (loop6): Remounting filesystem read-only [ 304.782066][ T1554] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 304.963097][ T1554] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.189391][ T1554] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 305.198816][ T1554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.220588][ T1554] usb 6-1: config 0 descriptor?? [ 305.248135][ T1554] pwc: Askey VC010 type 2 USB webcam detected. [ 305.911211][ T1554] pwc: send_video_command error -71 [ 305.922116][ T1554] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 305.939697][ T1554] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 305.983894][ T1554] usb 6-1: USB disconnect, device number 9 [ 306.017898][ T7357] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.581488][ T8532] netlink: 'syz.6.599': attribute type 23 has an invalid length. [ 307.511541][ T8545] x_tables: duplicate underflow at hook 1 [ 307.561506][ T8545] loop2: detected capacity change from 0 to 256 [ 307.637473][ T8545] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 307.900930][ T8551] MPI: mpi too large (107144 bits) [ 307.919928][ T8551] loop2: detected capacity change from 0 to 512 [ 308.172503][ T5758] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 308.354322][ T5758] usb 3-1: Using ep0 maxpacket: 8 [ 308.398961][ T5758] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 308.448520][ T5758] usb 3-1: config 0 has no interface number 0 [ 308.487540][ T5758] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 308.512929][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.534861][ T5758] usb 3-1: Product: syz [ 308.545530][ T5758] usb 3-1: Manufacturer: syz [ 308.560470][ T5758] usb 3-1: SerialNumber: syz [ 308.604933][ T5758] usb 3-1: config 0 descriptor?? [ 308.629046][ T8573] FAULT_INJECTION: forcing a failure. [ 308.629046][ T8573] name failslab, interval 1, probability 0, space 0, times 0 [ 308.691700][ T8573] CPU: 1 UID: 0 PID: 8573 Comm: syz.6.611 Not tainted syzkaller #0 PREEMPT(full) [ 308.691733][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 308.691748][ T8573] Call Trace: [ 308.691757][ T8573] [ 308.691772][ T8573] dump_stack_lvl+0xe8/0x150 [ 308.691815][ T8573] should_fail_ex+0x40c/0x560 [ 308.691850][ T8573] should_failslab+0xa8/0x100 [ 308.691889][ T8573] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 308.691919][ T8573] ? local_lock_release+0x9c/0x160 [ 308.691956][ T8573] ? __alloc_skb+0x1d7/0x7a0 [ 308.691986][ T8573] ? __alloc_skb+0x1d7/0x7a0 [ 308.692026][ T8573] __alloc_skb+0x1d7/0x7a0 [ 308.692064][ T8573] netlink_sendmsg+0x5d4/0xb40 [ 308.692101][ T8573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.692129][ T8573] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.692157][ T8573] ? aa_sock_msg_perm+0xf1/0x1b0 [ 308.692185][ T8573] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.692217][ T8573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.692239][ T8573] sock_sendmsg_nosec+0x13a/0x180 [ 308.692277][ T8573] __sys_sendto+0x408/0x5a0 [ 308.692319][ T8573] ? __pfx___sys_sendto+0x10/0x10 [ 308.692384][ T8573] ? rcu_is_watching+0x15/0xb0 [ 308.692422][ T8573] ? srso_alias_return_thunk+0x5/0xfbef5 [ 308.692458][ T8573] __x64_sys_sendto+0xde/0x100 [ 308.692492][ T8573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.692519][ T8573] do_syscall_64+0x174/0x580 [ 308.692553][ T8573] ? trace_irq_disable+0x3b/0x140 [ 308.692591][ T8573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.692616][ T8573] RIP: 0033:0x7f5c9d15e68e [ 308.692638][ T8573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 308.692658][ T8573] RSP: 002b:00007f5c9e13ce58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 308.692683][ T8573] RAX: ffffffffffffffda RBX: 00007f5c9e13e6c0 RCX: 00007f5c9d15e68e [ 308.692701][ T8573] RDX: 0000000000000028 RSI: 00007f5c9e13cfe0 RDI: 0000000000000004 [ 308.692717][ T8573] RBP: 0000000000000000 R08: 00007f5c9e13ced4 R09: 000000000000000c [ 308.692732][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 308.692747][ T8573] R13: 00007f5c9e13cf28 R14: 00007f5c9e13cfe0 R15: 0000000000000000 [ 308.692783][ T8573] [ 308.998301][ T8576] loop1: detected capacity change from 0 to 2048 [ 309.026888][ T5758] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 309.034317][ T5758] uvcvideo 3-1:0.31: No valid video chain found. [ 309.054637][ T5758] usb 3-1: USB disconnect, device number 10 [ 309.070734][ T8578] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.401577][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 309.433607][ T8576] NILFS (loop1): error -2 truncating bmap (ino=16) [ 309.563725][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.589290][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 309.616767][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.662420][ T24] usb 6-1: config 0 descriptor?? [ 309.707865][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 309.891801][ T24] pwc: send_video_command error -71 [ 309.912694][ T24] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 309.922502][ T24] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 309.931775][ T8576] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 309.964853][ T24] usb 6-1: USB disconnect, device number 10 [ 309.998326][ T8576] Remounting filesystem read-only [ 310.164201][ T8575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.286738][ T8596] loop0: detected capacity change from 0 to 16 [ 310.621203][ T8602] loop2: detected capacity change from 0 to 512 [ 310.637659][ T8602] EXT4-fs: Invalid want_extra_isize 91 [ 311.229364][ T8604] loop6: detected capacity change from 0 to 32768 [ 311.331792][ T8604] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.620 (8604) [ 311.354223][ T8604] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 311.364367][ T8604] BTRFS info (device loop6): using crc32c checksum algorithm [ 311.391443][ T5757] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 311.453692][ T8604] BTRFS info (device loop6): enabling ssd optimizations [ 311.460676][ T8604] BTRFS info (device loop6): turning on flush-on-commit [ 311.468024][ T8604] BTRFS info (device loop6): turning on async discard [ 311.474911][ T8604] BTRFS info (device loop6): enabling free space tree [ 311.481913][ T8604] BTRFS info (device loop6): force zlib compression, level 3 [ 311.541920][ T5757] usb 4-1: Using ep0 maxpacket: 8 [ 311.553906][ T5757] usb 4-1: unable to get BOS descriptor or descriptor too short [ 311.567161][ T5757] usb 4-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 311.576764][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.581717][ T31] audit: type=1800 audit(1783256761.035:473): pid=8604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.620" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 311.585212][ T5757] usb 4-1: Product: syz [ 311.609716][ T5757] usb 4-1: Manufacturer: syz [ 311.614486][ T5757] usb 4-1: SerialNumber: syz [ 311.835020][ T31] audit: type=1800 audit(1783256761.305:474): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.620" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 311.870191][ T8598] FAULT_INJECTION: forcing a failure. [ 311.870191][ T8598] name failslab, interval 1, probability 0, space 0, times 0 [ 311.913183][ T5758] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 311.951862][ T8598] CPU: 0 UID: 0 PID: 8598 Comm: syz.3.619 Not tainted syzkaller #0 PREEMPT(full) [ 311.951896][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 311.951916][ T8598] Call Trace: [ 311.951925][ T8598] [ 311.951936][ T8598] dump_stack_lvl+0xe8/0x150 [ 311.952001][ T8598] should_fail_ex+0x40c/0x560 [ 311.952035][ T8598] should_failslab+0xa8/0x100 [ 311.952075][ T8598] __kmalloc_cache_noprof+0xa8/0x660 [ 311.952110][ T8598] ? io_ring_ctx_alloc+0x53/0xc40 [ 311.952133][ T8598] ? io_ring_ctx_alloc+0x53/0xc40 [ 311.952164][ T8598] io_ring_ctx_alloc+0x53/0xc40 [ 311.952187][ T8598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.952215][ T8598] ? io_prepare_config+0x8c8/0xc70 [ 311.952255][ T8598] io_uring_create+0x50/0x990 [ 311.952284][ T8598] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 311.952319][ T8598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.952358][ T8598] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 311.952410][ T8598] ? __pfx_ksys_write+0x10/0x10 [ 311.952459][ T8598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.952486][ T8598] do_syscall_64+0x174/0x580 [ 311.952519][ T8598] ? trace_irq_disable+0x3b/0x140 [ 311.952558][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.952583][ T8598] RIP: 0033:0x7fdf6af9de59 [ 311.952605][ T8598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.952625][ T8598] RSP: 002b:00007fdf6bdf3ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 311.952651][ T8598] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007fdf6af9de59 [ 311.952669][ T8598] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9 [ 311.952686][ T8598] RBP: 0000200000000800 R08: 0000000000000000 R09: 0000000000000000 [ 311.952708][ T8598] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 311.952724][ T8598] R13: 0000200000000890 R14: 00007fdf6bdf3fd8 R15: 0000000000000000 [ 311.952762][ T8598] [ 312.154973][ T5758] usb 3-1: unable to get BOS descriptor or descriptor too short [ 312.252919][ T5758] usb 3-1: not running at top speed; connect to a high speed hub [ 312.321622][ T5757] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 312.346942][ T5629] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 312.368157][ T5758] usb 3-1: config 255 has an invalid interface number: 109 but max is 0 [ 312.398980][ T5757] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 312.424336][ T5758] usb 3-1: config 255 has no interface number 0 [ 312.450299][ T5758] usb 3-1: config 255 interface 109 has no altsetting 0 [ 312.462420][ T7357] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 312.481943][ T5757] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 312.508475][ T5758] usb 3-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=83.e2 [ 312.508511][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.508534][ T5758] usb 3-1: Product: syz [ 312.508551][ T5758] usb 3-1: Manufacturer: syz [ 312.508568][ T5758] usb 3-1: SerialNumber: syz [ 312.700723][ T5757] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 312.738063][ T5758] snd_usb_variax 3-1:255.109: Line 6 Variax Workbench found [ 312.781057][ T5758] snd_usb_variax 3-1:255.109: set_interface failed [ 312.807129][ T5757] usb 4-1: USB disconnect, device number 10 [ 312.838593][ T5758] snd_usb_variax 3-1:255.109: Line 6 Variax Workbench now disconnected [ 312.880461][ T5758] snd_usb_variax 3-1:255.109: probe with driver snd_usb_variax failed with error -71 [ 312.908631][ T6607] udevd[6607]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.942504][ T5758] usb 3-1: USB disconnect, device number 11 [ 313.312684][ T6961] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 313.322788][ T8646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.629'. [ 313.678401][ T8650] syz.5.630 uses obsolete (PF_INET,SOCK_PACKET) [ 313.681369][ T6961] usb 1-1: Using ep0 maxpacket: 16 [ 313.727433][ T6961] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 313.815189][ T6961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 314.104805][ T6961] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 314.127719][ T8655] loop2: detected capacity change from 0 to 1024 [ 314.141376][ T6961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.162423][ T6961] usb 1-1: Product: syz [ 314.186627][ T8655] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 314.201415][ T6961] usb 1-1: Manufacturer: syz [ 314.220044][ T6961] usb 1-1: SerialNumber: syz [ 314.252419][ T6961] usb 1-1: config 0 descriptor?? [ 314.274700][ T6961] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 314.284735][ T6961] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 314.351454][ T5632] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 314.397864][ T8655] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.631: Invalid block bitmap block 0 in block_group 0 [ 314.451440][ T8655] loop2: lost filesystem error report for type 5 error -117 [ 314.471327][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 314.485266][ C0] EXT4-fs (loop2): initial error at time 1783256763: ext4_read_block_bitmap_nowait:483 [ 314.494981][ C0] EXT4-fs (loop2): last error at time 1783256763: ext4_read_block_bitmap_nowait:483 [ 314.519758][ T8655] Quota error (device loop2): write_blk: dquota write failed [ 314.546402][ T8655] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 314.561379][ T5632] usb 7-1: Using ep0 maxpacket: 32 [ 314.584074][ T8655] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.631: Failed to acquire dquot type 0 [ 314.627259][ T5632] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1064, setting to 1024 [ 314.640118][ T8655] loop2: lost filesystem error report for type 5 error -117 [ 314.644174][ T8655] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.631: Freeing blocks not in datazone - block = 0, count = 4096 [ 314.712496][ T5632] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 314.741249][ T5632] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.749755][ T8655] loop2: lost filesystem error report for type 5 error -117 [ 314.767950][ T8635] loop1: detected capacity change from 0 to 32768 [ 314.790503][ T8655] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.631: Invalid inode bitmap blk 0 in block_group 0 [ 314.804900][ T5632] usb 7-1: Product: syz [ 314.815761][ T5632] usb 7-1: Manufacturer: syz [ 314.816001][ T5806] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 314.831414][ T5632] usb 7-1: SerialNumber: syz [ 314.837391][ T8655] loop2: lost filesystem error report for type 5 error -117 [ 314.855131][ T5806] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 0 [ 314.861375][ T8655] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 314.876035][ T6961] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 314.903993][ T5806] loop2: lost filesystem error report for type 5 error -117 [ 314.916317][ T6961] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 314.955907][ T8655] loop2: lost filesystem error report for type 5 error -117 [ 314.958397][ T8655] EXT4-fs (loop2): 1 orphan inode deleted [ 314.995005][ T8655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.015197][ T8635] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 315.040679][ T8663] loop5: detected capacity change from 0 to 512 [ 315.363975][ T6961] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 315.396595][ T5632] snd-ua101 7-1:1.1: sample format descriptor not found [ 315.399739][ T6961] em28xx 1-1:0.0: No AC97 audio processor [ 315.405072][ T5632] snd-ua101 7-1:1.0: invalid num_altsetting [ 315.432515][ T5632] usb 7-1: USB disconnect, device number 6 [ 315.440523][ T8655] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 315.462936][ T8663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.476318][ T8663] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.574549][ T8655] netlink: 'syz.2.631': attribute type 62 has an invalid length. [ 315.655317][ T31] audit: type=1800 audit(1783256765.125:475): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.625" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 315.739171][ T5626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.755433][ T149] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.774968][ T149] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.845783][ T149] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.905658][ T8659] loop3: detected capacity change from 0 to 32768 [ 315.915760][ T149] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.944915][ T5629] ocfs2: Unmounting device (7,1) on (node local) [ 315.951599][ T8659] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.632 (8659) [ 316.255368][ T8659] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 316.286322][ T8659] BTRFS info (device loop3): using sha256 checksum algorithm [ 316.327858][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'. [ 316.432423][ T8689] warning: `syz.2.638' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 316.432519][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.461543][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.504383][ T8659] BTRFS info (device loop3): enabling ssd optimizations [ 316.511584][ T8659] BTRFS info (device loop3): turning on async discard [ 316.518447][ T8659] BTRFS info (device loop3): enabling free space tree [ 316.578626][ T5757] usb 1-1: USB disconnect, device number 19 [ 316.615569][ T5757] em28xx 1-1:0.0: Disconnecting em28xx [ 317.271823][ T8699] loop2: detected capacity change from 0 to 32768 [ 317.295056][ T8697] loop6: detected capacity change from 0 to 32768 [ 317.333785][ T8697] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.637 (8697) [ 317.395654][ T8704] loop0: detected capacity change from 0 to 32768 [ 317.396371][ T8699] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 317.410394][ T8699] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 317.429414][ T8697] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.433984][ T8699] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 317.440226][ T8697] BTRFS info (device loop6): using crc32c checksum algorithm [ 317.459073][ T6961] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 317.459285][ T8704] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 317.475156][ T8704] CPU: 0 UID: 0 PID: 8704 Comm: syz.0.640 Not tainted syzkaller #0 PREEMPT(full) [ 317.475185][ T8704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 317.475200][ T8704] Call Trace: [ 317.475209][ T8704] [ 317.475219][ T8704] dump_stack_lvl+0xe8/0x150 [ 317.475262][ T8704] sysfs_create_dir_ns+0x271/0x2a0 [ 317.475299][ T8704] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 317.475337][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.475367][ T8704] ? do_raw_spin_unlock+0xf5/0x210 [ 317.475402][ T8704] kobject_add_internal+0x622/0xcd0 [ 317.475437][ T8704] kobject_init_and_add+0x12b/0x1a0 [ 317.475485][ T8704] ? __pfx_kobject_init_and_add+0x10/0x10 [ 317.475529][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.475558][ T8704] ? __raw_spin_lock_init+0x45/0x100 [ 317.475587][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.475616][ T8704] ? __init_swait_queue_head+0xa8/0x150 [ 317.475646][ T8704] gfs2_sys_fs_add+0x257/0x480 [ 317.475676][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.475704][ T8704] ? is_dynamic_key+0x1aa/0x1c0 [ 317.475740][ T8704] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 317.475783][ T8704] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 317.475838][ T8704] gfs2_fill_super+0x1328/0x20b0 [ 317.475893][ T8704] ? __pfx_gfs2_fill_super+0x10/0x10 [ 317.475931][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.475966][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.475995][ T8704] ? sb_set_blocksize+0x155/0x240 [ 317.476032][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.476060][ T8704] ? setup_bdev_super+0x4c1/0x5b0 [ 317.476105][ T8704] get_tree_bdev_flags+0x430/0x4f0 [ 317.476154][ T8704] ? __pfx_gfs2_fill_super+0x10/0x10 [ 317.476194][ T8704] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 317.476237][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.476275][ T8704] gfs2_get_tree+0x51/0x1e0 [ 317.476318][ T8704] vfs_get_tree+0x92/0x2a0 [ 317.476345][ T8704] do_new_mount+0x319/0xdc0 [ 317.476377][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.476412][ T8704] ? __pfx_do_new_mount+0x10/0x10 [ 317.476446][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.476474][ T8704] ? ns_capable+0x89/0xe0 [ 317.476505][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.476533][ T8704] ? path_mount+0x647/0x1040 [ 317.476569][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.476598][ T8704] ? user_path_at+0xd4/0x160 [ 317.476639][ T8704] __se_sys_mount+0x31d/0x420 [ 317.476679][ T8704] ? __pfx___se_sys_mount+0x10/0x10 [ 317.476709][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.476747][ T8704] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.476776][ T8704] ? __x64_sys_mount+0x20/0xc0 [ 317.476808][ T8704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.476836][ T8704] do_syscall_64+0x174/0x580 [ 317.476870][ T8704] ? trace_irq_disable+0x3b/0x140 [ 317.476909][ T8704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.476935][ T8704] RIP: 0033:0x7f572c99f0ca [ 317.476954][ T8704] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.476971][ T8704] RSP: 002b:00007f572d8dae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 317.476992][ T8704] RAX: ffffffffffffffda RBX: 00007f572d8daee0 RCX: 00007f572c99f0ca [ 317.477008][ T8704] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f572d8daea0 [ 317.477023][ T8704] RBP: 00002000000124c0 R08: 00007f572d8daee0 R09: 0000000000000000 [ 317.477038][ T8704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 317.477054][ T8704] R13: 00007f572d8daea0 R14: 00000000000125c7 R15: 0000200000000180 [ 317.477100][ T8704] [ 317.477126][ T8704] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 317.516997][ T6961] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 317.518908][ T8704] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 317.868958][ T5757] em28xx 1-1:0.0: Freeing device [ 318.095681][ T5627] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 318.126105][ T8704] netlink: 84 bytes leftover after parsing attributes in process `syz.0.640'. [ 318.206109][ T8697] BTRFS info (device loop6): enabling ssd optimizations [ 318.213147][ T8697] BTRFS info (device loop6): turning on flush-on-commit [ 318.220146][ T8697] BTRFS info (device loop6): turning on async discard [ 318.226975][ T8697] BTRFS info (device loop6): enabling free space tree [ 318.233763][ T8697] BTRFS info (device loop6): force zlib compression, level 3 [ 318.380527][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.418786][ T31] audit: type=1800 audit(1783256767.845:476): pid=8697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.637" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 318.603602][ T31] audit: type=1800 audit(1783256768.075:477): pid=8697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.637" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 318.732438][ T6961] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1215ms [ 318.806558][ T6961] gfs2: fsid=syz:syz.0: jid=0: Done [ 318.837648][ T8701] loop1: detected capacity change from 0 to 40427 [ 318.841659][ T8699] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 318.972392][ T8699] gfs2: fsid=syz:syz.0: found 1 quota changes [ 318.989942][ T8701] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 319.041426][ T8701] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 319.080477][ T8701] F2FS-fs (loop1): Image doesn't support compression [ 319.134618][ T8701] F2FS-fs (loop1): invalid crc value [ 319.135233][ T7357] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.278743][ T8738] netlink: 84 bytes leftover after parsing attributes in process `syz.2.639'. [ 319.416562][ T8723] loop0: detected capacity change from 0 to 32768 [ 319.503973][ T8699] syz.2.639: attempt to access beyond end of device [ 319.503973][ T8699] loop2: rw=12288, sector=6755399441055880, nr_sectors = 8 limit=32768 [ 319.534491][ T8723] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.642 (8723) [ 319.700346][ T8744] netlink: 'syz.3.646': attribute type 23 has an invalid length. [ 319.704459][ T8723] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.888904][ T8723] BTRFS info (device loop0): using crc32c checksum algorithm [ 320.090369][ T8701] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 320.114437][ T8723] BTRFS info (device loop0): enabling ssd optimizations [ 320.172018][ T8723] BTRFS info (device loop0): turning on flush-on-commit [ 320.224608][ T8701] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 320.232404][ T8723] BTRFS info (device loop0): turning on async discard [ 320.241774][ T8723] BTRFS info (device loop0): enabling free space tree [ 320.266375][ T8701] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 320.312778][ T8701] F2FS-fs (loop1): Start checkpoint disabled! [ 320.315795][ T8723] BTRFS info (device loop0): force zlib compression, level 3 [ 320.432375][ T8701] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 320.548274][ T8763] loop6: detected capacity change from 0 to 4096 [ 320.575589][ T8763] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 320.709426][ T5626] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 320.738474][ T5626] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 320.818913][ T31] audit: type=1800 audit(1783256770.285:478): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.642" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 320.824717][ T8763] ntfs3(loop6): $Secure::$SDH is corrupted. [ 320.853023][ T5626] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5626 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 320.909186][ T5626] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 320.935659][ T8763] ntfs3(loop6): Failed to initialize $Secure (-22). [ 320.961088][ T5626] CPU: 1 UID: 0 PID: 5626 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 320.961124][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 320.961139][ T5626] Call Trace: [ 320.961148][ T5626] [ 320.961157][ T5626] dump_stack_lvl+0xe8/0x150 [ 320.961198][ T5626] gfs2_withdraw+0xc3/0x1b0 [ 320.961237][ T5626] inode_go_instantiate+0xbc7/0x12c0 [ 320.961275][ T5626] ? preempt_schedule_thunk+0x16/0x40 [ 320.961309][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.961339][ T5626] ? __pfx_inode_go_instantiate+0x10/0x10 [ 320.961377][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.961413][ T5626] gfs2_instantiate+0x168/0x220 [ 320.961455][ T5626] gfs2_glock_wait+0x1d4/0x2a0 [ 320.961482][ T5626] do_sync+0x49c/0xbb0 [ 320.961512][ T5626] ? gfs2_quota_sync+0x353/0x450 [ 320.961552][ T5626] ? __pfx_do_sync+0x10/0x10 [ 320.961592][ T5626] ? gfs2_quota_sync+0x353/0x450 [ 320.961625][ T5626] ? do_raw_spin_unlock+0xf5/0x210 [ 320.961658][ T5626] gfs2_quota_sync+0x353/0x450 [ 320.961700][ T5626] gfs2_sync_fs+0x4c/0xb0 [ 320.961728][ T5626] sync_filesystem+0xee/0x230 [ 320.961769][ T5626] generic_shutdown_super+0x77/0x2d0 [ 320.961806][ T5626] kill_block_super+0x44/0x90 [ 320.961844][ T5626] deactivate_locked_super+0xbc/0x130 [ 320.961879][ T5626] cleanup_mnt+0x3d3/0x460 [ 320.961920][ T5626] task_work_run+0x1d9/0x270 [ 320.961961][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 320.962008][ T5626] exit_to_user_mode_loop+0x1fa/0x730 [ 320.962040][ T5626] ? rcu_is_watching+0x15/0xb0 [ 320.962078][ T5626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.962111][ T5626] do_syscall_64+0x353/0x580 [ 320.962144][ T5626] ? trace_irq_disable+0x3b/0x140 [ 320.962180][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.962204][ T5626] RIP: 0033:0x7f0d8c19f097 [ 320.962225][ T5626] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 320.962244][ T5626] RSP: 002b:00007ffc5581b2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 320.962267][ T5626] RAX: 0000000000000000 RBX: 00007f0d8c2332ca RCX: 00007f0d8c19f097 [ 320.962283][ T5626] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5581b370 [ 320.962298][ T5626] RBP: 00007ffc5581b370 R08: 00007ffc5581c370 R09: 00000000ffffffff [ 320.962314][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc5581c400 [ 320.962329][ T5626] R13: 00007f0d8c2332ca R14: 000000000004dfd3 R15: 00007ffc5581c440 [ 320.962367][ T5626] [ 321.253087][ T5626] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 321.276797][ T8743] loop5: detected capacity change from 0 to 32768 [ 321.338678][ T31] audit: type=1800 audit(1783256770.805:479): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.642" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 321.546825][ T8772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.599660][ T8772] overlayfs: missing 'lowerdir' [ 321.702168][ T8743] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 322.653798][ T31] audit: type=1800 audit(1783256772.115:480): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.647" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 322.819002][ T5617] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 322.862211][ T8780] loop6: detected capacity change from 0 to 256 [ 322.869427][ T5623] ocfs2: Unmounting device (7,5) on (node local) [ 322.884664][ T8780] exfat: Deprecated parameter 'namecase' [ 322.944190][ T8780] exfat: Deprecated parameter 'utf8' [ 322.983082][ T8780] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 324.150501][ T8786] loop1: detected capacity change from 0 to 32768 [ 324.178035][ T8786] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.653 (8786) [ 324.198074][ T8786] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 324.208245][ T8786] BTRFS info (device loop1): using crc32c checksum algorithm [ 324.618812][ T8792] loop5: detected capacity change from 0 to 32768 [ 324.632210][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 324.642294][ T8783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.654'. [ 324.701166][ T8786] BTRFS info (device loop1): enabling ssd optimizations [ 324.708198][ T8786] BTRFS info (device loop1): turning on flush-on-commit [ 324.715170][ T8786] BTRFS info (device loop1): turning on async discard [ 324.722142][ T8786] BTRFS info (device loop1): enabling free space tree [ 324.728953][ T8786] BTRFS info (device loop1): force zlib compression, level 3 [ 324.737153][ T8792] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 324.747954][ T8792] CPU: 0 UID: 0 PID: 8792 Comm: syz.5.655 Not tainted syzkaller #0 PREEMPT(full) [ 324.747975][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 324.747987][ T8792] Call Trace: [ 324.747994][ T8792] [ 324.748002][ T8792] dump_stack_lvl+0xe8/0x150 [ 324.748035][ T8792] sysfs_create_dir_ns+0x271/0x2a0 [ 324.748063][ T8792] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 324.748091][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.748113][ T8792] ? do_raw_spin_unlock+0xf5/0x210 [ 324.748139][ T8792] kobject_add_internal+0x622/0xcd0 [ 324.748165][ T8792] kobject_init_and_add+0x12b/0x1a0 [ 324.748201][ T8792] ? __pfx_kobject_init_and_add+0x10/0x10 [ 324.748233][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.748254][ T8792] ? __raw_spin_lock_init+0x45/0x100 [ 324.748276][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.748298][ T8792] ? __init_swait_queue_head+0xa8/0x150 [ 324.748320][ T8792] gfs2_sys_fs_add+0x257/0x480 [ 324.748342][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.748364][ T8792] ? is_dynamic_key+0x1aa/0x1c0 [ 324.748389][ T8792] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 324.748421][ T8792] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 324.748461][ T8792] gfs2_fill_super+0x1328/0x20b0 [ 324.748503][ T8792] ? __pfx_gfs2_fill_super+0x10/0x10 [ 324.748530][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.748557][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.748578][ T8792] ? sb_set_blocksize+0x155/0x240 [ 324.748604][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.748625][ T8792] ? setup_bdev_super+0x4c1/0x5b0 [ 324.748659][ T8792] get_tree_bdev_flags+0x430/0x4f0 [ 324.748689][ T8792] ? __pfx_gfs2_fill_super+0x10/0x10 [ 324.748718][ T8792] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 324.748751][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.748779][ T8792] gfs2_get_tree+0x51/0x1e0 [ 324.748815][ T8792] vfs_get_tree+0x92/0x2a0 [ 324.748835][ T8792] do_new_mount+0x319/0xdc0 [ 324.748858][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.748884][ T8792] ? __pfx_do_new_mount+0x10/0x10 [ 324.748910][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.748930][ T8792] ? ns_capable+0x89/0xe0 [ 324.748953][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.748974][ T8792] ? path_mount+0x647/0x1040 [ 324.749000][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.749021][ T8792] ? user_path_at+0xd4/0x160 [ 324.749050][ T8792] __se_sys_mount+0x31d/0x420 [ 324.749081][ T8792] ? __pfx___se_sys_mount+0x10/0x10 [ 324.749103][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.749130][ T8792] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.749151][ T8792] ? __x64_sys_mount+0x20/0xc0 [ 324.749175][ T8792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.749195][ T8792] do_syscall_64+0x174/0x580 [ 324.749221][ T8792] ? trace_irq_disable+0x3b/0x140 [ 324.749249][ T8792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.749268][ T8792] RIP: 0033:0x7f712df9f0ca [ 324.749287][ T8792] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.749303][ T8792] RSP: 002b:00007f712ee38e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 324.749322][ T8792] RAX: ffffffffffffffda RBX: 00007f712ee38ee0 RCX: 00007f712df9f0ca [ 324.749335][ T8792] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f712ee38ea0 [ 324.749348][ T8792] RBP: 00002000000124c0 R08: 00007f712ee38ee0 R09: 0000000000000000 [ 324.749361][ T8792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 324.749373][ T8792] R13: 00007f712ee38ea0 R14: 00000000000125f6 R15: 0000200000000180 [ 324.749402][ T8792] [ 324.749423][ T8792] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 325.120762][ T8792] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 325.282829][ T31] audit: type=1800 audit(1783256774.755:481): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.653" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 325.390692][ T31] audit: type=1800 audit(1783256774.815:482): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.653" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 325.720647][ T5629] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 326.179901][ T8809] loop6: detected capacity change from 0 to 32768 [ 326.218016][ T8809] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 326.225922][ T8809] CPU: 0 UID: 0 PID: 8809 Comm: syz.6.657 Not tainted syzkaller #0 PREEMPT(full) [ 326.225950][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 326.225965][ T8809] Call Trace: [ 326.225974][ T8809] [ 326.225984][ T8809] dump_stack_lvl+0xe8/0x150 [ 326.226027][ T8809] sysfs_create_dir_ns+0x271/0x2a0 [ 326.226064][ T8809] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 326.226102][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.226131][ T8809] ? do_raw_spin_unlock+0xf5/0x210 [ 326.226165][ T8809] kobject_add_internal+0x622/0xcd0 [ 326.226201][ T8809] kobject_init_and_add+0x12b/0x1a0 [ 326.226249][ T8809] ? __pfx_kobject_init_and_add+0x10/0x10 [ 326.226293][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.226321][ T8809] ? __raw_spin_lock_init+0x45/0x100 [ 326.226351][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.226379][ T8809] ? __init_swait_queue_head+0xa8/0x150 [ 326.226409][ T8809] gfs2_sys_fs_add+0x257/0x480 [ 326.226439][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.226468][ T8809] ? is_dynamic_key+0x1aa/0x1c0 [ 326.226504][ T8809] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 326.226549][ T8809] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 326.226603][ T8809] gfs2_fill_super+0x1328/0x20b0 [ 326.226659][ T8809] ? __pfx_gfs2_fill_super+0x10/0x10 [ 326.226696][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.226731][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.226759][ T8809] ? sb_set_blocksize+0x155/0x240 [ 326.226801][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.226830][ T8809] ? setup_bdev_super+0x4c1/0x5b0 [ 326.226873][ T8809] get_tree_bdev_flags+0x430/0x4f0 [ 326.226911][ T8809] ? __pfx_gfs2_fill_super+0x10/0x10 [ 326.226949][ T8809] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 326.226991][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.227026][ T8809] gfs2_get_tree+0x51/0x1e0 [ 326.227066][ T8809] vfs_get_tree+0x92/0x2a0 [ 326.227091][ T8809] do_new_mount+0x319/0xdc0 [ 326.227122][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.227158][ T8809] ? __pfx_do_new_mount+0x10/0x10 [ 326.227192][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.227220][ T8809] ? ns_capable+0x89/0xe0 [ 326.227251][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.227279][ T8809] ? path_mount+0x647/0x1040 [ 326.227314][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.227342][ T8809] ? user_path_at+0xd4/0x160 [ 326.227381][ T8809] __se_sys_mount+0x31d/0x420 [ 326.227422][ T8809] ? __pfx___se_sys_mount+0x10/0x10 [ 326.227453][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.227490][ T8809] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.227519][ T8809] ? __x64_sys_mount+0x20/0xc0 [ 326.227551][ T8809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.227578][ T8809] do_syscall_64+0x174/0x580 [ 326.227612][ T8809] ? trace_irq_disable+0x3b/0x140 [ 326.227651][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.227677][ T8809] RIP: 0033:0x7f5c9d19f0ca [ 326.227699][ T8809] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.227724][ T8809] RSP: 002b:00007f5c9e13de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.227749][ T8809] RAX: ffffffffffffffda RBX: 00007f5c9e13dee0 RCX: 00007f5c9d19f0ca [ 326.227767][ T8809] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f5c9e13dea0 [ 326.227790][ T8809] RBP: 00002000000124c0 R08: 00007f5c9e13dee0 R09: 0000000000000000 [ 326.227807][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 326.227823][ T8809] R13: 00007f5c9e13dea0 R14: 00000000000125f6 R15: 0000200000000180 [ 326.227862][ T8809] [ 326.227926][ T8809] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 326.453572][ T5626] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566 [ 326.460892][ T8809] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 326.570133][ T5626] CPU: 1 UID: 0 PID: 5626 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 326.570166][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 326.570181][ T5626] Call Trace: [ 326.570191][ T5626] [ 326.570200][ T5626] dump_stack_lvl+0xe8/0x150 [ 326.570243][ T5626] gfs2_assert_warn_i+0x18c/0x2c0 [ 326.570299][ T5626] gfs2_make_fs_ro+0x30d/0x320 [ 326.570331][ T5626] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 326.570360][ T5626] ? __pfx_autoremove_wake_function+0x10/0x10 [ 326.570390][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.570422][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.570450][ T5626] ? flush_work+0xd/0x30 [ 326.570486][ T5626] gfs2_put_super+0x235/0x870 [ 326.570523][ T5626] ? __pfx_gfs2_put_super+0x10/0x10 [ 326.570551][ T5626] generic_shutdown_super+0x13d/0x2d0 [ 326.570591][ T5626] kill_block_super+0x44/0x90 [ 326.570630][ T5626] deactivate_locked_super+0xbc/0x130 [ 326.570667][ T5626] cleanup_mnt+0x3d3/0x460 [ 326.570710][ T5626] task_work_run+0x1d9/0x270 [ 326.570751][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 326.570801][ T5626] exit_to_user_mode_loop+0x1fa/0x730 [ 326.570833][ T5626] ? rcu_is_watching+0x15/0xb0 [ 326.570873][ T5626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.570900][ T5626] do_syscall_64+0x353/0x580 [ 326.570934][ T5626] ? trace_irq_disable+0x3b/0x140 [ 326.570973][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.570998][ T5626] RIP: 0033:0x7f0d8c19f097 [ 326.571020][ T5626] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 326.571039][ T5626] RSP: 002b:00007ffc5581b2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 326.571064][ T5626] RAX: 0000000000000000 RBX: 00007f0d8c2332ca RCX: 00007f0d8c19f097 [ 326.571080][ T5626] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5581b370 [ 326.571096][ T5626] RBP: 00007ffc5581b370 R08: 00007ffc5581c370 R09: 00000000ffffffff [ 326.571112][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc5581c400 [ 326.571127][ T5626] R13: 00007f0d8c2332ca R14: 000000000004dfd3 R15: 00007ffc5581c440 [ 326.571166][ T5626] [ 326.844734][ T8820] loop0: detected capacity change from 0 to 256 [ 326.938397][ T8820] exfat: Deprecated parameter 'namecase' [ 327.002964][ T8820] exfat: Deprecated parameter 'utf8' [ 327.066917][ T8820] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 329.470549][ T8852] loop3: detected capacity change from 0 to 128 [ 329.615111][ T8852] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 329.627358][ T8852] hpfs: filesystem error: improperly stopped [ 329.633547][ T8852] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 329.641486][ T8852] hpfs: You really don't want any checks? You are crazy... [ 329.648731][ T8852] hpfs: Code page index out of array [ 329.654171][ T8852] hpfs: code page support is disabled [ 329.724235][ T8852] hpfs: hpfs_map_4sectors(): unaligned read [ 329.733600][ T8852] hpfs: hpfs_map_4sectors(): unaligned read [ 329.739608][ T8852] hpfs: filesystem error: unable to find root dir [ 330.782086][ T6961] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 330.941687][ T8859] loop5: detected capacity change from 0 to 128 [ 330.981568][ T8859] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 331.021575][ T8859] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 331.022428][ T6961] usb 2-1: Using ep0 maxpacket: 32 [ 331.054723][ T6961] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1023 [ 331.074257][ T6961] usb 2-1: string descriptor 0 read error: -22 [ 331.080807][ T6961] usb 2-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 331.098039][ T6961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.120020][ T8855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 331.171946][ T6961] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.184652][ T6961] usb 2-1: MIDIStreaming interface descriptor not found [ 331.401373][ T5757] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 331.516389][ T6961] usb 2-1: USB disconnect, device number 26 [ 331.571394][ T5757] usb 4-1: Using ep0 maxpacket: 32 [ 331.592373][ T5757] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 331.625118][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.677070][ T5623] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 331.678672][ T5757] usb 4-1: config 0 descriptor?? [ 331.758340][ T5757] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 332.109276][ T8874] loop6: detected capacity change from 0 to 512 [ 332.211132][ T8874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.245158][ T8876] loop1: detected capacity change from 0 to 256 [ 332.316878][ T8874] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.329757][ T8876] exfat: Deprecated parameter 'namecase' [ 332.394863][ T8876] exfat: Deprecated parameter 'utf8' [ 332.405320][ T5757] gspca_vc032x: reg_w err -71 [ 332.429335][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.454644][ T8876] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 332.459744][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.547051][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.171175][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.194277][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.199616][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.211351][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.229403][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.237514][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.263934][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.269271][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.285252][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.290814][ T8884] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.300812][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.313067][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.327151][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.486253][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.498189][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.508283][ T5757] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.521359][ T5757] gspca_vc032x: Unknown sensor... [ 333.531784][ T5757] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 333.702216][ T5757] usb 4-1: USB disconnect, device number 11 [ 333.993561][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 334.087725][ T7357] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.109582][ T8870] loop2: detected capacity change from 0 to 32768 [ 334.176383][ T8870] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.677 (8870) [ 334.404464][ T10] block nbd4: Possible stuck request ffff8880278c0000: control (read@0,1024B). Runtime 180 seconds [ 334.415342][ T10] block nbd4: Possible stuck request ffff8880278c01c0: control (read@1024,1024B). Runtime 180 seconds [ 334.427082][ T10] block nbd4: Possible stuck request ffff8880278c0380: control (read@2048,1024B). Runtime 180 seconds [ 334.439614][ T10] block nbd4: Possible stuck request ffff8880278c0540: control (read@3072,1024B). Runtime 180 seconds [ 334.456227][ T8870] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 334.480109][ T8891] loop3: detected capacity change from 0 to 128 [ 334.521520][ T8870] BTRFS info (device loop2): using crc32c checksum algorithm [ 334.744526][ T8870] BTRFS error (device loop2): open_ctree failed: -4 [ 336.077260][ T8918] loop1: detected capacity change from 0 to 131072 [ 336.359450][ T8918] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 336.367614][ T8918] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 336.460380][ T8918] F2FS-fs (loop1): invalid crc value [ 336.629073][ T8918] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 336.647001][ T8918] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 336.655651][ T8918] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 336.664367][ T8918] FAULT_INJECTION: forcing a failure. [ 336.664367][ T8918] name failslab, interval 1, probability 0, space 0, times 0 [ 336.677006][ T8918] CPU: 1 UID: 0 PID: 8918 Comm: syz.1.690 Not tainted syzkaller #0 PREEMPT(full) [ 336.677028][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 336.677039][ T8918] Call Trace: [ 336.677047][ T8918] [ 336.677054][ T8918] dump_stack_lvl+0xe8/0x150 [ 336.677086][ T8918] should_fail_ex+0x40c/0x560 [ 336.677124][ T8918] should_failslab+0xa8/0x100 [ 336.677154][ T8918] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 336.677176][ T8918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.677199][ T8918] ? security_file_alloc+0x34/0x310 [ 336.677223][ T8918] ? security_file_alloc+0x34/0x310 [ 336.677254][ T8918] security_file_alloc+0x34/0x310 [ 336.677281][ T8918] init_file+0x90/0x2b0 [ 336.677310][ T8918] alloc_empty_file+0x74/0x1d0 [ 336.677335][ T8918] path_openat+0x8f/0x3830 [ 336.677367][ T8918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.677388][ T8918] ? kasan_save_track+0x4f/0x80 [ 336.677410][ T8918] ? kasan_save_track+0x3e/0x80 [ 336.677432][ T8918] ? __kasan_slab_alloc+0x6c/0x80 [ 336.677456][ T8918] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 336.677477][ T8918] ? do_getname+0x2e/0x250 [ 336.677496][ T8918] ? do_sys_openat2+0xcc/0x200 [ 336.677518][ T8918] ? __x64_sys_openat+0x138/0x170 [ 336.677540][ T8918] ? do_syscall_64+0x174/0x580 [ 336.677565][ T8918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.677591][ T8918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.677612][ T8918] ? __lock_acquire+0x683/0x2cf0 [ 336.677648][ T8918] do_file_open+0x23e/0x4a0 [ 336.677682][ T8918] ? __pfx_do_file_open+0x10/0x10 [ 336.677730][ T8918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.677751][ T8918] ? _raw_spin_unlock+0x28/0x50 [ 336.677771][ T8918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.677792][ T8918] ? alloc_fd+0x651/0x6c0 [ 336.677826][ T8918] do_sys_openat2+0x115/0x200 [ 336.677852][ T8918] ? __pfx_do_sys_openat2+0x10/0x10 [ 336.677877][ T8918] ? ksys_write+0x242/0x270 [ 336.677908][ T8918] ? __pfx_ksys_write+0x10/0x10 [ 336.677940][ T8918] __x64_sys_openat+0x138/0x170 [ 336.677973][ T8918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.678001][ T8918] do_syscall_64+0x174/0x580 [ 336.678034][ T8918] ? trace_irq_disable+0x3b/0x140 [ 336.678064][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.678083][ T8918] RIP: 0033:0x7fccb3f9de59 [ 336.678099][ T8918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.678113][ T8918] RSP: 002b:00007fccb4e8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 336.678132][ T8918] RAX: ffffffffffffffda RBX: 00007fccb4225fa0 RCX: 00007fccb3f9de59 [ 336.678145][ T8918] RDX: 0000000000082040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 336.678158][ T8918] RBP: 00007fccb4e8c090 R08: 0000000000000000 R09: 0000000000000000 [ 336.678169][ T8918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.678180][ T8918] R13: 00007fccb4226038 R14: 00007fccb4225fa0 R15: 00007ffcde7f4598 [ 336.678209][ T8918] [ 338.083550][ T8933] netlink: 140 bytes leftover after parsing attributes in process `syz.3.692'. [ 338.217662][ T8924] loop0: detected capacity change from 0 to 32768 [ 338.291228][ T8924] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 338.392537][ T11] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 338.605817][ T11] usb 7-1: unable to get BOS descriptor or descriptor too short [ 338.621187][ T5617] ocfs2: Unmounting device (7,0) on (node local) [ 338.667929][ T11] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.708984][ T11] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.763110][ T11] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 338.815121][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.865677][ T11] usb 7-1: Product: syz [ 338.887688][ T11] usb 7-1: Manufacturer: syz [ 338.920269][ T11] usb 7-1: SerialNumber: syz [ 338.995391][ T8949] netlink: 48 bytes leftover after parsing attributes in process `syz.3.700'. [ 339.013460][ T11] usb 7-1: selecting invalid altsetting 1 [ 339.044466][ T11] usb 7-1: unit 6 not found! [ 339.576038][ T11] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 339.905235][ T8970] loop3: detected capacity change from 0 to 512 [ 339.921826][ T11] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 339.968292][ T11] usb 7-1: USB disconnect, device number 7 [ 340.069999][ T8941] loop1: detected capacity change from 0 to 32768 [ 340.110084][ T8970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.124148][ T8941] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 340.132968][ T8941] dlm: no local IP address has been set [ 340.140388][ T8941] dlm: cannot start dlm midcomms -107 [ 340.147978][ T8941] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 340.201543][ T8970] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.815748][ T5743] udevd[5743]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.131559][ T8989] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005 [ 341.815115][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.413908][ T9005] loop2: detected capacity change from 0 to 256 [ 342.445767][ T9005] exfat: Deprecated parameter 'namecase' [ 342.486692][ T9005] exfat: Deprecated parameter 'utf8' [ 342.600122][ T9005] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 342.990118][ T9014] netlink: 'syz.1.715': attribute type 23 has an invalid length. [ 343.151510][ T6961] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 343.301851][ T32] INFO: task syz.4.307:7147 blocked for more than 143 seconds. [ 343.317084][ T9020] loop5: detected capacity change from 0 to 16 [ 343.319104][ T32] Not tainted syzkaller #0 [ 343.343107][ T9020] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 343.365854][ T6961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 343.389364][ T9020] cramfs: unsupported filesystem features [ 343.391330][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.443047][ T6961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41480, setting to 1024 [ 343.458309][ T32] task:syz.4.307 state:D stack:26784 pid:7147 tgid:7143 ppid:5618 task_flags:0x400140 flags:0x00080002 [ 343.483263][ T6961] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 343.495230][ T32] Call Trace: [ 343.499875][ T9002] loop3: detected capacity change from 0 to 32768 [ 343.514932][ T32] [ 343.519423][ T6961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.532316][ T32] __schedule+0x17d9/0x56c0 [ 343.538732][ T9022] loop2: detected capacity change from 0 to 8 [ 343.552614][ T32] ? __pfx___schedule+0x10/0x10 [ 343.568071][ T6961] usb 1-1: config 0 descriptor?? [ 343.588792][ T32] ? schedule+0x90/0x2b0 [ 343.610883][ T9022] squashfs image failed sanity check [ 343.617812][ T32] schedule+0x164/0x2b0 [ 343.656204][ T32] schedule_preempt_disabled+0x13/0x30 [ 343.671177][ T9002] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 343.690409][ T32] __mutex_lock+0x7bf/0x1550 [ 343.717251][ T32] ? __mutex_lock+0x5d4/0x1550 [ 343.739681][ T32] ? bdev_open+0xde/0xd70 [ 343.766108][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 343.787671][ T32] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 343.836365][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.862041][ T6961] usbhid 1-1:0.0: can't add hid device: -71 [ 343.870242][ T32] ? file_init_path+0x42e/0x5a0 [ 343.879790][ T6961] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 343.889158][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.153536][ T31] audit: type=1800 audit(1783257049.599:483): pid=9026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.710" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 344.153618][ T32] ? disk_block_events+0xab/0x120 [ 344.179766][ T32] ? bdev_open+0xbe/0xd70 [ 344.184248][ T32] bdev_open+0xde/0xd70 [ 344.188499][ T32] bdev_file_open_by_dev+0x1be/0x240 [ 344.200217][ T6961] usb 1-1: USB disconnect, device number 20 [ 344.217501][ T32] setup_bdev_super+0x5a/0x5b0 [ 344.222609][ T32] get_tree_bdev_flags+0x388/0x4f0 [ 344.227818][ T32] ? __pfx_fuse_fill_super+0x10/0x10 [ 344.233254][ T32] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 344.238981][ T32] ? fuse_chan_set_fc+0x12/0x50 [ 344.243974][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.249732][ T32] ? fuse_conn_init+0x708/0x920 [ 344.254960][ T32] fuse_get_tree+0x194/0x3b0 [ 344.259639][ T32] vfs_get_tree+0x92/0x2a0 [ 344.265301][ T32] do_new_mount+0x319/0xdc0 [ 344.269894][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.275626][ T32] ? __pfx_do_new_mount+0x10/0x10 [ 344.280724][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.286483][ T32] ? ns_capable+0x89/0xe0 [ 344.290885][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.297182][ T32] ? path_mount+0x647/0x1040 [ 344.316263][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.340011][ T32] ? user_path_at+0xd4/0x160 [ 344.361632][ T32] __se_sys_mount+0x31d/0x420 [ 344.379565][ T32] ? __pfx___se_sys_mount+0x10/0x10 [ 344.410217][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.434656][ T32] ? __x64_sys_mount+0x20/0xc0 [ 344.452356][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.464406][ T32] do_syscall_64+0x174/0x580 [ 344.473212][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.484464][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.509314][ T32] RIP: 0033:0x7fd512d9de59 [ 344.514094][ T32] RSP: 002b:00007fd513cc6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 344.532283][ T32] RAX: ffffffffffffffda RBX: 00007fd513026270 RCX: 00007fd512d9de59 [ 344.551626][ T32] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000200000000000 [ 344.562848][ T32] RBP: 00007fd512e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 344.581519][ T6961] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 344.592200][ T32] R10: 0000000001000009 R11: 0000000000000246 R12: 0000000000000000 [ 344.614928][ T32] R13: 00007fd513026308 R14: 00007fd513026270 R15: 00007ffec6d623d8 [ 344.633268][ T32] [ 344.637946][ T32] [ 344.637946][ T32] Showing all locks held in the system: [ 344.681730][ T32] 1 lock held by khungtaskd/32: [ 344.731363][ T32] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 344.746410][ T32] 2 locks held by getty/5372: [ 344.761502][ T32] #0: ffff888036a700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 344.780229][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 344.790489][ T32] 1 lock held by syz-executor/5604: [ 344.795884][ T32] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 344.806788][ T32] 2 locks held by syz-executor/5627: [ 344.814921][ T6961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 344.827375][ T32] #0: ffff888032ff60d8 (&type->s_umount_key#58){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 344.837736][ T6961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41480, setting to 1024 [ 344.848944][ T32] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 344.860010][ T6961] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 344.869133][ T32] 5 locks held by kworker/u8:9/5816: [ 344.874493][ T6961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.882689][ T32] 1 lock held by udevd/6108: [ 344.888722][ T32] #0: ffff8880273a9350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 344.899909][ T32] 5 locks held by kworker/1:8/6961: [ 344.899960][ T6961] usb 1-1: config 0 descriptor?? [ 344.910267][ T32] 2 locks held by syz.4.307/7147: [ 344.924701][ T32] #0: ffff88807a4560d8 (&type->s_umount_key#86/1){+.+.}-{4:4}, at: sget_fc+0x938/0x1900 [ 344.935385][ T32] #1: ffff8880273a9350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 344.945868][ T32] 1 lock held by syz-executor/7357: [ 344.951114][ T32] #0: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 344.962632][ T32] 3 locks held by syz.0.698/8950: [ 344.967786][ T32] [ 344.972361][ T32] ============================================= [ 344.972361][ T32] [ 344.981193][ T5627] ocfs2: Unmounting device (7,3) on (node local) [ 344.988842][ T32] NMI backtrace for cpu 1 [ 344.988859][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 344.988890][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 344.988905][ T32] Call Trace: [ 344.988915][ T32] [ 344.988924][ T32] dump_stack_lvl+0xe8/0x150 [ 344.988967][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 344.988995][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.989025][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 344.989066][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 344.989099][ T32] sys_info+0x135/0x170 [ 344.989122][ T32] watchdog+0xfd7/0x1030 [ 344.989162][ T32] ? watchdog+0x1c7/0x1030 [ 344.989200][ T32] kthread+0x388/0x470 [ 344.989236][ T32] ? __pfx_watchdog+0x10/0x10 [ 344.989264][ T32] ? __pfx_kthread+0x10/0x10 [ 344.989301][ T32] ret_from_fork+0x514/0xb70 [ 344.989340][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 344.989376][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.989404][ T32] ? __switch_to+0xc89/0x1420 [ 344.989439][ T32] ? __pfx_kthread+0x10/0x10 [ 344.989476][ T32] ret_from_fork_asm+0x1a/0x30 [ 344.989519][ T32] [ 344.989557][ T32] Sending NMI from CPU 1 to CPUs 0: [ 345.116204][ C0] NMI backtrace for cpu 0 [ 345.116224][ C0] CPU: 0 UID: 0 PID: 135 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 345.116255][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 345.116270][ C0] Workqueue: 0x0 (events_unbound) [ 345.116302][ C0] RIP: 0010:rcu_is_watching+0x5c/0xb0 [ 345.116343][ C0] Code: c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 bc ae 88 00 48 c7 c3 d8 a8 6d 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 <75> 34 8b 03 65 ff 0d 19 22 c1 11 74 11 83 e0 04 c1 e8 02 5b 41 5e [ 345.116362][ C0] RSP: 0018:ffffc90002e77c38 EFLAGS: 00000246 [ 345.116381][ C0] RAX: 0000000000000000 RBX: ffff8880b86338d8 RCX: 0000000080000001 [ 345.116398][ C0] RDX: 0000000000000000 RSI: ffffffff8c4bd360 RDI: ffffffff8c4bd320 [ 345.116414][ C0] RBP: 1ffff11003f66ba3 R08: ffffffff8bcfd590 R09: 0000000000000000 [ 345.116430][ C0] R10: 0000000000008000 R11: ffffffff8ea0e980 R12: ffff88801fb35d2c [ 345.116448][ C0] R13: ffffffff8bcfd590 R14: ffffffff8e4f77d0 R15: dffffc0000000000 [ 345.116469][ C0] FS: 0000000000000000(0000) GS:ffff888124f59000(0000) knlGS:0000000000000000 [ 345.116487][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.116505][ C0] CR2: 000055556bb11a78 CR3: 000000000e946000 CR4: 0000000000350ef0 [ 345.116523][ C0] Call Trace: [ 345.116532][ C0] [ 345.116543][ C0] lock_release+0x4b/0x3c0 [ 345.116575][ C0] ? schedule+0x90/0x2b0 [ 345.116604][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.116631][ C0] ? wq_worker_sleeping+0x66/0x250 [ 345.116660][ C0] ? schedule+0x90/0x2b0 [ 345.116686][ C0] schedule+0x141/0x2b0 [ 345.116715][ C0] worker_thread+0xc12/0xfb0 [ 345.116765][ C0] kthread+0x388/0x470 [ 345.116797][ C0] ? __pfx_worker_thread+0x10/0x10 [ 345.116822][ C0] ? __pfx_kthread+0x10/0x10 [ 345.116855][ C0] ret_from_fork+0x514/0xb70 [ 345.116893][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 345.116925][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.116952][ C0] ? __switch_to+0xc89/0x1420 [ 345.116982][ C0] ? __pfx_kthread+0x10/0x10 [ 345.117017][ C0] ret_from_fork_asm+0x1a/0x30 [ 345.117052][ C0] [ 345.339073][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 345.345929][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 345.355034][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 345.365197][ T32] Call Trace: [ 345.368488][ T32] [ 345.371413][ T32] vpanic+0x56c/0xa60 [ 345.375405][ T32] ? __pfx___schedule+0x10/0x10 [ 345.380255][ T32] ? __pfx_vpanic+0x10/0x10 [ 345.384765][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.390396][ T32] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 345.396547][ T32] panic+0xc5/0xd0 [ 345.400272][ T32] ? __pfx_panic+0x10/0x10 [ 345.404690][ T32] ? preempt_schedule_common+0x82/0xd0 [ 345.410145][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 345.415512][ T32] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 345.421662][ T32] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 345.427814][ T32] watchdog+0x1030/0x1030 [ 345.432153][ T32] ? watchdog+0x1c7/0x1030 [ 345.436579][ T32] kthread+0x388/0x470 [ 345.440646][ T32] ? __pfx_watchdog+0x10/0x10 [ 345.445319][ T32] ? __pfx_kthread+0x10/0x10 [ 345.449910][ T32] ret_from_fork+0x514/0xb70 [ 345.454505][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 345.459615][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.465241][ T32] ? __switch_to+0xc89/0x1420 [ 345.469917][ T32] ? __pfx_kthread+0x10/0x10 [ 345.474508][ T32] ret_from_fork_asm+0x1a/0x30 [ 345.479279][ T32] [ 345.482508][ T32] Kernel Offset: disabled [ 345.486816][ T32] Rebooting in 86400 seconds..