last executing test programs: 17.207401714s ago: executing program 1 (id=197): mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 16.202514616s ago: executing program 1 (id=200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000000180)=""/184, 0xac) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettaction={0x1c, 0x32, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20084800}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r8, r9, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, r7, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004380)="a6c574dd37ad5a06633d06f193c5b957758b45f2f4212a3ce6abbfded4461de98c0780332e9d3bfa72a53a1565605c551d53a1a3df7a15704f14493a1022fbcf144fe898338e9d3ea15101d7e179a6bfc093e7fb9ce3bb0854c64264cf2b2baeee72f52658949c8262186aa1582f932c471e68d5cfabd57f6abc46aa8052b942bac756f03e4a14f3ee3cc55d2aeec21d08ae0cd7a67ba70814ce161c6b7718e96055c1494f55f10673316179e99ce409c9cc18b80a020ea99be8bd3415d4420a9a4c74c9d16b8c6b58517f1380c44b8cee0d164eee6bfadada764eeac74f4c867b5e184dc0918d587bfc577836e9668f0fd44674f1310a910df2dc6e2342d47fbeb890b30d7183595996daa2e6f21fc1541ce0ed0686f2ca5536bfbc851a1ab1575502a19cbd990e954f12e9b7a0985d93c1ca66b268d4bdcdf7c75c17faa6d9b03c9f88fe6d31aaef35d2dc65bc74279983b0c6646475b83c1e01b6c8872d115aa72ae06a18e6d4120f551d2c35fae118d490c50867bf3f6cd2f950f22d6b0c7577e04697bee47b85c6144e2ecf45c4fd93ac1b51e44f98e38f9e9b93c3eb9160404d3a60f808836a8668604ffd8b317f91fd4dae384386c01f5fdebfa643907b5a07ad1423cb0d4a9a68aae6d2b5a912ba0b0789735e73d9a8ed8ae42c92f67f5c3a40e7df5575dd5e033f3bbfc443cfdde1685d9d5c05e8e9469bf7f546398a36cac008bc36520d0e08a4cee2a48ad2ab819524c9e2145f0d9d474acdb028b9cb8248a4d9df5bf6a1bfeea458fedbc039815ffe375cae1fb9be988916c20387318cde61c36b17eea13c176bb106d292728537032cdd79d7c8d48038a6b71aec0d61e774be6ad9f64210957c82dea29ca0991e019455cd7fd2ee2a64491e87e89807be62436132e5a6e75eb14f83885f161bc0c1ad2f3390cf0125712a9f5a14e62be0a9ef23f1eae46680143a83ab24483be91e1c015d4aadeb378c7aab79a474b755e14bbba59f2ac1b80d53d38baee42fd758e9a336ca9044e9fca0146f7168aa4a519e674daf9e061778a74a9ba48c34e1bc8ee86943f37b6fb653a82598902630bd4fa3cf374a622f38dcfe1006a3eed5c31766d13bcb431d7911ed3fd747755300b0343b65de201e0b95599f36cf1971b39fb3bad2448b863df0df7a3ad88741f08b90d7ab7632f481f0a6d1d8cea57d106b54790acb105f5a4030c48a232592a887863710b16abb7357670b36ccfa676d6689bf10b6ff95af963336f89f4136dc9ba2ea1c92bba5cafca6b248b2ffba2737012f29ac03ff59572833c4ff9e1a2ef2571e6962ab67e1e55138ddc4ac90441fa75f0feb9b2e07424bde534f28a50205f1136d9fca176d875bc44e3439c0bda08a2777987bb4e6795f48038f2ac7963d6528fddedf73b8416412031e84fb2ea1374adc4e3999db6339aadbf1c795dac51153f0ac54ca6d418427b696ded56900d663ef962822d67b6c7a6a0d5002f88e24b06ca47529f02ebbfffae34efec65f230de35368054a9d8bd9fc710f005008149019d683c7450234ae571b40e5de4c9178c1f1122aeac8293008a28ead3946bd6287126fdf42fecb03700cb9495b8a9be544aef8b489238020d7b9149f404dc17f61cfa4a3eeae72f46f79fe3f6d384ac2a4db2a45bc8c002ee4d491607e924fefd165c46fb15f2abba54a36a2460b6c2ee63de3e30e98ff3d453fab204eaef89ea21f8117b0e5e5e87eed6e2a3a58d270e65cc92f618b0e445d55f29c031fd36fce5ff62d036902bf5f1e4feb74c571f5f8fe03519d579c78f82efe2dea5192222f42ce4ed35f0f5df316dbe5b1db225b00dbe4e04518bb289c6eecbf2025a6758eb04f3675a9061b5e9ae5a9ec9bc5ee41b08d71c9059d2c68a42da09d2eacd3ace96be1ad943830663052cb8e3872588394453a1aee28cc3f7e4cfe34821cc8c323204a06e9d82fd4f67751c49f17f92dcb30e8f02f3ea24be55fbafa90c501c365cc0349e2c3b6f0f02ac83ff40793c4ed56e294ce28accdf6bbefcbfd0ff538d7cfab35635ed8fc8951a1ccd30b59bbe2c51eafe223b4dfcbdcde2acc437de051f9563b76a4360940a71986d86e0854a2b530ade41bdd87c0234ac5dd42ee03a102932b083e57f65c1019d4054efc1cd25f4f852b9cc6befd387ddecce4da58a466e536ee8f7a3ca5be424c92b1a20eca71d5901f3d62ac1bbcdeeaa2ef90fbcaf35168a1dc0a5cd52ea960ab4c1d0e0a6535afd5f209aa89617be651c4c2cd212445b32e17a04aeca05b42d4788921e5834744e63f13222dc52c90a08b6204d85fb27c9f15de631d53b5ff0ae50b5feb46f7c67363423d24f970e0e950839da3f42016ac2f38859ae4261a1e9da9552b6a17a1d5bcbf27fff17ad05384206948b49ce4c87c80c80edb9a3b5d76d1e64b01ba735f93667b8b378be78935936c2ac1071d7abb977cf01edfe7664858cfd8f846a4de20d98a56860091820f9fe7ca2de7be202b36222b88bd8eac23f41f62e14110afafe64210f4a07f894bfbcb183b87747e362cd5b9e8c50df1453053c18fe121bb7507bc501a46f736bd13d5ecc4fa54dd77e53a604f7232c8331b1b7c0537689fb1945128f975d6405747bcc0d172c19d4fa610cf481a8aacd5f7a7cbef3456a65443322afd137708b3fc8b3ee9b8a4cb38c7b14d4fdd74daa58074bcaf22bca1cc8ec2dd22cde60ba5d892342a14be25b4d897ddb23b8154c6f24a93c00c17acd90522ef7acb80b343ac08b4af83ce8a0c95bbfe140c0f1c572639f4079607a34b8f675cf3ddfc2bff83635f9d13b2375c1d317920530fc72fc774edf8dc4f653d72876c1ae61edc6edb1cbc2edbda7207cca6811175cb8f9205d8be99d81d217e0433ac7d298962b87db00128fff1f3d264c50dedd3ca4bccc8db1c1191c3ea226d351560024be65f4e85f577bf8f06d6528f7c73640cd579ac1677ee58255c1bcedc9670684737173037eddc55bc943b78524f617653a324319f6026b6a9b02cc9e3b58e8b661d5d7805723cc5c476e3b7f04ee7dbfe1af744f756313a2146a84224877cf93d1f27c28e7e21e4d29193d6384c3e9eb337cf67a5b45970c7ec3d5523847d0e7d56cc4f132f160851feeced284fb5a75c203fa6b1e01362ff6da0ebf8d852c90b1a026386253afe5c7a078ecd8c5663bee57b83200653bd2a5e6695a3cc5d466d2e65d81da058107d2422fc99875e95b772608e456471cbbfa2ee8795b45cacb1290563eb23bf534c7db5e47fbee4081013974ce9dac3301d6cd966255e22243c90fc55f4b421940c7e819e5d54f44869943e2f267e3b1b9eafdf61a9157c04e71b756076445ead7851923efa6454ff156b2c3793192fec046b7b7e8947efe0009e9ef049dae89b34dfdc0183cc7a9c7cac4eb13994535e803a7d9f070b95df12bb2ecc30bb518517982be2a274faaec1713a423f020089848326e5fe32c115de0b7f8c2876271a0d17924d246c9e08bb534d741b03646daea5411f1825632caf101ccae49a99b82e3735513947b6c6a4b09b76203547f79f2809c96bef593c6e64bd0eb84b1b11e3f136fe725607df9b3420af6cdead70bc572a44ec1453de49fa1f6843f5e74055cc37aa86a9c06cc8094f3f58f3bac7f7980c1d41729ce1331096fbab86ee7568798a0be045b132ec6c587143ed9071f949f0090b783a1324d76f5aec5559168da67c85e3bb8a48937a214d1f101d7ccff655c5eb778ddd61cde8dc39bb1920e0d7cf418b761ab92bcc677a0c5b6cab85574c1216e3cec682dbfad3a7b053e365578c0c1c7a70a1b48b6744441f1476e13366087913dd41e6d9a272301be9721dc0fc78355fa914b8033c1eec4f2cd0cb39e17603b2f7052619cb52e658c928e3925c326d00016146a754142115d4bafed77a5ad8b541f4e5cb732af4411a1a8833ff4215aa8e0d743ecc63c311bbe3fd21335a82f0648535688434df83e6fe6ea8455294a2bcafff88a0d0485657e7adf5b73083d873cc87ca6cd56593f11642fe27d9a998d55ac7af93b702fe4418d3ce0f2dd73d8c1f60524575119bfe0d961c468a906a0df2868465b5bf5d2018b97c2e11393f673b7199dd0c71df6469f984dbd484cf809ef1f919d1b7fcec368cb93ef49fae9b564a28225c2e2eef782a07f6aa660b2c385ac00a2151e3ccf29344b93621987f57bd29ecde89a2cc8dc87471606cce12f2ac1210358b5f08eddd983e86c02440a9b357f386f8d4ea61b0a73b64427e4e73b174ca05e63ab749626132643d02df141c757485cf729bec5229b91dced3640366200eb3beaacb9e9daf19fe74d7c06c18f3caf4d9ea2cc8fa906f58c620f91fd883dc9f3743f094a4b0c85d78f7ce6cc01c53856be10e861fe347f077399e187d22418c0aad8a913f4cc892c903d544be85be4b031d1028f70acd8184de1c28538001b153bf0bbb65c160339fe34856eca5eda8aaa79d76e4f126b4bbfaac2f44c0d936002ba75b0205a21c4720b0b3ae87f5c458a57254b017c51e3a51e087c3a29a654abe9fe9c21a100122a11f500fca1bf676aaf959980fca9cf1ace013d1de770ceea61e9c831d3a5dd8faab74bf95ee49f1a580e8c4add9cafddade6c761bd100e1658070b8fdba52481144d14fab4771b63a1e1ca1ef6d4edeada494a084bab8a5e4e97d1fb9313330ab144adc08933fcfa71ce95e9a274e5d1deb79705512b74306bbf702db06720abd251f38a4d6c3f8006cd42701e2355e7a5815131530749a409c0d5d993d20a6b82d84e4f14c36ce24c713c53e8edd3d571049838ae8815cbe000e492b645072e8635290d7b4e13439bd7964aa14f5d55b9347df8d7635ff028f4b6c9c21a98d2fc733fab1953ec9f142e95a29df4cb41d7b7863423ff7c39cbe4623bf449d5bc77040d90817ac0048cc360509a5a16c3094a6d57580db5497c3b3d5c62104dc58e851acafebe9eb531018215ff2bf2d58999d6ed966a646dddb0ca203a27978983128949878002ed1ddaa77aea7215e74499f9159cc9955822db1615a258fe65e0561be8c62435b7271b1f2911a9e01439ec15cec3e1f9fd795fa829c20e8729ec79fd064db0a8c2e676b9f3e3f49f05931d79303a9bdfeb04acf35596520383d8e758a889a00e7362cee3717b70cf30abb93a5f2a40ae099c265c2df3c02b4fdc4293d4e7fc26c8887fb9eb9832b716b083cd56d77ec2525ce622a2c088ceda4c753643212e2170e89ae2eb48d99e22c4844553b3ea0eb5383813522bca850896239fd228d4215d4c5b550f041c87b78efc4c1dbb96a6b0c03ab83c7ad4484b487804bc21d2b82f10da8a4fc7bddfe88882d1285e5eb1592ae121dc37b39e0de0c4825639ebf4cb8328c236721ddcb5820f4ca2efdc2bfcebaa0c588b0cac27dc5586aad5043434edcc6c02bf7173cc771d73f369951e97a0ef5cf2deff299adb75e564b3630c41fc059a75c661dc2510a3dbaa265bd700c9e20685991875a352a8083db7560f81cccecbfa3a744cedcd22efa444140e4d1b44ca8694ae7b80854989c393173b2fd8320ffea2d9a20a076357e5005c3c827808ad6a52b8de9968a41e0ac3170ed92f9f5630c62660746badb6894a6ad22b31be6486cd433520fb12c35a2720cc4b26749c0c4fff90060d3e5c4e5a3ea0116e20fe0b540b3b1dfca809b76bdeda4288667dc0b5b12a017fc660ec2f81d2e123c7a44c5a5080cc6bb82dea8c4afdc577c083bfc1030575b566f8a645b625b0afe554c68047ca43b99f9fce1dafe0b8c04c0a96b291cfb57239acdea88a4da0702b28de12fd36f24191e872a1f84a4f9922f54c1ec1c4b334a2637bdf17c0ea02c625d49d5dfb6f3799fd533a2948f4eb715ce107beffca4d4bcda4f74cae225cd2d47e5328ea2d43e90bb5d889cb25582a6dec2074c2a56c9b085da58d04b47f705bd20d2a038e74047995a5a91f130931fc916ee1ce71a6e1e448a692f2038612e4ec92d9aa496bb456303948ee34fa252fdff78c73d0ea3561edaad53a687172928fcc6b4f7c489113444a71073891181c863e1b11fb91ba0ed1362e313738bb094e59848b6686b609820a40f2bb7c06b2ed25f8834550a11be1d48af0260d8b22af8a560b9b995539118a7703621bf4f458d317ff594ff5ad5b54c460b0fbefb26e6afaed183d76f5deb150a96e8afa6ae08bf2e5cf7512ba46d153417530bb0f3d0fbccfa577b6f89d67c3d35402c50ca7e26a037d6e743ced3f562624aee7c9e7edb3e6dc1fc3e692b93b819bfec8e593efc6e5614ab7dc754ae7116c14b52d3cdb5a1fae2b420fcbb0a1df00ba19f61243e94f14324fbe9ff18cb9e9050fc795a9e4951119bf1fab9ea614cec2421d1f60dfb7776c5b689a443785f979c4abc48e730d091a63f8f504e605029a817135597e7556dfa086139077037f313e827f4f1ca48aafafc4c1f8350750c68eebdf64b9f8e7043d3f53fcdc7c3479d09d70305b197e68140b430290d6169a998762af1a6c18d9f5a383503a9861930a0058641e35ebf149bd092a3f16e91779b0782f850c6ceeae5325609431cd363f46c5411ccf4187a30d3681cf28b945b47ac0300522750c706d4e438d848339578b8cefbcbdcd0d0e325a9d201ee670a98e7c79bd695915bca29f1d06ec01b71797088126b936f3233a7e6d9536aa9f09f13bfea01d44508ecdded3819bd1c6efee93703f4886be2fa2e8c93a71955a61f0cf44a9aed26cd75416e83cd87191a6c060484b0cfb50780131141f6cee23e7a0dc395118699422b1ae82199a7482e6637e5f6d0cf95b59463bccbf9a1cb13ddff1510d9e4b6c83f87b54ea388d73bb7b8ea91ef354ab5a7d789ceb116659a9b094fca42bf3b3ca01a6183d0947993d1953ddfe86b4b9ed39ee0457632989bf804e638609c7a5f02ae3375b664f9420b809fcaafb8312f8306d76635fadd3e92c6cbdc4621ff29384d1c171f526446863f5264ba0bbda4591f7c556ef90883db06ea4df05fdc2ba59972efdd10ac63317e97756c596c01b9b63efc66576fc220822fb66e63e49bd6a0bd1af1a67659e36f0f8ce4594fb592c2592b6d59ea6c387c10d83bcb6fafb0ce23eef6f108d1449ee732b75bea6536a1d4279d8c73a873ab0273dbc47b33ced5c18358b719341148c3658ff43bb93ee7240511a549e7908a767ae713f3909f937b876989f2c78d379d5f62ea7fa8c2f872179b90adf80caec5e60965fa003f4c1b022d49b2b056e3f0809ad4667accf069c2d4f93d90a6272c2434566553ff0da6507d6a4680c2ecf6b0810a9777ab213283ebc2cde80001cb3e591ffc0524c2d49e297c98e71595cc7d742ca23fde6976297988fcfdbdb131f82547aa17dc8f2225db8829a8886147cdacaf7478fb383c645d6f87486ab377e83b3b4352330fbf82193aba642e7494fbaa86dd146f3fbcafa68502be06e76f62b43520568977fa3274a1ee63250778dbb50c9b53d559a025dd5dfca0b90c39bec748b7b48f277142e7b8feed18fcbd6d064af6aedbb4af14ed01a8b947d132c439d5fc28972b1f3dc32d1347d0c78d6b0253f5eebe2c2623a0be2f11d48281384c89b8f5e9317c3f9eb5ab19fe113376b5be6d7b13518e11d10f882dbd1a78020634169294b51202691c28a3c78c1dfcf4c90cf9b6bcd89ff2487e237fd8fdcf9438d3d7fe6170d50bc2fe85a0ea92bb74a4d5a4dcae9186b48f1733f165600e3daf69425a40ed47bdf21cce93fa901a6370e67eb5bdd59857742322ad6e9aa86a260f76262faef3c957b293c80a7e26a06d6ac6590a75f47df7784c2bfa51da1ca9b016628b56db020bcb88fd584b2a6e71d97a7505cc692b7c24ca690f54683b913741ed48487e358ac12d1f5082a618344a716bce24d899577a1f6f48b22bd0ebe6cd4f98cfa0bb645a8c28575d171d898a8feaf0578d97ad9a4cc4e0a0c8367202a5bce21a1c14a99073afbcb5399336efee97bd5819cc125d1fc401840e3a31f23b51d5d4e6c9ea449975817f08f742ee5479b9ba24a7b203b82d3e060510e85aab8c32434229e4100b5b1c3760b914e095d071790b65b9bb0a3466d19b206fa415f0f8b0bed0673f6e17e2e5fae3a42a3633c302c140fb82c2f5c01fc470c9c3e68b5c0d52039ef4e50fa31e1bb2019ebb9858b299b69740b2949449d8469d728f892da89e7115de8ee1f777c507bfe98e80d9b4d064fe0889392e5170711988b609972aa8f15525ad2bb1dc0117af0933792aaca6eebdd22ce19639bee25c877d802a503d1354bba99403435db2aeff550c0b477625bd22617398b9124d3edf1306e522cb2f8610bf533cbc55d4d1c5d7ff5d07f87a11494980e97a7c824beb7e16090040d2cbff761b826e8b5831dfcdf000eac2e771a48c6ba846b9ddf36a858099f77d51bbfad480bba9095905d618d7b355e40159f5e48ddd5583ea720ac9c74cb118c011d3ba1c67dc865a8eeab8667e0a81ce5894fd888fe4ec2ff936bfeb45c66cde689e4a4f13bd138e7dc27aa263fb009b81c274bd0d73b35385d99d1d082ebe5cb41de09d274fbd7c1c414f3d1ab45d2e8949cff34106b574710144cf6d2072c380cc9c83ca48b5e057973e73df30821c1478d21bc55a462727263062271d76fea1509b365fbdd92b4c23e088f61fce348ba0e7a3e5de600762c462e063e74981f14520babfc3278326b95419d24f4e4853507acea8a5f7e70c13b31f47dc3d823b3f699a029093b1ccbc564c3be29a974cea6fbecdae3f763fff2e65bfa1a52742fdcde3c9c0644267825576d7268e2bec08bfb52083df7b5bab93fbf2cf6a8d91cda5a04216e8b9d961a28720667d2a1d3098bba17517b74cc93b8e3b65d36c12f10a7e0898db2e1e4daf78a6696e1ee221cb885519cdfbe9284face6a525e4ac8d1d91f46d2dc8331ba90e9613947718bf51476ec3702c21313248edd984c46df760b2d83ce9599fa73508d12f606d4643c25ca38fb97fa43d229a8131332011fa87763ae10d48c5e2be8914c1d40d3e53e52f803804769edbac0e309590e4131982de1baae61ff0f1443b95344c488a7a7f4e0b3034400bddc2ec447a40a36d017b2caba9bda7f03f8cddcceecafa556820ffd3c072ef394a3d809d78f5ef53f57f72012b60ee76940b3aad36c76249a371669ddb0da3227b893b99a355143cab5cfc717658b14133aaf002ea497bd7db4d8f1bbf9934a55777ab886038492a934b1a2a2cce48971ab93c78fe4d45109e5db3c5c276cf99a3cd497023bb2a19b6a186325f72d2d202ff0201caa67ed9901afae678579fd3fce2f5bfaed4a54bd2dbb824f51dfe17d998b0526fa8dc596a80f097c46ce38f5e927ace3d0dc90b9092d619b71e36421fe0869681cdb5e385b794e9ed34932163ffc6b8d21e882b1ff00c7f3db420b8ee19c7c38ec3192de30dc3e5d01f572134c1b25b08f7cd1526fe4a97c1108cd84950a11dc697551b401c4186f2d1e4cd21a2b4fa43ec6c4af09f80bdadebbf121ad2339f6bac808f3a9964516132c3b3d8756f22f7b7b8a8695d3029c45e335c77945b8ae7eca964b77a04a1695d65c4f453f1cd3f6d85ba40764f02007165f1fba3b28d23f88534995119c869a20d48c67f79dd1d259042dd8226732905de52ee1aa570ff4fa732d86cc20a11dace7d65fdf1d26b58384b7f315d11cf3231007584025c3dd9f2d5e38d7c2e3bad6ac85267d31625dbbbce63e9898872f38a303fd638e43c5cefebd719e8efe6b2075f91cbc62cbb6579420016ac0216b667aecb7195da4c4a36477c665fcfef6ad551ea3606a1475230118d95e600cf2abeff563d92e1bc753d10d782a1d95140b5cafae4d2d350e7a84fa3b65723943a97c68cabb776ce502abf2f1f1fb8c1248a9bbf2903c9304fbf9a1219b40f378123b5f8130ba36f3f423327b869605d056a101f64d8d6ca8b59aae0e325ae5e114ea550d11fdf983ac2eedb404a10929eabaf2f7c402b82124c7bb30b5344295818a253012dafa47f6f34b4431f0180cc2859db29b349c6138b538fd4de3863c21c01285600dc1ce73013990e4c1daa03d78878200c639586038620fdb7a9fc844485818edfd2636aec5a2b16af4bff428d2dfe89475ca06776a68d5e4b4761b985095e94cd91d33a3f0a5dfbfc255ab5896491c03044aff1950823358b54edee81afea9b88764a24ac9b917e2cab6cb2ba1c91d10bd0ef8681cea3ad9c59f78882d4aa807a53a106ca2d0738a04457275cfac653638a94577c4ab03c9e5d6de1dc78b487ec918c4a7ca2a8d6ff852e8fa25776aa6f139a3c54693271502b71eaddb461c1819f6d20a79ac7226a177f42df6f4705cc62cc0484b28e5cfdf7fc52b0c582621bacd703a28714175db576ec0bf017c32424675d28d992e46de460b3289fee37b49b356f7842cd94764795c887115419234049a2a2708ae82efb8f10f5d22c2bae2f5c1abb9cd839c6214b0acc0b04fb6cfdf7f3adcadc5189d850dd957c47a4f946ac479a4e124f695d222f37ea07506638e90b86bf3bbb0ccb578bb6fee8941d6e1da1c77996a064c60157b6d417beb1ad5205f210851a079f9ef6e3faf3cab5482cdf7159e78b9d820cfee714a070ad35b91b49cb43b43bb7fbbfd5276b5c2eb0d4ca9ff9b10f0b8ec74233c7aebb2933e4bd5b0a388ed6ceafed8ef995098c2b88d74d2cebd44ba26c27b5d8983394d286156f4b501e45fe5217096b1bfe7b9bb3f6c3b4d2ad15bf1c86ed70ee852c4cfb979eb4a0c826953799a2030322669364aa905092fb45cbeacac44703c70d7e278f1a5926f242d459e36dd8e374f9bb7a0c907db1d4f8c1993ac0244f6d563041a8956ea82b7eef7a63ac200d32ab107d6728610efc530aa5783771a5fbedbf5a379b2923f088cd203e315f41072d83201a1f1fce87d8b7cf2f142e1ff5f8b2f52028e8764e49604b46dc3763f79015183f601e26346606e22c24e1833b2755afa285feb833d3ff3b910846a96e028070f925a6c640d9956c852367e89ca0dda26ad3c22f3c63f87c49f21e62363273579059ec88643943816a0a20caa0d97bb10aa5f1da882d422beefc5f59128636d851427783f1639d25af11d0bf7e8810f2304074f0710b82a1f8fea2f7da16b896783a468aa04e5524d9f118ae733501cfb913c3c2e327b7b5c87e250884667a9fcf29e27c9009c2173853b5ddafd7c6bfffbe1edaaecbf5134aff42876a192e34e32faa8605e1f5dc8553c3e43156126da540ba467be0b3bece1826a85a96232fd37a68bd9a381e96a74f857965477725c28aa908fc8367c7c4024059cd2454cdb0bd00213d70946b1751e133cff48809c6093c6fb00db7e477a86c857c81d39d49f1974d2191f52f737c0f9710a6eb8bf6b86161930b312123840cfc060abd7f69e36a6393036550321d09dc13e484794aa0de078f03d8396464feeb7fe8055b23638d7d780a394013039dd006484051211c862bbfa85e5cfbd77d2ced2f5ddb9229f183fcffd2c5d5bfac00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0x6, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r8, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x64961, 0xb3836f6d7a15f2d) close_range(r5, r6, 0x0) write$binfmt_misc(r10, &(0x7f0000000440)=';', 0x1) close(r4) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0x7}, {0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newtclass={0x2c, 0x28, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x9, 0xd}, {0x6, 0xffff}, {0x9, 0xb}}, [@TCA_RATE={0x9a, 0x5, {0x7f, 0x10}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$packet(r13, &(0x7f0000000480)="a9c0fbb216bed6c8bdb63a8106f5920be8518e51ddf8f76e5a46d271b2db6f7f3ddcd578a1d96c9904e2c4c4df8227cc8609ed2e13d871bf2374dcebfad5799324de6cbd199c241834f3d608bc67e12b79e21667009f2787caee981b2fa32d555cae69781719525f345197ea922d0805e474ec2b332e60d494eba8ac874b5a8bf88c25c26da8a7c77074b3340e4baf5dffa997165ddbae52eefff95d4d26c6db77567f66d8b542871b4481187f9bdb0672bebf98", 0xb4, 0x4000000, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x8, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 15.917293065s ago: executing program 4 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x40, 0x4}, 0x2}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x34, r1, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40048}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0xff}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x4c}}, 0x20040040) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2980000}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x20050800) 15.426094851s ago: executing program 2 (id=205): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x41, 0x0}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc8, 0x0, 0x6}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 15.407754881s ago: executing program 4 (id=206): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={r0, 0xe5, 0x8c}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'sha3-256-generic\x00'}}, &(0x7f0000000140)="83f6fb6acec410b10edc7a108e13be3475468d194587256e225fb7bf3ad583db96901d4fab584096fee3661866ec58fc6992cbf84e8b12eea227739940397dc5a66234097c1c136415e0dccf857980f31ac88a1aaed39a4e4b0a0f7bb63e4ce5048907c02457624e29487fab60ffc5cfc2e6c66e233c580eeeb092ebf5d2600ed43352f61eb462ad4ebdd5e6fa031bc57f6557fdb7623f5bd7618d1a3bf94ca7de1d7f755f03407ff6eafb6059f379aaffc6f709ad5deeece6c7b640950692e53398dd5487043af64d6658c556eda3d1fcdee67eb0836c23a517ea103d6d5cc47714b2c845", &(0x7f00000002c0)=""/140) keyctl$setperm(0x5, r0, 0x2c102034) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file2\x00', 0x208800, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES16=r0], 0x2, 0xf11, &(0x7f0000001e80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x400, 0x82) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) lseek(r2, 0x40000007, 0x0) 15.209774497s ago: executing program 2 (id=209): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x31, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x4000800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f8", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) connect$phonet_pipe(r4, &(0x7f0000000400)={0x23, 0x0, 0x7f, 0x8}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r7, 0x0, 0x0) sendmsg$inet(r7, 0x0, 0x0) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000140)=@generic={0x3, 0x8, 0x4}) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, 0x0, 0x0) close(r8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 14.756067482s ago: executing program 4 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x301, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x200008c0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x7fff, 0x4, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x7, 0x2, 0x1bb, 0x4}}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x45}, 0x8000) syz_usb_connect$cdc_ecm(0x3, 0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024c00010100c08109040000fe03020000052406000005240002000d240f01bfffffff0000000000042413020424130109058103000407100709058202000207fc00090503", @ANYRESOCT=r1, @ANYRES8=r3], 0x0) 11.213558914s ago: executing program 0 (id=216): shmget(0x0, 0x1000, 0x2, &(0x7f0000731000/0x1000)=nil) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0xffffffff, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast2, 0x4e24, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) eventfd2(0x10001, 0x80000) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, r5, 0x0, '\x00', 0x1ffffffffffffd64, 0x20}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000002a00)="8e1d5c610bfe415d01b31f79a031b5c018e0000060ffffffffff000000010000", 0x20) 10.227026995s ago: executing program 2 (id=217): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000580)={0x6, 0x0, 0xfffffffffffffffe}) 10.224583865s ago: executing program 1 (id=218): r0 = epoll_create1(0x80000) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000002a40)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf6, &(0x7f0000002b80)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000100), 0x0, 0x2600) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0xb0000011}) 9.967913804s ago: executing program 4 (id=220): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x110000004}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0xb2, 0x40000a8}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000200)=ANY=[], 0x5, 0x62c, &(0x7f0000000c80)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_usb_connect(0x3, 0x367, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ef87ab08b4040210b4cd0102030109021d070300090000090467090920ef8b00090507"], 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$COMEDI_CHANINFO(r5, 0x80306403, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) socket(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000000c0)={'geneve1\x00', 0x9}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) getsockopt(r8, 0x9, 0x6, &(0x7f00000022c0)=""/4096, &(0x7f00000032c0)=0x1000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0x8, r9, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)='f', 0x1}], 0x1}, 0x857) 9.957036684s ago: executing program 2 (id=221): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x1000, @loopback}, 0x6b) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x60}, @NL80211_ATTR_PMKID={0x14, 0x55, "b9566f6833ec2ecacf8b3321ce6bd728"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x80080a4}, 0x20000000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'ip6_vti0\x00', 0x0}) getpid() r8 = socket(0x10, 0x3, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x2a020400) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0xa, r10}, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x200800c, &(0x7f0000000340)=ANY=[], 0x0, 0x24a, &(0x7f0000000680)="$eJzsmDtrFFEUx//3zmvH1aCNhY2FARXJPmabNCkiCFYiJL4qXcwYYjZZ2R3BXRAJNjbaWQg2Fn4Bi4CpUtj5BSJaqCAouIWFTZqR+5jZyc5kdzLY5fyKu/8599x7zzlz5xQLgiAOLd+//f36/OLsIhhwFNNwtP2nATCmNE/4f3n18MLLuUuv331++2F96vFWZDf0r1gShokFDCiNOd8EsD1v4El8Urx6N8QnTOuHRXChfwl9DRzntf0GGCpa3wHHda19MNzS+n5Ct4V/pXJvpeVX7rZbS0LUxFAXgyeGhna1ovgGGwxL2hiGBlgi/m6vv9pstfxOQph6LmOqkIgLm4EFG4N5LmPF9pSMUFTx5rOnG8IU1aam6iepg6Ou92uAYUHbZ+FEtVElSeR/yozyFxUYzT+d7e576SsmJiVZUmLuz38plhA2lDgxU2yfqNqjU8dTlvGCy7KM7GNF9ev2+kLl3dAodnWkMPe5iyx6g3b8Qg92RFksv5I3ixcugOIvF+g5GRFaKctBs1DCUKtODrY+pn1+pFc5eyoWsslHsPz3p5T/riLzruYXLvqrvFDFJgS2s6n6R/iG4SyG/cNM9I9qsPag2u31Z1bWmsv+sr/ueQ2nHHc8v1aV7Sjd+OJ+6Mr+dCSxv5XdKmFzG4+aQdCpq9FmNlwEQceTz17is1nYbP++rZcFuAzgzPDY4cdipMOylQ+XvkKdSzuhvE+EBEEQBEEQBEEQBEEQBEEQ4zgNJv8FFewcA1xtD/fiXZXWfwEAAP//XYhBpQ==") chdir(&(0x7f0000000080)='./file0\x00') r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents(r11, &(0x7f0000000040)=""/61, 0x3d) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000440)={[{@clear_cache}, {@user_subvol_rm}, {@rescan_uuid_tree}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x101}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") 9.118974851s ago: executing program 3 (id=222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)='@\n', 0x2}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x2, 0x8044) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000080)={[{@dax}, {@cache_strategy_readahead}, {@dax_never}, {@nouser_xattr}, {@cache_strategy_readahead}, {@dax_always}, {@acl}]}, 0x1, 0x1a7, &(0x7f0000000340)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x191) r1 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40040) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r3, 0x4b63, 0x3) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x7}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$rxrpc(0x21, 0x2, 0xa) r5 = fsopen(&(0x7f0000000680)='erofs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) 8.142210742s ago: executing program 3 (id=223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r10, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 8.000031066s ago: executing program 2 (id=224): r0 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0/../file0\x00', 0xfffffffffffffffc, 0x4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) (async, rerun: 32) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r6, &(0x7f0000019500)=""/102400, 0x19000) bind$inet6(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x2, 0x7, @mcast1, 0xff}, 0x1c) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (rerun: 64) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/197) (async) r8 = fcntl$dupfd(r2, 0x406, r2) write$cgroup_pid(r8, &(0x7f0000000240), 0xb375) 6.887210911s ago: executing program 2 (id=225): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x60, 0x0}, 0x40000001) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x14002) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r3 = socket(0x1, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, 0x0, &(0x7f00000000c0)=@tcp6=r3}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a7597970", 0xc) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) ioctl$TCFLSH(r2, 0x540b, 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x85}) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000b2c0)={0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r9}, 0x38) r10 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r10, 0x40045612, &(0x7f0000000000)=0x2) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 6.863239892s ago: executing program 1 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000080)='./file2\x00', 0x1818858, &(0x7f0000000280)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_win95}, {@shortname_winnt}, {@rodir}, {@rodir}, {@uni_xlateno}, {@shortname_lower}]}, 0x1, 0x371, &(0x7f0000002980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)=""/145) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x100000, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000000) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 6.728115017s ago: executing program 0 (id=227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031412d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.329426519s ago: executing program 0 (id=228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) unshare(0x2a020400) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x1c) 6.123132086s ago: executing program 3 (id=229): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file0\x00', 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x20080) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp={0xed, 0x3, 0x20493859, 0x2, 0xc, [{0x200, 0xe0000000}, {0x1, 0xfff}, {0x2, 0x6640}, {0x9, 0xfffffff8}, {0x570ca5aa, 0x3}, {0x2, 0x2}, {0x200, 0x400}, {0x3, 0x6}], 0x4, 0x0, 0x8, 0x2}}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f00000002c0)={0x0, 0xca, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r8, 0x400448e6, 0x0) ioctl$sock_bt_hci(r8, 0x800448d4, &(0x7f0000000340)="d73a27cd8439d1d0efe50d3c334237fe2763fd70fb8c9816ee097aac9c59fe42201009018bb77b6804166e49fd9445d200d994dae3ea4e12cde6e07205de3f74878b3fa125e4737e28bc25eefaf3ce0ce95b4627e12c6cdc34c6bad377e6f2cb") sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24}, 0x0) 5.171573106s ago: executing program 0 (id=230): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x42474752, 0xf00, 0x0, 0x3, @discrete={0x1, 0x8}}) (fail_nth: 2) 4.916158314s ago: executing program 3 (id=231): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000580)={0x6, 0x0, 0xfffffffffffffffe}) 4.915936014s ago: executing program 4 (id=232): r0 = syz_usb_connect(0x5, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000080)='./cgroup\x00', 0x1, &(0x7f0000000180)={[{@errors_continue}, {@errors_continue}, {@nobarrier}, {@errors_remount_ro}, {@snapshot={'cp', 0x3d, 0x1}}, {@discard}, {@order_strict}, {}]}, 0x1, 0xa07, &(0x7f0000000b00)="$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") (fail_nth: 1) 4.039767052s ago: executing program 0 (id=233): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)='@\n', 0x2}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x2, 0x8044) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000080)={[{@dax}, {@cache_strategy_readahead}, {@dax_never}, {@nouser_xattr}, {@cache_strategy_readahead}, {@dax_always}, {@acl}]}, 0x1, 0x1a7, &(0x7f0000000340)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x191) r1 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40040) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r3, 0x4b63, 0x3) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x7}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$rxrpc(0x21, 0x2, 0xa) r5 = fsopen(&(0x7f0000000680)='erofs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) 4.023536402s ago: executing program 1 (id=234): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) (fail_nth: 1) 2.856049279s ago: executing program 1 (id=235): shmget(0x0, 0x1000, 0x2, &(0x7f0000731000/0x1000)=nil) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) eventfd2(0x10001, 0x80000) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, r6, 0x0, '\x00', 0x1ffffffffffffd64, 0x20}) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000002a00)="8e1d5c610bfe415d01b31f79a031b5c018e0000060ffffffffff000000010000", 0x20) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x0) close(r7) syz_usb_control_io(r0, 0x0, 0x0) 2.728101054s ago: executing program 3 (id=236): r0 = epoll_create1(0x80000) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000002a40)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf6, &(0x7f0000002b80)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000100), 0x0, 0x2600) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0xb0000011}) 2.543683019s ago: executing program 4 (id=237): shmget(0x0, 0x1000, 0x2, &(0x7f0000731000/0x1000)=nil) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0xffffffff, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast2, 0x4e24, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) eventfd2(0x10001, 0x80000) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, r5, 0x0, '\x00', 0x1ffffffffffffd64, 0x20}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000002a00)="8e1d5c610bfe415d01b31f79a031b5c018e0000060ffffffffff000000010000", 0x20) 2.51175484s ago: executing program 0 (id=238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x14) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup(r6, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) sendto$packet(r4, &(0x7f00000002c0)="05031412d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 3 (id=239): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000080)='./file0\x00', 0x6218840, &(0x7f0000000040), 0x1, 0x9877, &(0x7f0000012f80)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0105872, &(0x7f0000000000)=ANY=[]) r1 = syz_clone(0x21200800, &(0x7f0000000180)="6340911103b4173aae2802176773499240b7b164afaee76631b683a3a0980ae2511b86691242cf0390eac3f86416f567840043735aeee63b04caa3d4cbc95c86392d7b622ae65960c8bddd0a9b2d42680e6e6b46b4c0a8ced546a5d1b0b8d7ed351438713214ec8738a0c3c27c452320c407cda0084b74810a82f144f45524b86e6f75cac87eb7b23d7fd7a55155931015d9b880e5e5522ad5339d64967d375cdd14c8832cb79bcdc3dc34a60e740bdf413715b1f408f401bb1dd0ee92d9d6ea50d0fee5ea6b764979e36f4872fb0a3f9f8fbc9e", 0xd4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d1af46f5ff5f4416dfa452c8d3d204c8f3c118910f00423f198f8464e6cc3debb1eac6f5fae4e74de33f837a810fc6c045a3035d83190c232340277bf181981cba0f087d5d5177347ffdaa4a9470750b4c2c95def3b67ae8f2d374ff85203b688649333f3261a54031071c511bdec408ab42377f5e9f5071b594217586ad419a2101e29954076b4ed3d23443deefce0dd91b30724e819c16eb1af8a2dcbbce90eed2422850cf998eda8e50726a9119656f776a5a77c8cd2d3a86c432c77f7053bd885019e1750b11fcc1d155530afa9ad39b89232fc0bccb395a5b819b77d8efbd378e9d7112ef135d27b5ebeb0411ee92732ad578345b6b05dbb08db3c3a2") r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x59616d61, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socket$kcm(0x29, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_open(&(0x7f0000000080)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x840, 0x0, &(0x7f0000000300)={0x7ff, 0x2000000001, 0x4, 0x8000}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4000000, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x1]}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001480), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)={0x28, r7, 0x101, 0x70bd25, 0xf61, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x844) prlimit64(r1, 0x8, &(0x7f0000000440)={0x4, 0x4}, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00') kernel console output (not intermixed with test programs): .684456][ T4461] WARNING: The mand mount option has been deprecated and [ 88.684456][ T4461] and is ignored by this kernel. Remove the mand [ 88.684456][ T4461] option from the mount to silence this warning. [ 88.684456][ T4461] ======================================================= [ 88.726777][ T4317] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.766616][ T4261] usb 4-1: Using ep0 maxpacket: 32 [ 88.773766][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.789229][ T4461] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 88.789229][ T4461] [ 88.802263][ T4461] ERROR: (device loop0): remounting filesystem as read-only [ 89.030461][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.040689][ T4261] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 89.050007][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.059972][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 89.065986][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 89.074674][ T7] usb 3-1: USB disconnect, device number 2 [ 89.089387][ T4261] usb 4-1: config 0 descriptor?? [ 89.136565][ T4317] usb 5-1: Using ep0 maxpacket: 32 [ 89.154590][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.217010][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.252214][ T4317] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 89.261798][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.296249][ T4317] usb 5-1: config 0 descriptor?? [ 89.556478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.566480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.576475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.586468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.596468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.666475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.676473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.686464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.696464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 90.911584][ T4473] sched: RT throttling activated [ 92.301686][ T4261] usbhid 4-1:0.0: can't add hid device: -71 [ 92.317045][ T4261] usbhid: probe of 4-1:0.0 failed with error -71 [ 92.346319][ T4261] usb 4-1: USB disconnect, device number 4 [ 92.659236][ T4465] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 93.953619][ T4317] usbhid 5-1:0.0: can't add hid device: -71 [ 93.960849][ T4317] usbhid: probe of 5-1:0.0 failed with error -71 [ 93.982574][ T4317] usb 5-1: USB disconnect, device number 3 [ 94.128219][ T4490] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.283789][ T4497] FAULT_INJECTION: forcing a failure. [ 94.283789][ T4497] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.317623][ T4478] loop3: detected capacity change from 0 to 32768 [ 94.341049][ T4497] CPU: 0 PID: 4497 Comm: syz.4.29 Not tainted syzkaller #0 [ 94.348393][ T4497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.358478][ T4497] Call Trace: [ 94.361791][ T4497] [ 94.364753][ T4497] dump_stack_lvl+0x188/0x24e [ 94.369474][ T4497] ? show_regs_print_info+0x12/0x12 [ 94.374722][ T4497] ? load_image+0x400/0x400 [ 94.379265][ T4497] ? __lock_acquire+0x7d10/0x7d10 [ 94.384336][ T4497] ? snprintf+0xe5/0x140 [ 94.388620][ T4497] should_fail_ex+0x399/0x4d0 [ 94.393363][ T4497] _copy_to_user+0x2c/0x130 [ 94.397913][ T4497] simple_read_from_buffer+0xe3/0x150 [ 94.403330][ T4497] proc_fail_nth_read+0x1a6/0x220 [ 94.408397][ T4497] ? proc_fault_inject_write+0x310/0x310 [ 94.414081][ T4497] ? fsnotify_perm+0x248/0x550 [ 94.418902][ T4497] ? proc_fault_inject_write+0x310/0x310 [ 94.424581][ T4497] vfs_read+0x2de/0xa00 [ 94.428789][ T4497] ? kernel_read+0x1e0/0x1e0 [ 94.433425][ T4497] ? __fget_files+0x28/0x4b0 [ 94.438058][ T4497] ? __fget_files+0x28/0x4b0 [ 94.442703][ T4497] ? __fget_files+0x43d/0x4b0 [ 94.447440][ T4497] ? __fdget_pos+0x2ae/0x360 [ 94.452059][ T4497] ? ksys_read+0x71/0x250 [ 94.456417][ T4497] ksys_read+0x14c/0x250 [ 94.460689][ T4497] ? vfs_write+0xa30/0xa30 [ 94.465138][ T4497] ? lockdep_hardirqs_on+0x94/0x140 [ 94.470354][ T4497] do_syscall_64+0x4c/0xa0 [ 94.474783][ T4497] ? clear_bhb_loop+0x60/0xb0 [ 94.479479][ T4497] ? clear_bhb_loop+0x60/0xb0 [ 94.484181][ T4497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.490096][ T4497] RIP: 0033:0x7fede935d68e [ 94.494539][ T4497] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.514168][ T4497] RSP: 002b:00007fede75f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.522607][ T4497] RAX: ffffffffffffffda RBX: 00007fede75f66c0 RCX: 00007fede935d68e [ 94.530594][ T4497] RDX: 000000000000000f RSI: 00007fede75f60a0 RDI: 0000000000000006 [ 94.538586][ T4497] RBP: 00007fede75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 94.546566][ T4497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.554553][ T4497] R13: 00007fede9616128 R14: 00007fede9616090 R15: 00007ffcfd4e29e8 [ 94.562548][ T4497] [ 94.626574][ T4349] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.681894][ T4478] XFS (loop3): Mounting V5 Filesystem [ 94.746628][ T4478] XFS (loop3): Ending clean mount [ 94.778659][ T4478] XFS (loop3): Quotacheck needed: Please wait. [ 94.816633][ T4349] usb 3-1: Using ep0 maxpacket: 16 [ 94.822531][ T4478] XFS (loop3): Quotacheck: Done. [ 94.832313][ T4349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.862401][ T4478] XFS (loop3): Unmounting Filesystem [ 94.890405][ T4349] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 94.910746][ T4349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.923314][ T4349] usb 3-1: Product: syz [ 94.928668][ T4349] usb 3-1: Manufacturer: syz [ 94.955401][ T4349] usb 3-1: SerialNumber: syz [ 94.983016][ T4349] usb 3-1: config 0 descriptor?? [ 95.031779][ T4349] mcba_usb 3-1:0.0: Can't find endpoints [ 95.281848][ T4490] loop2: detected capacity change from 0 to 2048 [ 95.362701][ T4490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.468030][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 95.527507][ T4517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 95.564378][ T4499] loop1: detected capacity change from 0 to 32768 [ 95.578730][ T14] usb 3-1: USB disconnect, device number 3 [ 95.621598][ T4499] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.31 (4499) [ 95.695402][ T4499] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.726149][ T4499] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 95.750654][ T4499] BTRFS info (device loop1): turning on sync discard [ 95.800768][ T4499] BTRFS info (device loop1): turning on async discard [ 95.811050][ T4499] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 95.842779][ T4499] BTRFS info (device loop1): trying to use backup root at mount time [ 95.851607][ T4499] BTRFS info (device loop1): enabling auto defrag [ 95.861996][ T4499] BTRFS info (device loop1): using free space tree [ 95.894416][ T4523] device syzkaller0 entered promiscuous mode [ 95.917033][ T4368] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.962405][ T4301] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 95.990693][ T4499] BTRFS error (device loop1): failed to load root extent [ 96.013766][ T4499] BTRFS warning (device loop1): try to load backup roots slot 1 [ 96.036099][ T4301] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 96.064568][ T4499] BTRFS warning (device loop1): couldn't read tree root [ 96.077339][ T4499] BTRFS warning (device loop1): try to load backup roots slot 2 [ 96.097018][ T4499] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 96.117137][ T4499] BTRFS warning (device loop1): couldn't read tree root [ 96.124205][ T4499] BTRFS warning (device loop1): try to load backup roots slot 3 [ 96.133918][ T4368] usb 4-1: Using ep0 maxpacket: 32 [ 96.150652][ T4368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.174630][ T4368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.196824][ T4368] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 96.206100][ T4499] BTRFS info (device loop1): enabling ssd optimizations [ 96.218157][ T4368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.230167][ T4499] BTRFS info (device loop1): rebuilding free space tree [ 96.238657][ T4368] usb 4-1: config 0 descriptor?? [ 96.293795][ T4499] BTRFS info (device loop1): checking UUID tree [ 96.464803][ T4544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36'. [ 97.850814][ T4273] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.054348][ T4558] loop4: detected capacity change from 0 to 16 [ 98.083882][ T4558] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 98.142904][ T4558] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 98.204535][ T4558] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0 [ 98.315173][ T4559] lo speed is unknown, defaulting to 1000 [ 98.363210][ T4559] lo speed is unknown, defaulting to 1000 [ 98.391836][ T4559] lo speed is unknown, defaulting to 1000 [ 98.510599][ T4558] orangefs_mount: mount request failed with -4 [ 98.675434][ T4319] lo speed is unknown, defaulting to 1000 [ 98.681791][ T4559] infiniband syz2: set active [ 98.687680][ T4559] infiniband syz2: added lo [ 98.694376][ T4559] rdma_rxe: unable to create cq [ 98.700874][ T4559] infiniband syz2: Couldn't create ib_mad CQ [ 98.708609][ T4368] usbhid 4-1:0.0: can't add hid device: -71 [ 98.714635][ T4368] usbhid: probe of 4-1:0.0 failed with error -71 [ 98.787760][ T4559] infiniband syz2: Couldn't open port 1 [ 98.803930][ T4368] usb 4-1: USB disconnect, device number 5 [ 98.834765][ T4582] netlink: 44 bytes leftover after parsing attributes in process `syz.3.44'. [ 98.870741][ T4584] FAULT_INJECTION: forcing a failure. [ 98.870741][ T4584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.888092][ T4559] RDS/IB: syz2: added [ 98.898317][ T4559] smc: adding ib device syz2 with port count 1 [ 98.943480][ T4559] smc: ib device syz2 port 1 has pnetid [ 98.950778][ T4584] CPU: 0 PID: 4584 Comm: syz.2.43 Not tainted syzkaller #0 [ 98.958029][ T4584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.968118][ T4584] Call Trace: [ 98.971440][ T4584] [ 98.974390][ T4584] dump_stack_lvl+0x188/0x24e [ 98.979103][ T4584] ? show_regs_print_info+0x12/0x12 [ 98.984319][ T4584] ? load_image+0x400/0x400 [ 98.988844][ T4584] ? __lock_acquire+0x7d10/0x7d10 [ 98.993943][ T4584] should_fail_ex+0x399/0x4d0 [ 98.998666][ T4584] _copy_from_user+0x2c/0x170 [ 99.003372][ T4584] iovec_from_user+0x143/0x360 [ 99.008169][ T4584] __import_iovec+0x6d/0x500 [ 99.012790][ T4584] import_iovec+0x6f/0xa0 [ 99.017144][ T4584] ___sys_sendmsg+0x252/0x360 [ 99.021844][ T4584] ? __sys_sendmsg+0x290/0x290 [ 99.026633][ T4584] ? __lock_acquire+0x7d10/0x7d10 [ 99.031711][ T4584] __se_sys_sendmsg+0x1bb/0x2a0 [ 99.036587][ T4584] ? __x64_sys_sendmsg+0x80/0x80 [ 99.041549][ T4584] ? lockdep_hardirqs_on+0x94/0x140 [ 99.046801][ T4584] do_syscall_64+0x4c/0xa0 [ 99.051249][ T4584] ? clear_bhb_loop+0x60/0xb0 [ 99.056011][ T4584] ? clear_bhb_loop+0x60/0xb0 [ 99.060717][ T4584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.066638][ T4584] RIP: 0033:0x7f8c6c99ce59 [ 99.071070][ T4584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.090692][ T4584] RSP: 002b:00007f8c6d8e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.099132][ T4584] RAX: ffffffffffffffda RBX: 00007f8c6cc15fa0 RCX: 00007f8c6c99ce59 [ 99.107125][ T4584] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 99.115286][ T4584] RBP: 00007f8c6d8e8090 R08: 0000000000000000 R09: 0000000000000000 [ 99.123272][ T4584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.131262][ T4584] R13: 00007f8c6cc16038 R14: 00007f8c6cc15fa0 R15: 00007ffd19a23d68 [ 99.139268][ T4584] [ 99.168836][ T4261] lo speed is unknown, defaulting to 1000 [ 99.210239][ T4559] lo speed is unknown, defaulting to 1000 [ 99.216634][ T4319] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.429904][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.456400][ T4591] loop1: detected capacity change from 0 to 16 [ 99.466750][ T4591] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 99.474757][ T4591] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 99.501592][ T4591] erofs: (device loop1): erofs_init_device: empty device tag @ pos 0 [ 100.356321][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.118230][ T4319] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.316082][ T4319] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.443015][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.607272][ T4559] lo speed is unknown, defaulting to 1000 [ 101.626710][ T4591] orangefs_mount: mount request failed with -4 [ 101.637667][ T4319] usb 1-1: config 0 descriptor?? [ 101.638532][ T4598] FAULT_INJECTION: forcing a failure. [ 101.638532][ T4598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.657279][ T4598] CPU: 1 PID: 4598 Comm: syz.2.46 Not tainted syzkaller #0 [ 101.664538][ T4598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.674634][ T4598] Call Trace: [ 101.677940][ T4598] [ 101.680896][ T4598] dump_stack_lvl+0x188/0x24e [ 101.685606][ T4598] ? show_regs_print_info+0x12/0x12 [ 101.690842][ T4598] ? load_image+0x400/0x400 [ 101.695403][ T4598] ? __lock_acquire+0x7d10/0x7d10 [ 101.700549][ T4598] ? __kasan_slab_alloc+0x6b/0x80 [ 101.705607][ T4598] should_fail_ex+0x399/0x4d0 [ 101.710315][ T4598] strncpy_from_user+0x32/0x350 [ 101.715234][ T4598] getname_flags+0xf2/0x500 [ 101.719763][ T4598] ? syscall_enter_from_user_mode+0x21/0x80 [ 101.725705][ T4598] __x64_sys_rmdir+0x38/0x50 [ 101.730337][ T4598] do_syscall_64+0x4c/0xa0 [ 101.734790][ T4598] ? clear_bhb_loop+0x60/0xb0 [ 101.739511][ T4598] ? clear_bhb_loop+0x60/0xb0 [ 101.744236][ T4598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.750166][ T4598] RIP: 0033:0x7f8c6c99ce59 [ 101.754605][ T4598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.774250][ T4598] RSP: 002b:00007f8c6d8e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 101.782685][ T4598] RAX: ffffffffffffffda RBX: 00007f8c6cc15fa0 RCX: 00007f8c6c99ce59 [ 101.790677][ T4598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 101.798670][ T4598] RBP: 00007f8c6d8e8090 R08: 0000000000000000 R09: 0000000000000000 [ 101.806660][ T4598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.814660][ T4598] R13: 00007f8c6cc16038 R14: 00007f8c6cc15fa0 R15: 00007ffd19a23d68 [ 101.822662][ T4598] [ 101.825737][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.907494][ T4319] usb 1-1: can't set config #0, error -71 [ 101.925033][ T4319] usb 1-1: USB disconnect, device number 3 [ 102.096927][ T4559] lo speed is unknown, defaulting to 1000 [ 103.020414][ T4604] loop3: detected capacity change from 0 to 4096 [ 103.100034][ T4559] lo speed is unknown, defaulting to 1000 [ 103.130420][ T4604] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 103.166586][ T4604] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 103.197952][ T4604] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 103.223741][ T4604] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 103.296599][ T4604] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 103.350248][ T4559] lo speed is unknown, defaulting to 1000 [ 103.481358][ T4592] rdma_rxe: rxe_register_device failed with error -23 [ 103.492296][ T4592] rdma_rxe: failed to add lo [ 103.603399][ T4604] ntfs: volume version 3.1. [ 103.641951][ T4604] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 103.663450][ T4604] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 103.687734][ T4604] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 103.699041][ T4604] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 103.712325][ T4604] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 104.556541][ T4319] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.696802][ T4632] FAULT_INJECTION: forcing a failure. [ 104.696802][ T4632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.736549][ T4632] CPU: 1 PID: 4632 Comm: syz.0.56 Not tainted syzkaller #0 [ 104.743832][ T4632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.753933][ T4632] Call Trace: [ 104.757309][ T4632] [ 104.760284][ T4632] dump_stack_lvl+0x188/0x24e [ 104.765022][ T4632] ? show_regs_print_info+0x12/0x12 [ 104.770274][ T4632] ? load_image+0x400/0x400 [ 104.774843][ T4632] ? __lock_acquire+0x7d10/0x7d10 [ 104.779965][ T4632] ? snprintf+0xe5/0x140 [ 104.784266][ T4632] should_fail_ex+0x399/0x4d0 [ 104.789000][ T4632] _copy_to_user+0x2c/0x130 [ 104.793561][ T4632] simple_read_from_buffer+0xe3/0x150 [ 104.798988][ T4632] proc_fail_nth_read+0x1a6/0x220 [ 104.804067][ T4632] ? proc_fault_inject_write+0x310/0x310 [ 104.809758][ T4632] ? fsnotify_perm+0x248/0x550 [ 104.814578][ T4632] ? proc_fault_inject_write+0x310/0x310 [ 104.820245][ T4632] vfs_read+0x2de/0xa00 [ 104.824470][ T4632] ? kernel_read+0x1e0/0x1e0 [ 104.829089][ T4632] ? __fget_files+0x28/0x4b0 [ 104.833770][ T4632] ? __fget_files+0x28/0x4b0 [ 104.838390][ T4632] ? __fget_files+0x43d/0x4b0 [ 104.843116][ T4632] ? __fdget_pos+0x2ae/0x360 [ 104.847736][ T4632] ? ksys_read+0x71/0x250 [ 104.852117][ T4632] ksys_read+0x14c/0x250 [ 104.856392][ T4632] ? vfs_write+0xa30/0xa30 [ 104.860844][ T4632] ? lockdep_hardirqs_on+0x94/0x140 [ 104.866083][ T4632] do_syscall_64+0x4c/0xa0 [ 104.870536][ T4632] ? clear_bhb_loop+0x60/0xb0 [ 104.875329][ T4632] ? clear_bhb_loop+0x60/0xb0 [ 104.880041][ T4632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.885959][ T4632] RIP: 0033:0x7fa6afd5d68e [ 104.890388][ T4632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.910019][ T4632] RSP: 002b:00007fa6adff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.918460][ T4632] RAX: ffffffffffffffda RBX: 00007fa6adff66c0 RCX: 00007fa6afd5d68e [ 104.926452][ T4632] RDX: 000000000000000f RSI: 00007fa6adff60a0 RDI: 0000000000000005 [ 104.934441][ T4632] RBP: 00007fa6adff6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.942426][ T4632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.950413][ T4632] R13: 00007fa6b0016128 R14: 00007fa6b0016090 R15: 00007fff005b7f38 [ 104.958413][ T4632] [ 105.016644][ T4319] usb 5-1: Using ep0 maxpacket: 32 [ 105.023343][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.051922][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.065995][ T4635] FAULT_INJECTION: forcing a failure. [ 105.065995][ T4635] name failslab, interval 1, probability 0, space 0, times 1 [ 105.075570][ T4319] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 105.099210][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.177858][ T4635] CPU: 0 PID: 4635 Comm: syz.2.59 Not tainted syzkaller #0 [ 105.185219][ T4635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.195306][ T4635] Call Trace: [ 105.198617][ T4635] [ 105.201621][ T4635] dump_stack_lvl+0x188/0x24e [ 105.206336][ T4635] ? show_regs_print_info+0x12/0x12 [ 105.211571][ T4635] ? load_image+0x400/0x400 [ 105.216131][ T4635] ? __might_sleep+0xd0/0xd0 [ 105.220765][ T4635] ? __lock_acquire+0x7d10/0x7d10 [ 105.225824][ T4635] ? verify_lock_unused+0x140/0x140 [ 105.231075][ T4635] should_fail_ex+0x399/0x4d0 [ 105.235790][ T4635] should_failslab+0x5/0x20 [ 105.240332][ T4635] slab_pre_alloc_hook+0x59/0x310 [ 105.245397][ T4635] kmem_cache_alloc_node+0x5a/0x320 [ 105.250649][ T4635] ? __alloc_skb+0xfc/0x7e0 [ 105.255193][ T4635] __alloc_skb+0xfc/0x7e0 [ 105.259554][ T4635] ? mark_lock+0x94/0x320 [ 105.263930][ T4635] alloc_skb_with_frags+0xa7/0x710 [ 105.269102][ T4635] sock_alloc_send_pskb+0x87f/0x9a0 [ 105.274357][ T4635] ? hlock_conflict+0x59/0x1f0 [ 105.279188][ T4635] ? sock_kzfree_s+0x50/0x50 [ 105.283842][ T4635] ? mark_lock+0x94/0x320 [ 105.288273][ T4635] ? __lock_acquire+0x12f4/0x7d10 [ 105.293362][ T4635] __ip_append_data+0x25fb/0x3850 [ 105.298463][ T4635] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 105.303372][ T4635] ? verify_lock_unused+0x140/0x140 [ 105.308618][ T4635] ? ip_setup_cork+0x850/0x850 [ 105.313434][ T4635] ? ipv4_mtu+0x2c8/0x3e0 [ 105.317798][ T4635] ? ip_setup_cork+0x532/0x850 [ 105.322612][ T4635] ip_make_skb+0x227/0x440 [ 105.327076][ T4635] ? __lock_acquire+0x7d10/0x7d10 [ 105.332148][ T4635] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 105.337058][ T4635] ? ip_flush_pending_frames+0x250/0x250 [ 105.342766][ T4635] ? rt_is_expired+0x24a/0x2c0 [ 105.347577][ T4635] ? ipv4_dst_check+0x57/0x80 [ 105.352295][ T4635] udp_sendmsg+0x1afb/0x23b0 [ 105.356951][ T4635] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 105.361896][ T4635] ? udp_cmsg_send+0x350/0x350 [ 105.366697][ T4635] ? verify_lock_unused+0x140/0x140 [ 105.371952][ T4635] ? aa_sk_perm+0x81f/0x950 [ 105.376504][ T4635] ? aa_af_perm+0x340/0x340 [ 105.381046][ T4635] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 105.387506][ T4635] ? sock_rps_record_flow+0x19/0x3f0 [ 105.392828][ T4635] ? inet_sendmsg+0x78/0x2f0 [ 105.397448][ T4635] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 105.402768][ T4635] ? security_socket_sendmsg+0x7c/0xa0 [ 105.408267][ T4635] ? inet_send_prepare+0x260/0x260 [ 105.413421][ T4635] ____sys_sendmsg+0x5be/0x970 [ 105.418246][ T4635] ? __sys_sendmsg_sock+0x30/0x30 [ 105.423306][ T4635] ? __import_iovec+0x315/0x500 [ 105.428195][ T4635] ? import_iovec+0x6f/0xa0 [ 105.432744][ T4635] ___sys_sendmsg+0x2a2/0x360 [ 105.437462][ T4635] ? __sys_sendmsg+0x290/0x290 [ 105.442322][ T4635] __sys_sendmmsg+0x2c3/0x510 [ 105.447036][ T4635] ? __ia32_sys_sendmsg+0x80/0x80 [ 105.452108][ T4635] ? mutex_unlock+0x10/0x10 [ 105.456654][ T4635] ? __fget_files+0x43d/0x4b0 [ 105.461385][ T4635] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 105.467407][ T4635] ? lock_chain_count+0x20/0x20 [ 105.472302][ T4635] __x64_sys_sendmmsg+0x9c/0xb0 [ 105.477191][ T4635] do_syscall_64+0x4c/0xa0 [ 105.481641][ T4635] ? clear_bhb_loop+0x60/0xb0 [ 105.486362][ T4635] ? clear_bhb_loop+0x60/0xb0 [ 105.491112][ T4635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.497041][ T4635] RIP: 0033:0x7f8c6c99ce59 [ 105.501494][ T4635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.521131][ T4635] RSP: 002b:00007f8c6d8e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.529579][ T4635] RAX: ffffffffffffffda RBX: 00007f8c6cc15fa0 RCX: 00007f8c6c99ce59 [ 105.537593][ T4635] RDX: 0400000000000284 RSI: 0000200000004d00 RDI: 0000000000000003 [ 105.545597][ T4635] RBP: 00007f8c6d8e8090 R08: 0000000000000000 R09: 0000000000000000 [ 105.553597][ T4635] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 105.561593][ T4635] R13: 00007f8c6cc16038 R14: 00007f8c6cc15fa0 R15: 00007ffd19a23d68 [ 105.569616][ T4635] [ 105.597420][ T4319] usb 5-1: config 0 descriptor?? [ 105.963895][ T4646] afs: Unknown parameter 'rootcontext' [ 106.228312][ T4639] loop0: detected capacity change from 0 to 4096 [ 106.264122][ T4639] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 107.477041][ T4662] FAULT_INJECTION: forcing a failure. [ 107.477041][ T4662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.516488][ T4662] CPU: 0 PID: 4662 Comm: syz.1.65 Not tainted syzkaller #0 [ 107.523764][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 107.533842][ T4662] Call Trace: [ 107.537140][ T4662] [ 107.540091][ T4662] dump_stack_lvl+0x188/0x24e [ 107.544806][ T4662] ? show_regs_print_info+0x12/0x12 [ 107.550033][ T4662] ? load_image+0x400/0x400 [ 107.554557][ T4662] ? __lock_acquire+0x7d10/0x7d10 [ 107.559598][ T4662] ? snprintf+0xe5/0x140 [ 107.563855][ T4662] should_fail_ex+0x399/0x4d0 [ 107.568588][ T4662] _copy_to_user+0x2c/0x130 [ 107.573140][ T4662] simple_read_from_buffer+0xe3/0x150 [ 107.578530][ T4662] proc_fail_nth_read+0x1a6/0x220 [ 107.583572][ T4662] ? proc_fault_inject_write+0x310/0x310 [ 107.589232][ T4662] ? fsnotify_perm+0x248/0x550 [ 107.594021][ T4662] ? proc_fault_inject_write+0x310/0x310 [ 107.599674][ T4662] vfs_read+0x2de/0xa00 [ 107.603850][ T4662] ? kernel_read+0x1e0/0x1e0 [ 107.608469][ T4662] ? __fget_files+0x28/0x4b0 [ 107.613072][ T4662] ? __fget_files+0x28/0x4b0 [ 107.617678][ T4662] ? __fget_files+0x43d/0x4b0 [ 107.622378][ T4662] ? __fdget_pos+0x2ae/0x360 [ 107.626989][ T4662] ? ksys_read+0x71/0x250 [ 107.631354][ T4662] ksys_read+0x14c/0x250 [ 107.635617][ T4662] ? vfs_write+0xa30/0xa30 [ 107.640062][ T4662] ? lockdep_hardirqs_on+0x94/0x140 [ 107.645278][ T4662] do_syscall_64+0x4c/0xa0 [ 107.649709][ T4662] ? clear_bhb_loop+0x60/0xb0 [ 107.654424][ T4662] ? clear_bhb_loop+0x60/0xb0 [ 107.659125][ T4662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.665094][ T4662] RIP: 0033:0x7fdc1455d68e [ 107.669524][ T4662] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.689175][ T4662] RSP: 002b:00007fdc15470fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.697616][ T4662] RAX: ffffffffffffffda RBX: 00007fdc154716c0 RCX: 00007fdc1455d68e [ 107.705602][ T4662] RDX: 000000000000000f RSI: 00007fdc154710a0 RDI: 0000000000000005 [ 107.713613][ T4662] RBP: 00007fdc15471090 R08: 0000000000000000 R09: 0000000000000000 [ 107.721605][ T4662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.729592][ T4662] R13: 00007fdc14816038 R14: 00007fdc14815fa0 R15: 00007fff165c07f8 [ 107.737612][ T4662] [ 107.832257][ T126] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.031412][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 108.038542][ T126] usb 1-1: config 1 interface 0 has no altsetting 0 [ 108.049101][ T4659] loop2: detected capacity change from 0 to 32768 [ 108.078201][ T126] usb 1-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.40 [ 108.106291][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.127086][ T126] usb 1-1: Product: syz [ 108.133320][ T126] usb 1-1: Manufacturer: syz [ 108.152211][ T126] usb 1-1: SerialNumber: syz [ 108.180676][ T4659] XFS (loop2): Mounting V5 Filesystem [ 108.194102][ T4664] loop3: detected capacity change from 0 to 32768 [ 108.233751][ T4664] XFS (loop3): Mounting V5 Filesystem [ 108.296523][ T4659] XFS (loop2): Ending clean mount [ 108.341033][ T4664] XFS (loop3): Ending clean mount [ 108.369166][ T4664] XFS (loop3): Quotacheck needed: Please wait. [ 108.377810][ T4684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.68'. [ 108.394985][ T126] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 108.458913][ T3624] bcm5974 1-1:1.0: could not read from device [ 108.470499][ T4664] XFS (loop3): Quotacheck: Done. [ 108.481184][ T4684] device geneve1 entered promiscuous mode [ 108.501327][ T4664] XFS (loop3): Unmounting Filesystem [ 108.511435][ T126] usb 1-1: USB disconnect, device number 4 [ 108.529274][ T4652] XFS (loop2): User initiated shutdown received. [ 108.554082][ T4652] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 108.575402][ T4652] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 108.632222][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 108.656677][ T4319] usbhid 5-1:0.0: can't add hid device: -71 [ 108.664112][ T4319] usbhid: probe of 5-1:0.0 failed with error -71 [ 108.693133][ T4319] usb 5-1: USB disconnect, device number 4 [ 108.735693][ T4657] Zero length message leads to an empty skb [ 108.825482][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 108.846726][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 108.881693][ T4688] loop4: detected capacity change from 0 to 512 [ 108.930714][ T4639] syz.0.61 (4639) used greatest stack depth: 20624 bytes left [ 108.944819][ T4688] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 108.959435][ T4286] XFS (loop2): Unmounting Filesystem [ 108.968702][ T4594] ntfs3: loop0: ntfs3_write_inode r=1e failed, -22. [ 108.975718][ T4594] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 109.012342][ T4357] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.053412][ T4275] ntfs3: loop0: ntfs_evict_inode r=1e failed, -22. [ 109.235834][ T4693] loop0: detected capacity change from 0 to 256 [ 109.266638][ T4319] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.319873][ T4693] FAT-fs (loop0): Unrecognized mount option "iocharMNsut=macgreek" or missing value [ 109.366377][ T4695] libceph: secret too big 31 [ 109.492223][ T4319] usb 5-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice= 0.40 [ 109.506173][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.523511][ T4319] usb 5-1: Product: syz [ 109.559191][ T4319] usb 5-1: Manufacturer: syz [ 109.571829][ T4319] usb 5-1: SerialNumber: syz [ 109.666799][ T4701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 110.179643][ T4689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.370879][ T4689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.477393][ T4710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.486093][ T4710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.590563][ T4712] loop1: detected capacity change from 0 to 4096 [ 110.716673][ T4712] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 110.755429][ T4319] gspca_main: STV06xx-2.14.0 probing 046d:08f5 [ 110.785200][ T4319] gspca_stv06xx: st6422 sensor detected [ 110.812475][ T4712] ntfs3: loop1: volume is dirty and "force" flag is not set! [ 110.956542][ T126] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.068498][ T4319] STV06xx: probe of 5-1:1.0 failed with error -71 [ 111.176643][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 111.198597][ T126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.245721][ T4319] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 111.368298][ T126] usb 3-1: config 255 has an invalid interface number: 216 but max is 0 [ 111.368733][ T126] usb 3-1: config 255 has no interface number 0 [ 111.369722][ T126] usb 3-1: config 255 interface 216 has no altsetting 0 [ 111.402164][ T126] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=77.cf [ 111.402847][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.403269][ T126] usb 3-1: Product: syz [ 111.403682][ T126] usb 3-1: Manufacturer: syz [ 111.403974][ T126] usb 3-1: SerialNumber: syz [ 111.631214][ T126] usb 3-1: active config #255 != 1 ?? [ 111.674011][ T126] usbhid 3-1:255.216: couldn't find an input interrupt endpoint [ 112.137044][ T4319] usb 5-1: USB disconnect, device number 5 [ 113.812702][ T4743] tmpfs: Bad value for 'mpol' [ 113.832328][ T4744] loop4: detected capacity change from 0 to 128 [ 113.848931][ T4350] udevd[4350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.898261][ T4744] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 113.918085][ T14] usb 3-1: USB disconnect, device number 4 [ 114.125256][ T4748] overlayfs: missing 'workdir' [ 114.174085][ T4748] syz.2.83 uses obsolete (PF_INET,SOCK_PACKET) [ 114.196300][ T4748] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 114.276793][ T4751] libceph: secret too big 31 [ 114.311748][ T4752] device syzkaller0 entered promiscuous mode [ 115.288237][ T4752] FAULT_INJECTION: forcing a failure. [ 115.288237][ T4752] name failslab, interval 1, probability 0, space 0, times 0 [ 115.447486][ T4752] CPU: 0 PID: 4752 Comm: syz.4.84 Not tainted syzkaller #0 [ 115.454749][ T4752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.464828][ T4752] Call Trace: [ 115.468150][ T4752] [ 115.471097][ T4752] dump_stack_lvl+0x188/0x24e [ 115.475782][ T4752] ? show_regs_print_info+0x12/0x12 [ 115.480982][ T4752] ? load_image+0x400/0x400 [ 115.485492][ T4752] ? __might_sleep+0xd0/0xd0 [ 115.490086][ T4752] ? __lock_acquire+0x7d10/0x7d10 [ 115.495133][ T4752] ? __lock_acquire+0x12f4/0x7d10 [ 115.500183][ T4752] should_fail_ex+0x399/0x4d0 [ 115.504880][ T4752] should_failslab+0x5/0x20 [ 115.509395][ T4752] slab_pre_alloc_hook+0x59/0x310 [ 115.514436][ T4752] kmem_cache_alloc_node+0x5a/0x320 [ 115.519674][ T4752] ? __alloc_skb+0xfc/0x7e0 [ 115.524189][ T4752] __alloc_skb+0xfc/0x7e0 [ 115.528562][ T4752] alloc_skb_with_frags+0xa7/0x710 [ 115.533702][ T4752] sock_alloc_send_pskb+0x87f/0x9a0 [ 115.538925][ T4752] ? sock_kzfree_s+0x50/0x50 [ 115.543530][ T4752] ? finish_task_switch+0x265/0x8f0 [ 115.548746][ T4752] ? lockdep_hardirqs_on+0x94/0x140 [ 115.553958][ T4752] ? dev_get_by_index+0x1e/0x2d0 [ 115.558926][ T4752] ? dev_get_by_index+0x1e/0x2d0 [ 115.563884][ T4752] packet_sendmsg+0x32b0/0x4e60 [ 115.568761][ T4752] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 115.574788][ T4752] ? __might_sleep+0xd0/0xd0 [ 115.579391][ T4752] ? lock_chain_count+0x20/0x20 [ 115.584292][ T4752] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 115.590313][ T4752] ? aa_sk_perm+0x81f/0x950 [ 115.594867][ T4752] ? packet_getsockopt+0x9a0/0x9a0 [ 115.600007][ T4752] ? aa_sock_msg_perm+0x94/0x150 [ 115.604963][ T4752] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 115.610263][ T4752] ? security_socket_sendmsg+0x7c/0xa0 [ 115.615737][ T4752] __sys_sendto+0x497/0x650 [ 115.620260][ T4752] ? __ia32_sys_getpeername+0x80/0x80 [ 115.625672][ T4752] ? __fget_files+0x43d/0x4b0 [ 115.630386][ T4752] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 115.636390][ T4752] ? lock_chain_count+0x20/0x20 [ 115.641268][ T4752] __x64_sys_sendto+0xda/0xf0 [ 115.645969][ T4752] do_syscall_64+0x4c/0xa0 [ 115.650400][ T4752] ? clear_bhb_loop+0x60/0xb0 [ 115.655092][ T4752] ? clear_bhb_loop+0x60/0xb0 [ 115.659789][ T4752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.665720][ T4752] RIP: 0033:0x7fede939ce59 [ 115.670142][ T4752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.689755][ T4752] RSP: 002b:00007fedea172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 115.698184][ T4752] RAX: ffffffffffffffda RBX: 00007fede9615fa0 RCX: 00007fede939ce59 [ 115.706170][ T4752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 115.714149][ T4752] RBP: 00007fedea172090 R08: 00002000000001c0 R09: 0000000000000014 [ 115.722134][ T4752] R10: 0000000000048040 R11: 0000000000000246 R12: 0000000000000001 [ 115.730138][ T4752] R13: 00007fede9616038 R14: 00007fede9615fa0 R15: 00007ffcfd4e29e8 [ 115.738150][ T4752] [ 116.084238][ T75] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3 [ 116.140239][ T4576] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.407671][ T4775] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 116.734961][ T4784] FAULT_INJECTION: forcing a failure. [ 116.734961][ T4784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.754537][ T4784] CPU: 1 PID: 4784 Comm: syz.3.87 Not tainted syzkaller #0 [ 116.761808][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.771916][ T4784] Call Trace: [ 116.775217][ T4784] [ 116.778161][ T4784] dump_stack_lvl+0x188/0x24e [ 116.782846][ T4784] ? show_regs_print_info+0x12/0x12 [ 116.788045][ T4784] ? load_image+0x400/0x400 [ 116.792564][ T4784] ? __lock_acquire+0x7d10/0x7d10 [ 116.797596][ T4784] should_fail_ex+0x399/0x4d0 [ 116.802276][ T4784] _copy_from_user+0x2c/0x170 [ 116.806992][ T4784] iovec_from_user+0x143/0x360 [ 116.811802][ T4784] __import_iovec+0x6d/0x500 [ 116.816403][ T4784] import_iovec+0x6f/0xa0 [ 116.820763][ T4784] ___sys_sendmsg+0x252/0x360 [ 116.825443][ T4784] ? __sys_sendmsg+0x290/0x290 [ 116.830216][ T4784] ? __lock_acquire+0x7d10/0x7d10 [ 116.835258][ T4784] __se_sys_sendmsg+0x1bb/0x2a0 [ 116.840127][ T4784] ? __x64_sys_sendmsg+0x80/0x80 [ 116.845089][ T4784] ? lockdep_hardirqs_on+0x94/0x140 [ 116.850297][ T4784] do_syscall_64+0x4c/0xa0 [ 116.854741][ T4784] ? clear_bhb_loop+0x60/0xb0 [ 116.859425][ T4784] ? clear_bhb_loop+0x60/0xb0 [ 116.864116][ T4784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.870019][ T4784] RIP: 0033:0x7ffa3219ce59 [ 116.874438][ T4784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.894067][ T4784] RSP: 002b:00007ffa32f99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.902488][ T4784] RAX: ffffffffffffffda RBX: 00007ffa32415fa0 RCX: 00007ffa3219ce59 [ 116.910460][ T4784] RDX: 0000000000000840 RSI: 0000200000000200 RDI: 0000000000000003 [ 116.918441][ T4784] RBP: 00007ffa32f99090 R08: 0000000000000000 R09: 0000000000000000 [ 116.926406][ T4784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.934412][ T4784] R13: 00007ffa32416038 R14: 00007ffa32415fa0 R15: 00007ffd73263238 [ 116.942385][ T4784] [ 117.216743][ T4789] FAULT_INJECTION: forcing a failure. [ 117.216743][ T4789] name failslab, interval 1, probability 0, space 0, times 0 [ 117.249870][ T4789] CPU: 0 PID: 4789 Comm: syz.4.93 Not tainted syzkaller #0 [ 117.257125][ T4789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.267216][ T4789] Call Trace: [ 117.270519][ T4789] [ 117.273479][ T4789] dump_stack_lvl+0x188/0x24e [ 117.278209][ T4789] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 117.283893][ T4789] ? show_regs_print_info+0x12/0x12 [ 117.289108][ T4789] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 117.294765][ T4789] should_fail_ex+0x399/0x4d0 [ 117.299460][ T4789] should_failslab+0x5/0x20 [ 117.303962][ T4789] slab_pre_alloc_hook+0x59/0x310 [ 117.308997][ T4789] ? __se_sys_memfd_create+0xee/0x340 [ 117.314402][ T4789] __kmem_cache_alloc_node+0x4f/0x260 [ 117.319825][ T4789] ? __se_sys_memfd_create+0xee/0x340 [ 117.325232][ T4789] __kmalloc+0xa0/0x240 [ 117.329423][ T4789] __se_sys_memfd_create+0xee/0x340 [ 117.334624][ T4789] do_syscall_64+0x4c/0xa0 [ 117.339056][ T4789] ? clear_bhb_loop+0x60/0xb0 [ 117.343736][ T4789] ? clear_bhb_loop+0x60/0xb0 [ 117.348431][ T4789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.354378][ T4789] RIP: 0033:0x7fede939ce59 [ 117.358816][ T4789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.378467][ T4789] RSP: 002b:00007fedea171e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 117.386914][ T4789] RAX: ffffffffffffffda RBX: 0000000000009e28 RCX: 00007fede939ce59 [ 117.394902][ T4789] RDX: 00007fedea171ee0 RSI: 0000000000000000 RDI: 00007fede9432f4f [ 117.402872][ T4789] RBP: 0000200000013c80 R08: 00000000ffffffff R09: 0000000000000000 [ 117.410840][ T4789] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 117.418812][ T4789] R13: 00007fedea171ee0 R14: 00007fedea171ea0 R15: 0000200000000480 [ 117.426797][ T4789] [ 118.172812][ T4779] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 118.569819][ T4800] loop3: detected capacity change from 0 to 128 [ 118.654187][ T4800] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 118.733790][ T4803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 118.881009][ T4806] libceph: secret too big 31 [ 119.176263][ T4814] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 119.230093][ T4820] kernel profiling enabled (shift: 17) [ 119.286392][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.323699][ T4825] loop0: detected capacity change from 0 to 256 [ 119.385126][ T4825] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.434019][ T4820] loop1: detected capacity change from 0 to 64 [ 119.514806][ T4825] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.646862][ T4816] Trying to free block not in datazone [ 119.667569][ T4816] Trying to free block not in datazone [ 119.704956][ T4816] Trying to free block not in datazone [ 119.724018][ T4831] device syzkaller0 entered promiscuous mode [ 119.753528][ T4816] Trying to free block not in datazone [ 119.772323][ T4816] minix_free_block (loop1:6): bit already cleared [ 119.788755][ T4816] Trying to free block not in datazone [ 119.794468][ T4816] Trying to free block not in datazone [ 120.086660][ T4368] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.108357][ T4850] FAULT_INJECTION: forcing a failure. [ 120.108357][ T4850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.142887][ T4848] tmpfs: Bad value for 'mpol' [ 120.158147][ T4850] CPU: 1 PID: 4850 Comm: syz.4.111 Not tainted syzkaller #0 [ 120.165463][ T4850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.175564][ T4850] Call Trace: [ 120.178877][ T4850] [ 120.181280][ T4848] loop1: detected capacity change from 0 to 128 [ 120.181818][ T4850] dump_stack_lvl+0x188/0x24e [ 120.192777][ T4850] ? show_regs_print_info+0x12/0x12 [ 120.198007][ T4850] ? load_image+0x400/0x400 [ 120.202554][ T4850] ? __lock_acquire+0x7d10/0x7d10 [ 120.207624][ T4850] should_fail_ex+0x399/0x4d0 [ 120.212346][ T4850] _copy_from_user+0x2c/0x170 [ 120.217070][ T4850] iovec_from_user+0x143/0x360 [ 120.221857][ T4850] __import_iovec+0x6d/0x500 [ 120.226493][ T4850] import_iovec+0x6f/0xa0 [ 120.230831][ T4850] ___sys_sendmsg+0x252/0x360 [ 120.235522][ T4850] ? __sys_sendmsg+0x290/0x290 [ 120.240312][ T4850] ? __lock_acquire+0x7d10/0x7d10 [ 120.245418][ T4850] __se_sys_sendmsg+0x1bb/0x2a0 [ 120.250284][ T4850] ? __x64_sys_sendmsg+0x80/0x80 [ 120.255261][ T4850] ? lockdep_hardirqs_on+0x94/0x140 [ 120.260472][ T4850] do_syscall_64+0x4c/0xa0 [ 120.264897][ T4850] ? clear_bhb_loop+0x60/0xb0 [ 120.269596][ T4850] ? clear_bhb_loop+0x60/0xb0 [ 120.274308][ T4850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.280232][ T4850] RIP: 0033:0x7fede939ce59 [ 120.284660][ T4850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.304283][ T4850] RSP: 002b:00007fede75f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.312718][ T4850] RAX: ffffffffffffffda RBX: 00007fede9616090 RCX: 00007fede939ce59 [ 120.320706][ T4850] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 120.328701][ T4850] RBP: 00007fede75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.336692][ T4850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.344677][ T4850] R13: 00007fede9616128 R14: 00007fede9616090 R15: 00007ffcfd4e29e8 [ 120.352678][ T4850] [ 120.381688][ T4848] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 120.476541][ T4368] usb 1-1: Using ep0 maxpacket: 32 [ 120.493495][ T4368] usb 1-1: config 0 has no interfaces? [ 120.533967][ T4368] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 120.595378][ T4368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.645693][ T4368] usb 1-1: Product: syz [ 120.665428][ T4368] usb 1-1: Manufacturer: syz [ 120.719972][ T4368] usb 1-1: SerialNumber: syz [ 120.753459][ T4368] usb 1-1: config 0 descriptor?? [ 120.982844][ T4867] libceph: secret too big 31 [ 121.000472][ T4368] usb 1-1: USB disconnect, device number 5 [ 121.212329][ T4869] device syzkaller0 entered promiscuous mode [ 121.236381][ T4872] FAULT_INJECTION: forcing a failure. [ 121.236381][ T4872] name failslab, interval 1, probability 0, space 0, times 0 [ 121.250846][ T4871] device syzkaller0 entered promiscuous mode [ 121.278776][ T4871] FAULT_INJECTION: forcing a failure. [ 121.278776][ T4871] name failslab, interval 1, probability 0, space 0, times 0 [ 121.286275][ T4872] CPU: 1 PID: 4872 Comm: syz.1.115 Not tainted syzkaller #0 [ 121.298667][ T4872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.308736][ T4872] Call Trace: [ 121.312037][ T4872] [ 121.315031][ T4872] dump_stack_lvl+0x188/0x24e [ 121.319734][ T4872] ? show_regs_print_info+0x12/0x12 [ 121.324950][ T4872] ? load_image+0x400/0x400 [ 121.329487][ T4872] ? __might_sleep+0xd0/0xd0 [ 121.334112][ T4872] ? __lock_acquire+0x7d10/0x7d10 [ 121.339161][ T4872] ? __lock_acquire+0x12f4/0x7d10 [ 121.344225][ T4872] ? verify_lock_unused+0x140/0x140 [ 121.349466][ T4872] should_fail_ex+0x399/0x4d0 [ 121.354167][ T4872] should_failslab+0x5/0x20 [ 121.358680][ T4872] slab_pre_alloc_hook+0x59/0x310 [ 121.363726][ T4872] ? tomoyo_check_path_number_acl+0x280/0x280 [ 121.369819][ T4872] kmem_cache_alloc_node+0x5a/0x320 [ 121.375042][ T4872] ? mark_lock+0x94/0x320 [ 121.379398][ T4872] ? __alloc_skb+0xfc/0x7e0 [ 121.383930][ T4872] __alloc_skb+0xfc/0x7e0 [ 121.388271][ T4872] alloc_skb_with_frags+0xa7/0x710 [ 121.393405][ T4872] sock_alloc_send_pskb+0x87f/0x9a0 [ 121.398638][ T4872] ? sock_kzfree_s+0x50/0x50 [ 121.403265][ T4872] ? dev_get_by_index+0x1e/0x2d0 [ 121.408223][ T4872] ? dev_get_by_index+0x1e/0x2d0 [ 121.413191][ T4872] packet_sendmsg+0x32b0/0x4e60 [ 121.418061][ T4872] ? verify_lock_unused+0x140/0x140 [ 121.423292][ T4872] ? __might_sleep+0xd0/0xd0 [ 121.427900][ T4872] ? aa_sk_perm+0x81f/0x950 [ 121.432419][ T4872] ? __might_fault+0xa6/0x120 [ 121.437127][ T4872] ? packet_getsockopt+0x9a0/0x9a0 [ 121.442250][ T4872] ? __might_fault+0xa6/0x120 [ 121.446965][ T4872] ? aa_sock_msg_perm+0x94/0x150 [ 121.451919][ T4872] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 121.457222][ T4872] ? security_socket_sendmsg+0x7c/0xa0 [ 121.462697][ T4872] __sys_sendto+0x497/0x650 [ 121.467216][ T4872] ? __ia32_sys_getpeername+0x80/0x80 [ 121.472606][ T4872] ? __fget_files+0x43d/0x4b0 [ 121.477343][ T4872] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 121.483358][ T4872] ? lock_chain_count+0x20/0x20 [ 121.488257][ T4872] __x64_sys_sendto+0xda/0xf0 [ 121.492949][ T4872] do_syscall_64+0x4c/0xa0 [ 121.497379][ T4872] ? clear_bhb_loop+0x60/0xb0 [ 121.502086][ T4872] ? clear_bhb_loop+0x60/0xb0 [ 121.506786][ T4872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.512698][ T4872] RIP: 0033:0x7fdc1459ce59 [ 121.517121][ T4872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.536736][ T4872] RSP: 002b:00007fdc15450028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 121.545163][ T4872] RAX: ffffffffffffffda RBX: 00007fdc14816090 RCX: 00007fdc1459ce59 [ 121.553144][ T4872] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 121.561122][ T4872] RBP: 00007fdc15450090 R08: 0000200000000140 R09: 0000000000000014 [ 121.569103][ T4872] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.577091][ T4872] R13: 00007fdc14816128 R14: 00007fdc14816090 R15: 00007fff165c07f8 [ 121.585093][ T4872] [ 121.592947][ T4871] CPU: 1 PID: 4871 Comm: syz.2.116 Not tainted syzkaller #0 [ 121.600282][ T4871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.610363][ T4871] Call Trace: [ 121.613662][ T4871] [ 121.616612][ T4871] dump_stack_lvl+0x188/0x24e [ 121.621314][ T4871] ? show_regs_print_info+0x12/0x12 [ 121.626534][ T4871] ? load_image+0x400/0x400 [ 121.631059][ T4871] ? __might_sleep+0xd0/0xd0 [ 121.635669][ T4871] ? __lock_acquire+0x7d10/0x7d10 [ 121.640717][ T4871] ? __lock_acquire+0x12f4/0x7d10 [ 121.645757][ T4871] ? verify_lock_unused+0x140/0x140 [ 121.650980][ T4871] should_fail_ex+0x399/0x4d0 [ 121.655690][ T4871] should_failslab+0x5/0x20 [ 121.660211][ T4871] slab_pre_alloc_hook+0x59/0x310 [ 121.665258][ T4871] ? tomoyo_check_path_number_acl+0x280/0x280 [ 121.671355][ T4871] kmem_cache_alloc_node+0x5a/0x320 [ 121.676589][ T4871] ? mark_lock+0x94/0x320 [ 121.680979][ T4871] ? __alloc_skb+0xfc/0x7e0 [ 121.685508][ T4871] __alloc_skb+0xfc/0x7e0 [ 121.689860][ T4871] alloc_skb_with_frags+0xa7/0x710 [ 121.694999][ T4871] sock_alloc_send_pskb+0x87f/0x9a0 [ 121.700231][ T4871] ? sock_kzfree_s+0x50/0x50 [ 121.704858][ T4871] ? dev_get_by_index+0x1e/0x2d0 [ 121.709927][ T4871] ? dev_get_by_index+0x1e/0x2d0 [ 121.714907][ T4871] packet_sendmsg+0x32b0/0x4e60 [ 121.719779][ T4871] ? verify_lock_unused+0x140/0x140 [ 121.725011][ T4871] ? __might_sleep+0xd0/0xd0 [ 121.729628][ T4871] ? aa_sk_perm+0x81f/0x950 [ 121.734152][ T4871] ? __might_fault+0xa6/0x120 [ 121.738861][ T4871] ? packet_getsockopt+0x9a0/0x9a0 [ 121.744000][ T4871] ? __might_fault+0xa6/0x120 [ 121.748692][ T4871] ? aa_sock_msg_perm+0x94/0x150 [ 121.753645][ T4871] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 121.758947][ T4871] ? security_socket_sendmsg+0x7c/0xa0 [ 121.764438][ T4871] __sys_sendto+0x497/0x650 [ 121.768963][ T4871] ? __ia32_sys_getpeername+0x80/0x80 [ 121.774361][ T4871] ? __fget_files+0x43d/0x4b0 [ 121.779071][ T4871] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 121.785075][ T4871] ? lock_chain_count+0x20/0x20 [ 121.789946][ T4871] __x64_sys_sendto+0xda/0xf0 [ 121.794639][ T4871] do_syscall_64+0x4c/0xa0 [ 121.799075][ T4871] ? clear_bhb_loop+0x60/0xb0 [ 121.803776][ T4871] ? clear_bhb_loop+0x60/0xb0 [ 121.808473][ T4871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.814401][ T4871] RIP: 0033:0x7f8c6c99ce59 [ 121.818829][ T4871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.838452][ T4871] RSP: 002b:00007f8c6d8e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 121.846878][ T4871] RAX: ffffffffffffffda RBX: 00007f8c6cc15fa0 RCX: 00007f8c6c99ce59 [ 121.854866][ T4871] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000005 [ 121.862848][ T4871] RBP: 00007f8c6d8e8090 R08: 0000200000000140 R09: 0000000000000014 [ 121.870826][ T4871] R10: 0000000020000005 R11: 0000000000000246 R12: 0000000000000001 [ 121.878813][ T4871] R13: 00007f8c6cc16038 R14: 00007f8c6cc15fa0 R15: 00007ffd19a23d68 [ 121.886805][ T4871] [ 122.337600][ T4883] loop4: detected capacity change from 0 to 16 [ 122.345079][ T4883] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 122.353389][ T4883] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 122.375357][ T4883] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0 [ 122.449160][ T4892] rdma_rxe: already configured on lo [ 122.546582][ T14] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 122.753632][ T14] usb 1-1: config 1 interface 0 altsetting 14 endpoint 0x82 is Bulk; changing to Interrupt [ 122.786285][ T14] usb 1-1: config 1 interface 0 altsetting 14 endpoint 0x3 is Bulk; changing to Interrupt [ 122.832115][ T14] usb 1-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.878704][ T14] usb 1-1: config 1 interface 0 has no altsetting 0 [ 122.913037][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.948474][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.981147][ T14] usb 1-1: Product: ఉ [ 123.001019][ T14] usb 1-1: Manufacturer: а [ 123.021648][ T14] usb 1-1: SerialNumber: ࠌ [ 123.071072][ T4880] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.080165][ T4883] orangefs_mount: mount request failed with -4 [ 123.126031][ T4880] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.344082][ T14] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 123.378205][ T14] usb 1-1: USB disconnect, device number 6 [ 123.398706][ T4900] loop4: detected capacity change from 0 to 128 [ 123.475634][ T4900] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 123.746599][ T4913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 123.788823][ T4913] device syzkaller0 entered promiscuous mode [ 123.815365][ T4913] FAULT_INJECTION: forcing a failure. [ 123.815365][ T4913] name failslab, interval 1, probability 0, space 0, times 0 [ 123.837305][ T4913] CPU: 1 PID: 4913 Comm: syz.4.126 Not tainted syzkaller #0 [ 123.844638][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.854898][ T4913] Call Trace: [ 123.858193][ T4913] [ 123.861125][ T4913] dump_stack_lvl+0x188/0x24e [ 123.865815][ T4913] ? show_regs_print_info+0x12/0x12 [ 123.871030][ T4913] ? load_image+0x400/0x400 [ 123.875565][ T4913] ? __might_sleep+0xd0/0xd0 [ 123.880185][ T4913] ? __lock_acquire+0x7d10/0x7d10 [ 123.885225][ T4913] ? __lock_acquire+0x12f4/0x7d10 [ 123.890262][ T4913] ? verify_lock_unused+0x140/0x140 [ 123.895499][ T4913] should_fail_ex+0x399/0x4d0 [ 123.900216][ T4913] should_failslab+0x5/0x20 [ 123.904752][ T4913] slab_pre_alloc_hook+0x59/0x310 [ 123.909784][ T4913] ? tomoyo_check_path_number_acl+0x280/0x280 [ 123.915873][ T4913] kmem_cache_alloc_node+0x5a/0x320 [ 123.921095][ T4913] ? mark_lock+0x94/0x320 [ 123.925453][ T4913] ? __alloc_skb+0xfc/0x7e0 [ 123.929962][ T4913] __alloc_skb+0xfc/0x7e0 [ 123.934310][ T4913] alloc_skb_with_frags+0xa7/0x710 [ 123.939447][ T4913] sock_alloc_send_pskb+0x87f/0x9a0 [ 123.944675][ T4913] ? sock_kzfree_s+0x50/0x50 [ 123.949305][ T4913] ? dev_get_by_index+0x1e/0x2d0 [ 123.954272][ T4913] ? dev_get_by_index+0x1e/0x2d0 [ 123.959222][ T4913] packet_sendmsg+0x32b0/0x4e60 [ 123.964080][ T4913] ? verify_lock_unused+0x140/0x140 [ 123.969314][ T4913] ? __might_sleep+0xd0/0xd0 [ 123.973949][ T4913] ? aa_sk_perm+0x81f/0x950 [ 123.978479][ T4913] ? __might_fault+0xa6/0x120 [ 123.983195][ T4913] ? packet_getsockopt+0x9a0/0x9a0 [ 123.988318][ T4913] ? __might_fault+0xa6/0x120 [ 123.993001][ T4913] ? aa_sock_msg_perm+0x94/0x150 [ 123.997939][ T4913] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 124.003227][ T4913] ? security_socket_sendmsg+0x7c/0xa0 [ 124.008692][ T4913] __sys_sendto+0x497/0x650 [ 124.013207][ T4913] ? __ia32_sys_getpeername+0x80/0x80 [ 124.018636][ T4913] ? __fget_files+0x43d/0x4b0 [ 124.023341][ T4913] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 124.029349][ T4913] ? lock_chain_count+0x20/0x20 [ 124.034212][ T4913] __x64_sys_sendto+0xda/0xf0 [ 124.038898][ T4913] do_syscall_64+0x4c/0xa0 [ 124.043320][ T4913] ? clear_bhb_loop+0x60/0xb0 [ 124.048012][ T4913] ? clear_bhb_loop+0x60/0xb0 [ 124.052706][ T4913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.058632][ T4913] RIP: 0033:0x7fede939ce59 [ 124.063046][ T4913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.082677][ T4913] RSP: 002b:00007fedea172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 124.091113][ T4913] RAX: ffffffffffffffda RBX: 00007fede9615fa0 RCX: 00007fede939ce59 [ 124.099095][ T4913] RDX: 000000000000000e RSI: 0000200000000240 RDI: 0000000000000008 [ 124.107078][ T4913] RBP: 00007fedea172090 R08: 00002000000001c0 R09: 0000000000000014 [ 124.115052][ T4913] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 124.123031][ T4913] R13: 00007fede9616038 R14: 00007fede9615fa0 R15: 00007ffcfd4e29e8 [ 124.131037][ T4913] [ 124.296007][ T4918] loop0: detected capacity change from 0 to 128 [ 124.371826][ T4918] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 124.453700][ T4918] hpfs: filesystem error: improperly stopped [ 124.463744][ T4918] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 124.473473][ T4918] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 124.518012][ T4918] hpfs: You really don't want any checks? You are crazy... [ 124.533718][ T4918] hpfs: hpfs_map_sector(): read error [ 124.542583][ T4918] hpfs: code page support is disabled [ 124.559530][ T4918] hpfs: hpfs_map_4sectors(): unaligned read [ 124.566384][ T4918] hpfs: hpfs_map_4sectors(): unaligned read [ 124.578276][ T4918] hpfs: filesystem error: unable to find root dir [ 124.630484][ T4923] FAULT_INJECTION: forcing a failure. [ 124.630484][ T4923] name failslab, interval 1, probability 0, space 0, times 0 [ 124.643606][ T4923] CPU: 0 PID: 4923 Comm: syz.4.129 Not tainted syzkaller #0 [ 124.650924][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.661005][ T4923] Call Trace: [ 124.664312][ T4923] [ 124.667269][ T4923] dump_stack_lvl+0x188/0x24e [ 124.671986][ T4923] ? show_regs_print_info+0x12/0x12 [ 124.677211][ T4923] ? load_image+0x400/0x400 [ 124.681758][ T4923] ? mark_lock+0x94/0x320 [ 124.686130][ T4923] should_fail_ex+0x399/0x4d0 [ 124.690847][ T4923] should_failslab+0x5/0x20 [ 124.695383][ T4923] slab_pre_alloc_hook+0x59/0x310 [ 124.700449][ T4923] ? lockdep_hardirqs_on+0x94/0x140 [ 124.705689][ T4923] ? ref_tracker_alloc+0x14e/0x4b0 [ 124.710855][ T4923] __kmem_cache_alloc_node+0x4f/0x260 [ 124.716249][ T4923] ? ref_tracker_alloc+0x14e/0x4b0 [ 124.721392][ T4923] kmalloc_trace+0x26/0xe0 [ 124.725894][ T4923] ref_tracker_alloc+0x14e/0x4b0 [ 124.730870][ T4923] ? ref_tracker_dir_print+0x150/0x150 [ 124.736373][ T4923] ? packet_do_bind+0x6d0/0xce0 [ 124.741258][ T4923] ? __sys_bind+0x2e9/0x3e0 [ 124.745804][ T4923] ? __x64_sys_bind+0x76/0x80 [ 124.750523][ T4923] ? do_syscall_64+0x4c/0xa0 [ 124.755132][ T4923] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.761253][ T4923] ? __unregister_prot_hook+0x3f7/0x570 [ 124.766814][ T4923] ? do_raw_spin_unlock+0x11d/0x230 [ 124.772039][ T4923] packet_do_bind+0x7a1/0xce0 [ 124.776780][ T4923] ? packet_do_bind+0x96/0xce0 [ 124.781567][ T4923] __sys_bind+0x2e9/0x3e0 [ 124.785953][ T4923] ? __ia32_sys_socketpair+0xb0/0xb0 [ 124.791310][ T4923] __x64_sys_bind+0x76/0x80 [ 124.795836][ T4923] do_syscall_64+0x4c/0xa0 [ 124.800264][ T4923] ? clear_bhb_loop+0x60/0xb0 [ 124.804961][ T4923] ? clear_bhb_loop+0x60/0xb0 [ 124.809666][ T4923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.815588][ T4923] RIP: 0033:0x7fede939ce59 [ 124.820036][ T4923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.839655][ T4923] RSP: 002b:00007fedea172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 124.848082][ T4923] RAX: ffffffffffffffda RBX: 00007fede9615fa0 RCX: 00007fede939ce59 [ 124.856065][ T4923] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004 [ 124.864058][ T4923] RBP: 00007fedea172090 R08: 0000000000000000 R09: 0000000000000000 [ 124.872055][ T4923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.880063][ T4923] R13: 00007fede9616038 R14: 00007fede9615fa0 R15: 00007ffcfd4e29e8 [ 124.888058][ T4923] [ 124.891161][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.900079][ T4923] memory allocation failure, unreliable refcount tracker. [ 124.915818][ T4261] kernel read not supported for file /dsp1 (pid: 4261 comm: kworker/0:3) [ 124.928625][ T4922] device syzkaller0 entered promiscuous mode [ 124.956153][ T4924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'. [ 125.142868][ T4927] libceph: secret too big 31 [ 125.162499][ T4932] loop2: detected capacity change from 0 to 16 [ 125.169446][ T4932] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 125.177436][ T4932] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 125.201640][ T4932] erofs: (device loop2): erofs_init_device: empty device tag @ pos 0 [ 125.278987][ T4940] rdma_rxe: rxe_register_device failed with error -23 [ 125.286366][ T4940] rdma_rxe: failed to add lo [ 125.472193][ T4945] loop3: detected capacity change from 0 to 128 [ 125.505671][ T4945] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 125.752791][ T4950] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.138' sets config #0 [ 125.899564][ T4939] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.907905][ T4939] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.987329][ T4932] orangefs_mount: mount request failed with -4 [ 126.078054][ T4957] loop2: detected capacity change from 0 to 256 [ 126.117448][ T4957] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.149159][ T4957] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 126.186044][ T4957] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 126.517893][ T4939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.569479][ T4939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.724340][ T4939] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.734725][ T4939] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.745513][ T4939] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.754677][ T4939] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.767542][ T4939] device geneve1 left promiscuous mode [ 126.971463][ T4958] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 127.118641][ T4966] FAULT_INJECTION: forcing a failure. [ 127.118641][ T4966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.131904][ T4966] CPU: 0 PID: 4966 Comm: syz.0.142 Not tainted syzkaller #0 [ 127.139222][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.149314][ T4966] Call Trace: [ 127.152625][ T4966] [ 127.155593][ T4966] dump_stack_lvl+0x188/0x24e [ 127.160306][ T4966] ? show_regs_print_info+0x12/0x12 [ 127.165545][ T4966] ? load_image+0x400/0x400 [ 127.170095][ T4966] ? __lock_acquire+0x7d10/0x7d10 [ 127.175248][ T4966] should_fail_ex+0x399/0x4d0 [ 127.179956][ T4966] _copy_from_user+0x2c/0x170 [ 127.184669][ T4966] ___sys_recvmsg+0x172/0x590 [ 127.189385][ T4966] ? __sys_recvmsg+0x290/0x290 [ 127.194193][ T4966] ? __lock_acquire+0x7d10/0x7d10 [ 127.199255][ T4966] ? __might_fault+0xc2/0x120 [ 127.203962][ T4966] ? __might_fault+0xa6/0x120 [ 127.208666][ T4966] do_recvmmsg+0x393/0x870 [ 127.213126][ T4966] ? __sys_recvmmsg+0x290/0x290 [ 127.218010][ T4966] ? vfs_write+0x61f/0xa30 [ 127.222472][ T4966] ? mutex_unlock+0x10/0x10 [ 127.227029][ T4966] ? __fget_files+0x43d/0x4b0 [ 127.231768][ T4966] __x64_sys_recvmmsg+0x195/0x250 [ 127.236846][ T4966] ? do_recvmmsg+0x870/0x870 [ 127.241481][ T4966] ? lockdep_hardirqs_on+0x94/0x140 [ 127.246726][ T4966] do_syscall_64+0x4c/0xa0 [ 127.251207][ T4966] ? clear_bhb_loop+0x60/0xb0 [ 127.255932][ T4966] ? clear_bhb_loop+0x60/0xb0 [ 127.260744][ T4966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.266689][ T4966] RIP: 0033:0x7fa6afd9ce59 [ 127.271142][ T4966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.290787][ T4966] RSP: 002b:00007fa6b0b81028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 127.299250][ T4966] RAX: ffffffffffffffda RBX: 00007fa6b0015fa0 RCX: 00007fa6afd9ce59 [ 127.307264][ T4966] RDX: 0000000000000002 RSI: 0000200000000bc0 RDI: 0000000000000006 [ 127.315269][ T4966] RBP: 00007fa6b0b81090 R08: 0000000000000000 R09: 0000000000000000 [ 127.323285][ T4966] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 127.331286][ T4966] R13: 00007fa6b0016038 R14: 00007fa6b0015fa0 R15: 00007fff005b7f38 [ 127.339319][ T4966] [ 127.342381][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.250522][ T4993] libceph: secret too big 31 [ 128.535894][ T4980] loop3: detected capacity change from 0 to 32768 [ 128.584153][ T4980] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 128.593020][ T4980] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 128.621177][ T4980] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 128.632665][ T4368] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 128.640208][ T4368] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 128.701918][ T4368] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 61ms [ 128.724066][ T4368] gfs2: fsid=syz:syz.0: jid=0: Done [ 128.743416][ T4980] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 128.872927][ T4980] gfs2: fsid=syz:syz.0: found 1 quota changes [ 128.902363][ T5000] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 128.902363][ T5000] inode = 11 2339 [ 128.902363][ T5000] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 128.959360][ T5000] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 129.012100][ T5000] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5000 [gfs2_quotad] gfs2_quota_sync+0x32c/0x700 [ 129.073990][ T5000] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 129.122295][ T5000] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 129.169808][ T5000] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 129.235605][ T5000] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 129.243218][ T5000] gfs2: fsid=syz:syz.0: File system withdrawn [ 129.282566][ T5000] CPU: 1 PID: 5000 Comm: gfs2_quotad Not tainted syzkaller #0 [ 129.290099][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.300191][ T5000] Call Trace: [ 129.303504][ T5000] [ 129.306473][ T5000] dump_stack_lvl+0x188/0x24e [ 129.311194][ T5000] ? kobject_uevent_env+0x35f/0x8a0 [ 129.316468][ T5000] ? show_regs_print_info+0x12/0x12 [ 129.321713][ T5000] ? load_image+0x400/0x400 [ 129.326264][ T5000] ? kobject_uevent_env+0x35f/0x8a0 [ 129.331507][ T5000] gfs2_withdraw+0xde6/0x15d0 [ 129.336277][ T5000] ? gfs2_lm+0x240/0x240 [ 129.340591][ T5000] ? gfs2_consist_inode_i+0xf1/0x110 [ 129.345933][ T5000] gfs2_inode_refresh+0xc2a/0x1140 [ 129.351090][ T5000] ? gfs2_inode_metasync+0xf0/0xf0 [ 129.356240][ T5000] ? gfs2_glock_nq+0xcf0/0x14e0 [ 129.361129][ T5000] gfs2_instantiate+0x15e/0x210 [ 129.366064][ T5000] gfs2_glock_wait+0x1d0/0x2a0 [ 129.370925][ T5000] do_sync+0x4bf/0xc40 [ 129.375040][ T5000] ? gfs2_quota_sync+0x32c/0x700 [ 129.380018][ T5000] ? slot_put+0x1e0/0x1e0 [ 129.384387][ T5000] ? __lock_acquire+0x7d10/0x7d10 [ 129.389448][ T5000] ? do_raw_spin_lock+0x128/0x2f0 [ 129.394515][ T5000] ? gfs2_quota_sync+0x32c/0x700 [ 129.399495][ T5000] ? do_raw_spin_unlock+0x11d/0x230 [ 129.404725][ T5000] gfs2_quota_sync+0x32c/0x700 [ 129.409556][ T5000] gfs2_quotad+0x420/0x680 [ 129.414023][ T5000] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 129.419182][ T5000] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 129.425124][ T5000] ? wake_bit_function+0x200/0x200 [ 129.430277][ T5000] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 129.436210][ T5000] ? __kthread_parkme+0x162/0x1c0 [ 129.441294][ T5000] kthread+0x29d/0x330 [ 129.445398][ T5000] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 129.450569][ T5000] ? kthread_blkcg+0xd0/0xd0 [ 129.455202][ T5000] ret_from_fork+0x1f/0x30 [ 129.459697][ T5000] [ 129.469157][ T4272] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 129.503937][ T4272] CPU: 0 PID: 4272 Comm: syz-executor Not tainted syzkaller #0 [ 129.511614][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.521703][ T4272] Call Trace: [ 129.525015][ T4272] [ 129.527985][ T4272] dump_stack_lvl+0x188/0x24e [ 129.532700][ T4272] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 129.537855][ T4272] ? show_regs_print_info+0x12/0x12 [ 129.543095][ T4272] ? load_image+0x400/0x400 [ 129.547644][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 129.552879][ T4272] gfs2_assert_warn_i+0x18f/0x2c0 [ 129.557955][ T4272] gfs2_quota_cleanup+0x4b4/0x6a0 [ 129.563034][ T4272] gfs2_put_super+0x22f/0x8c0 [ 129.567769][ T4272] ? gfs2_evict_inode+0x11d0/0x11d0 [ 129.573013][ T4272] generic_shutdown_super+0x130/0x340 [ 129.578438][ T4272] kill_block_super+0x7c/0xe0 [ 129.583152][ T4272] deactivate_locked_super+0x93/0xf0 [ 129.588467][ T4272] cleanup_mnt+0x42c/0x4b0 [ 129.592912][ T4272] ? lockdep_hardirqs_on+0x94/0x140 [ 129.598150][ T4272] task_work_run+0x1d0/0x260 [ 129.602788][ T4272] ? task_work_cancel+0x220/0x220 [ 129.607853][ T4272] ? exit_to_user_mode_loop+0x3b/0x110 [ 129.613350][ T4272] exit_to_user_mode_loop+0xe6/0x110 [ 129.618661][ T4272] exit_to_user_mode_prepare+0xee/0x180 [ 129.624221][ T4272] syscall_exit_to_user_mode+0x16/0x40 [ 129.629696][ T4272] do_syscall_64+0x58/0xa0 [ 129.634121][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 129.638817][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 129.643527][ T4272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.649435][ T4272] RIP: 0033:0x7ffa3219e097 [ 129.653875][ T4272] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 129.673509][ T4272] RSP: 002b:00007ffd732624a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 129.681936][ T4272] RAX: 0000000000000000 RBX: 00007ffa322321ca RCX: 00007ffa3219e097 [ 129.689915][ T4272] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd73262560 [ 129.697897][ T4272] RBP: 00007ffd73262560 R08: 00007ffd73263560 R09: 00000000ffffffff [ 129.705880][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd732635f0 [ 129.713869][ T4272] R13: 00007ffa322321ca R14: 000000000001f7df R15: 00007ffd73263630 [ 129.721871][ T4272] [ 129.939952][ T5008] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.017647][ T5010] FAULT_INJECTION: forcing a failure. [ 130.017647][ T5010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.031942][ T5010] CPU: 1 PID: 5010 Comm: syz.3.152 Not tainted syzkaller #0 [ 130.039270][ T5010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.049363][ T5010] Call Trace: [ 130.052649][ T5010] [ 130.055592][ T5010] dump_stack_lvl+0x188/0x24e [ 130.060290][ T5010] ? show_regs_print_info+0x12/0x12 [ 130.065517][ T5010] ? load_image+0x400/0x400 [ 130.070042][ T5010] ? __lock_acquire+0x7d10/0x7d10 [ 130.075113][ T5010] should_fail_ex+0x399/0x4d0 [ 130.079833][ T5010] _copy_from_user+0x2c/0x170 [ 130.084550][ T5010] iovec_from_user+0x143/0x360 [ 130.089347][ T5010] __import_iovec+0x6d/0x500 [ 130.093963][ T5010] import_iovec+0x6f/0xa0 [ 130.098310][ T5010] ___sys_sendmsg+0x252/0x360 [ 130.103045][ T5010] ? __sys_sendmsg+0x290/0x290 [ 130.107853][ T5010] ? __lock_acquire+0x7d10/0x7d10 [ 130.112912][ T5010] __se_sys_sendmsg+0x1bb/0x2a0 [ 130.117791][ T5010] ? __x64_sys_sendmsg+0x80/0x80 [ 130.122767][ T5010] ? lockdep_hardirqs_on+0x94/0x140 [ 130.127993][ T5010] do_syscall_64+0x4c/0xa0 [ 130.132424][ T5010] ? clear_bhb_loop+0x60/0xb0 [ 130.137139][ T5010] ? clear_bhb_loop+0x60/0xb0 [ 130.141836][ T5010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.147743][ T5010] RIP: 0033:0x7ffa3219ce59 [ 130.152173][ T5010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.171803][ T5010] RSP: 002b:00007ffa32f99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.180275][ T5010] RAX: ffffffffffffffda RBX: 00007ffa32415fa0 RCX: 00007ffa3219ce59 [ 130.188276][ T5010] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 130.196271][ T5010] RBP: 00007ffa32f99090 R08: 0000000000000000 R09: 0000000000000000 [ 130.204257][ T5010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.212248][ T5010] R13: 00007ffa32416038 R14: 00007ffa32415fa0 R15: 00007ffd73263238 [ 130.220246][ T5010] [ 130.224920][ T4972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.243637][ T5006] loop1: detected capacity change from 0 to 32768 [ 130.437785][ T5006] XFS (loop1): Mounting V5 Filesystem [ 130.528664][ T5024] loop4: detected capacity change from 0 to 16 [ 130.535671][ T5024] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 130.543802][ T5024] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 130.558542][ T5024] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0 [ 130.569386][ T5006] XFS (loop1): Ending clean mount [ 130.592346][ T5006] XFS (loop1): Quotacheck needed: Please wait. [ 130.616511][ T4357] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.626613][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.671831][ T5027] rdma_rxe: already configured on lo [ 130.690807][ T5006] XFS (loop1): Quotacheck: Done. [ 130.710884][ T5026] loop3: detected capacity change from 0 to 4096 [ 130.723300][ T5029] loop0: detected capacity change from 0 to 128 [ 130.744443][ T5026] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.791071][ T5029] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 130.826720][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 130.839264][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.860178][ T4273] XFS (loop1): Unmounting Filesystem [ 130.886884][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.922989][ T14] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 130.955386][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.985933][ T14] usb 3-1: config 0 descriptor?? [ 131.073291][ T5032] netlink: 128 bytes leftover after parsing attributes in process `syz.0.159'. [ 131.202537][ T5026] EXT4-fs (loop3): Test dummy encryption mode enabled [ 131.310160][ T5037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.160'. [ 131.382494][ T5024] orangefs_mount: mount request failed with -4 [ 132.111343][ T5026] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 132.122511][ T5043] libceph: secret too big 31 [ 132.229855][ T5046] FAULT_INJECTION: forcing a failure. [ 132.229855][ T5046] name failslab, interval 1, probability 0, space 0, times 0 [ 132.267016][ T5046] CPU: 1 PID: 5046 Comm: syz.0.161 Not tainted syzkaller #0 [ 132.274359][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.284472][ T5046] Call Trace: [ 132.287776][ T5046] [ 132.290745][ T5046] dump_stack_lvl+0x188/0x24e [ 132.295493][ T5046] ? show_regs_print_info+0x12/0x12 [ 132.300728][ T5046] ? load_image+0x400/0x400 [ 132.305271][ T5046] ? __might_sleep+0xd0/0xd0 [ 132.309900][ T5046] ? __lock_acquire+0x7d10/0x7d10 [ 132.314967][ T5046] should_fail_ex+0x399/0x4d0 [ 132.319687][ T5046] should_failslab+0x5/0x20 [ 132.324197][ T5046] slab_pre_alloc_hook+0x59/0x310 [ 132.329232][ T5046] ? tomoyo_encode+0x27e/0x540 [ 132.334019][ T5046] __kmem_cache_alloc_node+0x4f/0x260 [ 132.339410][ T5046] ? tomoyo_encode+0x27e/0x540 [ 132.344201][ T5046] __kmalloc+0xa0/0x240 [ 132.348384][ T5046] tomoyo_encode+0x27e/0x540 [ 132.352992][ T5046] tomoyo_realpath_from_path+0x58e/0x5d0 [ 132.358651][ T5046] ? tomoyo_path_number_perm+0x205/0x650 [ 132.364301][ T5046] tomoyo_path_number_perm+0x22f/0x650 [ 132.369774][ T5046] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 132.375284][ T5046] ? ksys_write+0x1c0/0x250 [ 132.379826][ T5046] ? common_file_perm+0x171/0x1c0 [ 132.384887][ T5046] ? __fget_files+0x28/0x4b0 [ 132.389505][ T5046] ? __fget_files+0x28/0x4b0 [ 132.394119][ T5046] security_file_ioctl+0x6c/0xa0 [ 132.399104][ T5046] __se_sys_ioctl+0x48/0x170 [ 132.403712][ T5046] do_syscall_64+0x4c/0xa0 [ 132.408163][ T5046] ? clear_bhb_loop+0x60/0xb0 [ 132.412857][ T5046] ? clear_bhb_loop+0x60/0xb0 [ 132.417575][ T5046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.423485][ T5046] RIP: 0033:0x7fa6afd9ce59 [ 132.427918][ T5046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.447537][ T5046] RSP: 002b:00007fa6b0b81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.455956][ T5046] RAX: ffffffffffffffda RBX: 00007fa6b0015fa0 RCX: 00007fa6afd9ce59 [ 132.463972][ T5046] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 132.471958][ T5046] RBP: 00007fa6b0b81090 R08: 0000000000000000 R09: 0000000000000000 [ 132.479967][ T5046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.487956][ T5046] R13: 00007fa6b0016038 R14: 00007fa6b0015fa0 R15: 00007fff005b7f38 [ 132.495973][ T5046] [ 132.525932][ T5046] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.675358][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.682172][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.691748][ T5026] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 132.779134][ T5054] overlayfs: unrecognized mount option "uuid=null" or missing value [ 132.928702][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 132.938373][ T5062] device syzkaller0 entered promiscuous mode [ 133.303890][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 133.303906][ T26] audit: type=1326 audit(1780898332.666:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3219ce59 code=0x7ffc0000 [ 133.401656][ T5071] IPVS: Scheduler module ip_vs_ not found [ 133.456765][ T26] audit: type=1326 audit(1780898332.716:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7ffa3219ce59 code=0x7ffc0000 [ 133.524294][ T26] audit: type=1326 audit(1780898332.716:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3219ce59 code=0x7ffc0000 [ 133.585183][ T26] audit: type=1326 audit(1780898332.716:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7ffa3219ce59 code=0x7ffc0000 [ 133.645646][ T5065] loop0: detected capacity change from 0 to 32768 [ 133.653714][ T26] audit: type=1326 audit(1780898332.716:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3219ce59 code=0x7ffc0000 [ 133.692458][ T5065] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.164 (5065) [ 133.744193][ T5065] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.771891][ T26] audit: type=1326 audit(1780898332.716:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa3219ce59 code=0x7ffc0000 [ 133.786823][ T5065] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 133.821970][ T26] audit: type=1326 audit(1780898332.986:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3219ce59 code=0x7ffc0000 [ 133.875867][ T26] audit: type=1326 audit(1780898332.986:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3219ce59 code=0x7ffc0000 [ 133.886782][ T5065] BTRFS info (device loop0): using free space tree [ 134.154657][ T5065] BTRFS info (device loop0): enabling ssd optimizations [ 134.339600][ T4275] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.454673][ T4350] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4350) [ 134.681598][ T26] audit: type=1326 audit(1780898334.046:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7ffa3219ce59 code=0x7ffc0000 [ 134.705755][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.775477][ T26] audit: type=1326 audit(1780898334.076:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3219ce59 code=0x7ffc0000 [ 135.312262][ T5116] netlink: 44 bytes leftover after parsing attributes in process `syz.0.168'. [ 136.040279][ T14] usbhid 3-1:0.0: can't add hid device: -32 [ 136.046907][ T14] usbhid: probe of 3-1:0.0 failed with error -32 [ 136.984121][ T5079] netlink: 92 bytes leftover after parsing attributes in process `syz.4.166'. [ 137.147847][ T27] usb 3-1: USB disconnect, device number 5 [ 137.447664][ T5127] netlink: 'syz.4.173': attribute type 1 has an invalid length. [ 137.471832][ T5130] loop1: detected capacity change from 0 to 16 [ 137.478771][ T5130] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 137.486693][ T5130] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 137.508091][ T5130] erofs: (device loop1): erofs_init_device: empty device tag @ pos 0 [ 137.558799][ T5127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.588018][ T5133] rdma_rxe: rxe_register_device failed with error -23 [ 137.611838][ T5132] netlink: 48 bytes leftover after parsing attributes in process `syz.4.173'. [ 137.628839][ T5133] rdma_rxe: failed to add lo [ 137.649453][ T5134] bond1: (slave gretap1): making interface the new active one [ 137.659900][ T5134] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 137.677131][ T14] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.721110][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 137.733885][ T5127] device syzkaller0 entered promiscuous mode [ 137.839126][ T5119] loop0: detected capacity change from 0 to 32768 [ 137.888469][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.906308][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.934662][ T14] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 137.944343][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.962106][ T14] usb 4-1: config 0 descriptor?? [ 137.971545][ T5119] XFS (loop0): Mounting V5 Filesystem [ 138.100283][ T5119] XFS (loop0): Ending clean mount [ 138.120308][ T5119] XFS (loop0): Quotacheck needed: Please wait. [ 138.211336][ T5128] loop3: detected capacity change from 0 to 2048 [ 138.224182][ T5119] XFS (loop0): Quotacheck: Done. [ 138.281261][ T5130] orangefs_mount: mount request failed with -4 [ 138.343087][ T5153] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.354213][ T126] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.370192][ T4275] XFS (loop0): Unmounting Filesystem [ 138.536692][ T126] usb 5-1: device descriptor read/64, error -71 [ 138.590055][ T14] hkems 0003:2006:0118.0003: item fetching failed at offset 5/7 [ 138.611410][ T14] hkems 0003:2006:0118.0003: parse failed [ 138.619258][ T14] hkems: probe of 0003:2006:0118.0003 failed with error -22 [ 138.801521][ T14] usb 4-1: USB disconnect, device number 6 [ 138.807601][ T126] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.951584][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 138.990413][ T126] usb 5-1: device descriptor read/64, error -71 [ 139.136582][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.231603][ T5168] loop2: detected capacity change from 0 to 2048 [ 139.245074][ T5168] UDF-fs: bad mount option "adinick" or missing value [ 139.336890][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 139.367707][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.507171][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.632320][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 139.740070][ T27] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 139.806746][ T126] usb usb5-port1: attempt power cycle [ 139.827109][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.922801][ T27] usb 1-1: config 0 descriptor?? [ 140.073847][ T5178] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 140.118903][ T5181] FAULT_INJECTION: forcing a failure. [ 140.118903][ T5181] name failslab, interval 1, probability 0, space 0, times 0 [ 140.146638][ T5181] CPU: 0 PID: 5181 Comm: syz.1.187 Not tainted syzkaller #0 [ 140.154003][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.164107][ T5181] Call Trace: [ 140.167430][ T5181] [ 140.170383][ T5181] dump_stack_lvl+0x188/0x24e [ 140.175098][ T5181] ? show_regs_print_info+0x12/0x12 [ 140.180326][ T5181] ? load_image+0x400/0x400 [ 140.184869][ T5181] ? __might_sleep+0xd0/0xd0 [ 140.189488][ T5181] ? __lock_acquire+0x7d10/0x7d10 [ 140.194587][ T5181] should_fail_ex+0x399/0x4d0 [ 140.199300][ T5181] should_failslab+0x5/0x20 [ 140.203839][ T5181] slab_pre_alloc_hook+0x59/0x310 [ 140.208904][ T5181] ? tomoyo_encode+0x27e/0x540 [ 140.213707][ T5181] __kmem_cache_alloc_node+0x4f/0x260 [ 140.219106][ T5181] ? tomoyo_encode+0x27e/0x540 [ 140.223912][ T5181] __kmalloc+0xa0/0x240 [ 140.228113][ T5181] tomoyo_encode+0x27e/0x540 [ 140.232749][ T5181] tomoyo_realpath_from_path+0x58e/0x5d0 [ 140.238425][ T5181] ? tomoyo_path_number_perm+0x205/0x650 [ 140.244107][ T5181] tomoyo_path_number_perm+0x22f/0x650 [ 140.249623][ T5181] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 140.255121][ T5181] ? ksys_write+0x1c0/0x250 [ 140.259673][ T5181] ? common_file_perm+0x171/0x1c0 [ 140.264775][ T5181] ? __fget_files+0x28/0x4b0 [ 140.269401][ T5181] ? __fget_files+0x28/0x4b0 [ 140.274044][ T5181] security_file_ioctl+0x6c/0xa0 [ 140.279030][ T5181] __se_sys_ioctl+0x48/0x170 [ 140.283690][ T5181] do_syscall_64+0x4c/0xa0 [ 140.288140][ T5181] ? clear_bhb_loop+0x60/0xb0 [ 140.292863][ T5181] ? clear_bhb_loop+0x60/0xb0 [ 140.297587][ T5181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.303515][ T5181] RIP: 0033:0x7fdc1459ce59 [ 140.307966][ T5181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.327611][ T5181] RSP: 002b:00007fdc15471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.336073][ T5181] RAX: ffffffffffffffda RBX: 00007fdc14815fa0 RCX: 00007fdc1459ce59 [ 140.344088][ T5181] RDX: 0000200000000280 RSI: 000000004008ae89 RDI: 0000000000000005 [ 140.352090][ T5181] RBP: 00007fdc15471090 R08: 0000000000000000 R09: 0000000000000000 [ 140.360093][ T5181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.368098][ T5181] R13: 00007fdc14816038 R14: 00007fdc14815fa0 R15: 00007fff165c07f8 [ 140.376123][ T5181] [ 140.401951][ T5181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.456777][ T126] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 140.497101][ T126] usb 5-1: device descriptor read/8, error -71 [ 140.596146][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 140.619237][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 140.633180][ T27] usb 1-1: USB disconnect, device number 7 [ 140.716679][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.766565][ T126] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.807062][ T126] usb 5-1: device descriptor read/8, error -71 [ 140.909729][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.926750][ T126] usb usb5-port1: unable to enumerate USB device [ 140.936117][ T14] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.960455][ T5190] loop1: detected capacity change from 0 to 16 [ 140.967512][ T5190] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 140.975440][ T5190] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 140.984294][ T4318] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 141.008545][ T5190] erofs: (device loop1): erofs_init_device: empty device tag @ pos 0 [ 141.079726][ T5191] rdma_rxe: rxe_register_device failed with error -23 [ 141.093559][ T14] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 141.119345][ T5191] rdma_rxe: failed to add lo [ 141.126873][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.174794][ T14] usb 4-1: Product: syz [ 141.179824][ T14] usb 4-1: Manufacturer: syz [ 141.184993][ T14] usb 4-1: SerialNumber: syz [ 141.209249][ T4318] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.224628][ T4318] usb 3-1: config 3 has an invalid interface number: 171 but max is 0 [ 141.233700][ T4318] usb 3-1: config 3 has no interface number 0 [ 141.243027][ T4318] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 141.252845][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.262780][ T4318] usb 3-1: Product: 릩ꪢ꼙愼㖌ﵸ햪䗢쁕籸䥥蛇Ᏻ↏㫝遙 [ 141.278356][ T4318] usb 3-1: Manufacturer: ఉ [ 141.308062][ T4318] usb 3-1: SerialNumber: ㋝겥脩蛈⁇뎑䴩֊팔믗榏Ⓔ䠜蓎쩘ꏆ㺀碊徒ꮨ灤䀪ꀒ忥ҭ膋厣Ⓨ荻䮐ᘢ㟠㴞㒸ᬜ뗱쨦闁䥃⏖ퟱﶏṞ⇄맣躱黓Ŋ鸟䬆惴㮌Ǝ [ 141.445428][ T14] usb 4-1: MIDIStreaming interface descriptor not found [ 141.551166][ T14] usb 4-1: USB disconnect, device number 7 [ 141.660111][ T5203] FAULT_INJECTION: forcing a failure. [ 141.660111][ T5203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.674975][ T5203] CPU: 0 PID: 5203 Comm: syz.4.194 Not tainted syzkaller #0 [ 141.682302][ T5203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 141.692390][ T5203] Call Trace: [ 141.695694][ T5203] [ 141.698650][ T5203] dump_stack_lvl+0x188/0x24e [ 141.703361][ T5203] ? show_regs_print_info+0x12/0x12 [ 141.708589][ T5203] ? load_image+0x400/0x400 [ 141.713131][ T5203] ? __might_fault+0xa6/0x120 [ 141.717851][ T5203] should_fail_ex+0x399/0x4d0 [ 141.722568][ T5203] copyout+0x1b/0x120 [ 141.726593][ T5203] _copy_to_iter+0x48b/0x1040 [ 141.731383][ T5203] ? iov_iter_init+0x1f0/0x1f0 [ 141.736243][ T5203] ? __virt_addr_valid+0x188/0x540 [ 141.741397][ T5203] ? __virt_addr_valid+0x188/0x540 [ 141.746550][ T5203] ? __virt_addr_valid+0x465/0x540 [ 141.751701][ T5203] ? __check_object_size+0x500/0xa40 [ 141.757057][ T5203] seq_read_iter+0x2d4/0xd50 [ 141.761701][ T5203] seq_read+0x171/0x210 [ 141.765899][ T5203] ? seq_open+0x130/0x130 [ 141.770263][ T5203] ? end_current_label_crit_section+0x14b/0x170 [ 141.776514][ T5203] ? seq_open+0x130/0x130 [ 141.780869][ T5203] proc_reg_read+0x1dd/0x2c0 [ 141.785502][ T5203] ? proc_reg_get_unmapped_area+0x3a0/0x3a0 [ 141.791439][ T5203] vfs_read+0x2de/0xa00 [ 141.795629][ T5203] ? kernel_read+0x1e0/0x1e0 [ 141.800247][ T5203] ? __fget_files+0x28/0x4b0 [ 141.804859][ T5203] ? __fget_files+0x28/0x4b0 [ 141.809486][ T5203] ? __fget_files+0x43d/0x4b0 [ 141.814203][ T5203] ? __fdget+0x17c/0x200 [ 141.818502][ T5203] ? __x64_sys_pread64+0xf2/0x220 [ 141.823551][ T5203] __x64_sys_pread64+0x197/0x220 [ 141.828507][ T5203] ? ksys_pread64+0x1b0/0x1b0 [ 141.833295][ T5203] ? lockdep_hardirqs_on+0x94/0x140 [ 141.838514][ T5203] do_syscall_64+0x4c/0xa0 [ 141.842942][ T5203] ? clear_bhb_loop+0x60/0xb0 [ 141.847635][ T5203] ? clear_bhb_loop+0x60/0xb0 [ 141.852326][ T5203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.858234][ T5203] RIP: 0033:0x7fede939ce59 [ 141.862656][ T5203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.882269][ T5203] RSP: 002b:00007fedea172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 141.890704][ T5203] RAX: ffffffffffffffda RBX: 00007fede9615fa0 RCX: 00007fede939ce59 [ 141.898689][ T5203] RDX: 0000000000000131 RSI: 0000200000000240 RDI: 0000000000000003 [ 141.906702][ T5203] RBP: 00007fedea172090 R08: 0000000000000000 R09: 0000000000000000 [ 141.914681][ T5203] R10: 0000000000000131 R11: 0000000000000246 R12: 0000000000000001 [ 141.922675][ T5203] R13: 00007fede9616038 R14: 00007fede9615fa0 R15: 00007ffcfd4e29e8 [ 141.930675][ T5203] [ 141.942638][ T5190] orangefs_mount: mount request failed with -4 [ 142.087293][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.119892][ T5209] FAULT_INJECTION: forcing a failure. [ 142.119892][ T5209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.135732][ T5209] CPU: 1 PID: 5209 Comm: syz.4.196 Not tainted syzkaller #0 [ 142.143072][ T5209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.153158][ T5209] Call Trace: [ 142.156461][ T5209] [ 142.159421][ T5209] dump_stack_lvl+0x188/0x24e [ 142.164133][ T5209] ? show_regs_print_info+0x12/0x12 [ 142.169372][ T5209] ? load_image+0x400/0x400 [ 142.173924][ T5209] ? __lock_acquire+0x7d10/0x7d10 [ 142.178991][ T5209] should_fail_ex+0x399/0x4d0 [ 142.183703][ T5209] _copy_from_user+0x2c/0x170 [ 142.188424][ T5209] __copy_msghdr+0x3b7/0x580 [ 142.193044][ T5209] ___sys_sendmsg+0x210/0x360 [ 142.197762][ T5209] ? __sys_sendmsg+0x290/0x290 [ 142.202575][ T5209] ? __lock_acquire+0x7d10/0x7d10 [ 142.207657][ T5209] __se_sys_sendmsg+0x1bb/0x2a0 [ 142.212540][ T5209] ? __x64_sys_sendmsg+0x80/0x80 [ 142.217516][ T5209] ? lockdep_hardirqs_on+0x94/0x140 [ 142.222758][ T5209] do_syscall_64+0x4c/0xa0 [ 142.227202][ T5209] ? clear_bhb_loop+0x60/0xb0 [ 142.231912][ T5209] ? clear_bhb_loop+0x60/0xb0 [ 142.236622][ T5209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.242682][ T5209] RIP: 0033:0x7fede939ce59 [ 142.247133][ T5209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.266757][ T5209] RSP: 002b:00007fedea172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.275199][ T5209] RAX: ffffffffffffffda RBX: 00007fede9615fa0 RCX: 00007fede939ce59 [ 142.283200][ T5209] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 142.291189][ T5209] RBP: 00007fedea172090 R08: 0000000000000000 R09: 0000000000000000 [ 142.299184][ T5209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.307176][ T5209] R13: 00007fede9616038 R14: 00007fede9615fa0 R15: 00007ffcfd4e29e8 [ 142.315178][ T5209] [ 142.421084][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.440949][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.452216][ T27] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 142.466288][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.512906][ T5213] loop4: detected capacity change from 0 to 128 [ 142.541414][ T5213] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.557188][ T27] usb 1-1: config 0 descriptor?? [ 142.596290][ T5213] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.690329][ T5211] loop3: detected capacity change from 0 to 1024 [ 142.719430][ T4357] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.812654][ T5205] loop0: detected capacity change from 0 to 2048 [ 142.935014][ T5215] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.225915][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 143.236147][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 143.246257][ T4318] (null): radio-mr800 - initialization failed [ 143.271955][ T4318] radio-mr800: probe of 3-1:3.171 failed with error -22 [ 143.287080][ T27] usb 1-1: USB disconnect, device number 8 [ 143.304871][ T4318] usbhid 3-1:3.171: couldn't find an input interrupt endpoint [ 143.359861][ T4318] usb 3-1: USB disconnect, device number 6 [ 143.417845][ T5219] device syzkaller0 entered promiscuous mode [ 143.449193][ T5219] FAULT_INJECTION: forcing a failure. [ 143.449193][ T5219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.486203][ T5219] CPU: 1 PID: 5219 Comm: syz.3.201 Not tainted syzkaller #0 [ 143.493652][ T5219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.503758][ T5219] Call Trace: [ 143.507059][ T5219] [ 143.510015][ T5219] dump_stack_lvl+0x188/0x24e [ 143.514742][ T5219] ? show_regs_print_info+0x12/0x12 [ 143.519966][ T5219] ? load_image+0x400/0x400 [ 143.524506][ T5219] ? __lock_acquire+0x7d10/0x7d10 [ 143.529589][ T5219] should_fail_ex+0x399/0x4d0 [ 143.534306][ T5219] _copy_from_user+0x2c/0x170 [ 143.539025][ T5219] __copy_msghdr+0x3b7/0x580 [ 143.543651][ T5219] ___sys_sendmsg+0x210/0x360 [ 143.548365][ T5219] ? __sys_sendmsg+0x290/0x290 [ 143.553170][ T5219] ? __lock_acquire+0x7d10/0x7d10 [ 143.558254][ T5219] __se_sys_sendmsg+0x1bb/0x2a0 [ 143.563135][ T5219] ? __x64_sys_sendmsg+0x80/0x80 [ 143.568118][ T5219] ? lockdep_hardirqs_on+0x94/0x140 [ 143.573359][ T5219] do_syscall_64+0x4c/0xa0 [ 143.577805][ T5219] ? clear_bhb_loop+0x60/0xb0 [ 143.582516][ T5219] ? clear_bhb_loop+0x60/0xb0 [ 143.587228][ T5219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.593157][ T5219] RIP: 0033:0x7ffa3219ce59 [ 143.597601][ T5219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.617237][ T5219] RSP: 002b:00007ffa32f99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.625683][ T5219] RAX: ffffffffffffffda RBX: 00007ffa32415fa0 RCX: 00007ffa3219ce59 [ 143.633678][ T5219] RDX: 0000000000000857 RSI: 0000200000000140 RDI: 0000000000000007 [ 143.641677][ T5219] RBP: 00007ffa32f99090 R08: 0000000000000000 R09: 0000000000000000 [ 143.649672][ T5219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.657673][ T5219] R13: 00007ffa32416038 R14: 00007ffa32415fa0 R15: 00007ffd73263238 [ 143.665683][ T5219] [ 143.694873][ T5217] device syzkaller0 entered promiscuous mode [ 144.077976][ T5235] loop3: detected capacity change from 0 to 16 [ 144.084620][ T5235] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 144.092555][ T5235] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 144.103088][ T5235] erofs: (device loop3): erofs_init_device: empty device tag @ pos 0 [ 144.159416][ T5232] loop4: detected capacity change from 0 to 4096 [ 144.198539][ T5240] rdma_rxe: rxe_register_device failed with error -23 [ 144.235130][ T5240] rdma_rxe: failed to add lo [ 144.326015][ T5244] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.835739][ T5235] orangefs_mount: mount request failed with -4 [ 144.871411][ T4567] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 145.076489][ T4567] usb 5-1: Using ep0 maxpacket: 16 [ 145.083551][ T4567] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 145.113657][ T4567] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 145.148130][ T4567] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254 [ 145.206626][ T4567] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.236650][ T4567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.244724][ T4567] usb 5-1: SerialNumber: syz [ 145.835473][ T5253] loop3: detected capacity change from 0 to 32768 [ 145.902867][ T5253] XFS (loop3): Mounting V5 Filesystem [ 145.973997][ T5253] XFS (loop3): Ending clean mount [ 146.252033][ T4272] XFS (loop3): Unmounting Filesystem [ 146.665635][ T5266] FAULT_INJECTION: forcing a failure. [ 146.665635][ T5266] name failslab, interval 1, probability 0, space 0, times 0 [ 146.684051][ T5266] CPU: 0 PID: 5266 Comm: syz.3.213 Not tainted syzkaller #0 [ 146.691378][ T5266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.701465][ T5266] Call Trace: [ 146.704785][ T5266] [ 146.707743][ T5266] dump_stack_lvl+0x188/0x24e [ 146.712449][ T5266] ? show_regs_print_info+0x12/0x12 [ 146.717679][ T5266] ? load_image+0x400/0x400 [ 146.722227][ T5266] ? __might_sleep+0xd0/0xd0 [ 146.726863][ T5266] ? __lock_acquire+0x7d10/0x7d10 [ 146.731929][ T5266] should_fail_ex+0x399/0x4d0 [ 146.736641][ T5266] should_failslab+0x5/0x20 [ 146.741174][ T5266] slab_pre_alloc_hook+0x59/0x310 [ 146.746270][ T5266] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 146.752037][ T5266] __kmem_cache_alloc_node+0x4f/0x260 [ 146.757464][ T5266] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 146.763249][ T5266] __kmalloc+0xa0/0x240 [ 146.767459][ T5266] tomoyo_realpath_from_path+0xdf/0x5d0 [ 146.773055][ T5266] ? tomoyo_path_number_perm+0x205/0x650 [ 146.778722][ T5266] tomoyo_path_number_perm+0x22f/0x650 [ 146.784223][ T5266] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 146.789708][ T5266] ? ksys_write+0x1c0/0x250 [ 146.794241][ T5266] ? common_file_perm+0x171/0x1c0 [ 146.799336][ T5266] ? __fget_files+0x28/0x4b0 [ 146.803957][ T5266] ? __fget_files+0x28/0x4b0 [ 146.808594][ T5266] security_file_ioctl+0x6c/0xa0 [ 146.813572][ T5266] __se_sys_ioctl+0x48/0x170 [ 146.818200][ T5266] do_syscall_64+0x4c/0xa0 [ 146.822651][ T5266] ? clear_bhb_loop+0x60/0xb0 [ 146.827358][ T5266] ? clear_bhb_loop+0x60/0xb0 [ 146.832107][ T5266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.838045][ T5266] RIP: 0033:0x7ffa3219ce59 [ 146.842494][ T5266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.862120][ T5266] RSP: 002b:00007ffa32f99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.870559][ T5266] RAX: ffffffffffffffda RBX: 00007ffa32415fa0 RCX: 00007ffa3219ce59 [ 146.878551][ T5266] RDX: 00002000000000c0 RSI: 0000000000004b46 RDI: 0000000000000003 [ 146.886545][ T5266] RBP: 00007ffa32f99090 R08: 0000000000000000 R09: 0000000000000000 [ 146.894543][ T5266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.902528][ T5266] R13: 00007ffa32416038 R14: 00007ffa32415fa0 R15: 00007ffd73263238 [ 146.910524][ T5266] [ 146.916102][ T5266] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.065116][ T5268] loop0: detected capacity change from 0 to 4096 [ 147.126377][ T5271] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.501823][ T5268] syz.0.214: attempt to access beyond end of device [ 147.501823][ T5268] loop0: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 147.627520][ T5276] netlink: 44 bytes leftover after parsing attributes in process `syz.3.215'. [ 147.728928][ T5268] syz.0.214: attempt to access beyond end of device [ 147.728928][ T5268] loop0: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 147.775069][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 147.775083][ T26] audit: type=1800 audit(1780898347.126:20): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.214" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 148.579305][ T4577] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 148.770100][ T4577] usb 1-1: Using ep0 maxpacket: 32 [ 148.790394][ T4577] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.801418][ T4577] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.811626][ T4577] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 148.820962][ T4577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.840441][ T4577] usb 1-1: config 0 descriptor?? [ 149.156767][ T5283] device syzkaller0 entered promiscuous mode [ 149.237960][ T4567] usb 5-1: USB disconnect, device number 10 [ 150.045948][ T5294] loop2: detected capacity change from 0 to 16 [ 150.054896][ T5293] loop4: detected capacity change from 0 to 1024 [ 150.096636][ T5294] erofs: (device loop2): mounted with root inode @ nid 36. [ 150.137061][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 150.289667][ T5298] loop3: detected capacity change from 0 to 16 [ 150.297390][ T5298] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 150.305282][ T5298] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 150.317104][ T5298] erofs: (device loop3): erofs_init_device: empty device tag @ pos 0 [ 150.338377][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.359049][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.381002][ T14] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 150.402737][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.423863][ T5300] rdma_rxe: rxe_register_device failed with error -23 [ 150.433288][ T5300] rdma_rxe: failed to add lo [ 150.440716][ T14] usb 2-1: config 0 descriptor?? [ 150.626533][ T4567] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 150.703296][ T5288] loop1: detected capacity change from 0 to 2048 [ 150.780502][ T5301] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.816643][ T4567] usb 5-1: Using ep0 maxpacket: 8 [ 150.825378][ T4567] usb 5-1: config index 0 descriptor too short (expected 1821, got 853) [ 150.855467][ T4567] usb 5-1: config 0 has an invalid interface number: 103 but max is 2 [ 150.882556][ T4567] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.912169][ T4567] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 150.943976][ T4567] usb 5-1: config 0 has no interface number 0 [ 150.954098][ T4567] usb 5-1: config 0 interface 103 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 150.969571][ T4567] usb 5-1: config 0 interface 103 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.985098][ T4567] usb 5-1: config 0 interface 103 has no altsetting 0 [ 151.005206][ T4567] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 151.023364][ T4567] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.036567][ T4567] usb 5-1: Product: syz [ 151.057531][ T5298] orangefs_mount: mount request failed with -4 [ 151.112958][ T4567] usb 5-1: Manufacturer: syz [ 151.132168][ T4567] usb 5-1: SerialNumber: syz [ 151.161336][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 151.169066][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 151.183034][ T4567] usb 5-1: config 0 descriptor?? [ 151.220652][ T14] usb 2-1: USB disconnect, device number 4 [ 151.252469][ T5303] device syzkaller0 entered promiscuous mode [ 152.449876][ T4577] usbhid 1-1:0.0: can't add hid device: -71 [ 152.461778][ T4577] usbhid: probe of 1-1:0.0 failed with error -71 [ 152.480726][ T4577] usb 1-1: USB disconnect, device number 9 [ 152.622400][ T5313] device syzkaller0 entered promiscuous mode [ 152.653298][ T5315] device syzkaller0 entered promiscuous mode [ 152.675204][ T4567] usb 5-1: USB disconnect, device number 11 [ 152.700814][ T5315] loop1: detected capacity change from 0 to 256 [ 152.765533][ T5316] tipc: Started in network mode [ 152.775113][ T5316] tipc: Node identity 121c99624432, cluster identity 4711 [ 152.792693][ T5315] FAT-fs (loop1): Directory bread(block 64) failed [ 152.801502][ T5316] tipc: Enabled bearer , priority 0 [ 152.813165][ T5315] FAT-fs (loop1): Directory bread(block 65) failed [ 152.821292][ T5315] FAT-fs (loop1): Directory bread(block 66) failed [ 152.846086][ T5315] FAT-fs (loop1): Directory bread(block 67) failed [ 152.856153][ T5302] tipc: Resetting bearer [ 152.896384][ T5315] FAT-fs (loop1): Directory bread(block 68) failed [ 152.945101][ T5302] tipc: Disabling bearer [ 152.956208][ T5315] FAT-fs (loop1): Directory bread(block 69) failed [ 152.967827][ T5315] FAT-fs (loop1): Directory bread(block 70) failed [ 152.974451][ T5315] FAT-fs (loop1): Directory bread(block 71) failed [ 152.981807][ T5315] FAT-fs (loop1): Directory bread(block 72) failed [ 152.988753][ T5315] FAT-fs (loop1): Directory bread(block 73) failed [ 154.385055][ T4328] hfsplus: b-tree write err: -5, ino 8 [ 154.406257][ T5327] FAULT_INJECTION: forcing a failure. [ 154.406257][ T5327] name failslab, interval 1, probability 0, space 0, times 0 [ 154.446644][ T5327] CPU: 0 PID: 5327 Comm: syz.0.230 Not tainted syzkaller #0 [ 154.453996][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.464126][ T5327] Call Trace: [ 154.467432][ T5327] [ 154.470440][ T5327] dump_stack_lvl+0x188/0x24e [ 154.475165][ T5327] ? show_regs_print_info+0x12/0x12 [ 154.480426][ T5327] ? load_image+0x400/0x400 [ 154.485008][ T5327] ? __might_sleep+0xd0/0xd0 [ 154.489635][ T5327] ? __lock_acquire+0x7d10/0x7d10 [ 154.494701][ T5327] should_fail_ex+0x399/0x4d0 [ 154.499415][ T5327] should_failslab+0x5/0x20 [ 154.503941][ T5327] slab_pre_alloc_hook+0x59/0x310 [ 154.509004][ T5327] ? prepend_path+0xa68/0xc20 [ 154.513722][ T5327] ? tomoyo_encode+0x27e/0x540 [ 154.518538][ T5327] __kmem_cache_alloc_node+0x4f/0x260 [ 154.523962][ T5327] ? tomoyo_encode+0x27e/0x540 [ 154.528767][ T5327] __kmalloc+0xa0/0x240 [ 154.532973][ T5327] tomoyo_encode+0x27e/0x540 [ 154.537610][ T5327] tomoyo_realpath_from_path+0x58e/0x5d0 [ 154.543304][ T5327] ? tomoyo_path_number_perm+0x205/0x650 [ 154.548966][ T5327] tomoyo_path_number_perm+0x22f/0x650 [ 154.554456][ T5327] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 154.559961][ T5327] ? ksys_write+0x1c0/0x250 [ 154.564505][ T5327] ? common_file_perm+0x171/0x1c0 [ 154.569601][ T5327] ? __fget_files+0x28/0x4b0 [ 154.574229][ T5327] ? __fget_files+0x28/0x4b0 [ 154.578874][ T5327] security_file_ioctl+0x6c/0xa0 [ 154.583841][ T5327] __se_sys_ioctl+0x48/0x170 [ 154.588458][ T5327] do_syscall_64+0x4c/0xa0 [ 154.592887][ T5327] ? clear_bhb_loop+0x60/0xb0 [ 154.597584][ T5327] ? clear_bhb_loop+0x60/0xb0 [ 154.602289][ T5327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.608215][ T5327] RIP: 0033:0x7fa6afd9ce59 [ 154.612658][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.632309][ T5327] RSP: 002b:00007fa6b0b81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.640767][ T5327] RAX: ffffffffffffffda RBX: 00007fa6b0015fa0 RCX: 00007fa6afd9ce59 [ 154.648785][ T5327] RDX: 00002000000000c0 RSI: 00000000c034564b RDI: 0000000000000003 [ 154.656825][ T5327] RBP: 00007fa6b0b81090 R08: 0000000000000000 R09: 0000000000000000 [ 154.664806][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.672790][ T5327] R13: 00007fa6b0016038 R14: 00007fa6b0015fa0 R15: 00007fff005b7f38 [ 154.680787][ T5327] [ 154.683831][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.797046][ T5327] ERROR: Out of memory at tomoyo_realpath_from_path. [ 155.338948][ T5387] FAULT_INJECTION: forcing a failure. [ 155.338948][ T5387] name failslab, interval 1, probability 0, space 0, times 0 [ 155.437785][ T5387] CPU: 0 PID: 5387 Comm: syz.4.232 Not tainted syzkaller #0 [ 155.445266][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.455353][ T5387] Call Trace: [ 155.458659][ T5387] [ 155.461619][ T5387] dump_stack_lvl+0x188/0x24e [ 155.466335][ T5387] ? show_regs_print_info+0x12/0x12 [ 155.471565][ T5387] ? load_image+0x400/0x400 [ 155.476121][ T5387] ? __might_sleep+0xd0/0xd0 [ 155.480755][ T5387] ? __lock_acquire+0x7d10/0x7d10 [ 155.485808][ T5387] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 155.491477][ T5387] should_fail_ex+0x399/0x4d0 [ 155.496185][ T5387] should_failslab+0x5/0x20 [ 155.500716][ T5387] slab_pre_alloc_hook+0x59/0x310 [ 155.505773][ T5387] ? __se_sys_memfd_create+0xee/0x340 [ 155.511185][ T5387] __kmem_cache_alloc_node+0x4f/0x260 [ 155.516587][ T5387] ? __se_sys_memfd_create+0xee/0x340 [ 155.521984][ T5387] __kmalloc+0xa0/0x240 [ 155.526182][ T5387] __se_sys_memfd_create+0xee/0x340 [ 155.531412][ T5387] do_syscall_64+0x4c/0xa0 [ 155.535858][ T5387] ? clear_bhb_loop+0x60/0xb0 [ 155.540570][ T5387] ? clear_bhb_loop+0x60/0xb0 [ 155.545299][ T5387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.551296][ T5387] RIP: 0033:0x7fede939ce59 [ 155.555739][ T5387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.575373][ T5387] RSP: 002b:00007fedea171e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 155.583838][ T5387] RAX: ffffffffffffffda RBX: 0000000000000a07 RCX: 00007fede939ce59 [ 155.591835][ T5387] RDX: 00007fedea171ee0 RSI: 0000000000000000 RDI: 00007fede9432f4f [ 155.599831][ T5387] RBP: 0000200000000b00 R08: 00000000ffffffff R09: 0000000000000000 [ 155.607828][ T5387] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 155.615824][ T5387] R13: 00007fedea171ee0 R14: 00007fedea171ea0 R15: 0000200000000180 [ 155.623829][ T5387] [ 155.626921][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.776962][ T5389] FAULT_INJECTION: forcing a failure. [ 155.776962][ T5389] name failslab, interval 1, probability 0, space 0, times 0 [ 155.868512][ T5389] CPU: 0 PID: 5389 Comm: syz.1.234 Not tainted syzkaller #0 [ 155.875860][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.885927][ T5389] Call Trace: [ 155.889202][ T5389] [ 155.892129][ T5389] dump_stack_lvl+0x188/0x24e [ 155.896810][ T5389] ? show_regs_print_info+0x12/0x12 [ 155.902009][ T5389] ? load_image+0x400/0x400 [ 155.906517][ T5389] ? __might_sleep+0xd0/0xd0 [ 155.911119][ T5389] ? __lock_acquire+0x7d10/0x7d10 [ 155.916144][ T5389] should_fail_ex+0x399/0x4d0 [ 155.920838][ T5389] should_failslab+0x5/0x20 [ 155.925334][ T5389] slab_pre_alloc_hook+0x59/0x310 [ 155.930360][ T5389] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 155.936086][ T5389] __kmem_cache_alloc_node+0x4f/0x260 [ 155.941465][ T5389] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 155.947194][ T5389] __kmalloc+0xa0/0x240 [ 155.951355][ T5389] tomoyo_realpath_from_path+0xdf/0x5d0 [ 155.956907][ T5389] ? tomoyo_path_number_perm+0x205/0x650 [ 155.962538][ T5389] tomoyo_path_number_perm+0x22f/0x650 [ 155.968017][ T5389] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 155.973477][ T5389] ? ksys_write+0x1c0/0x250 [ 155.978005][ T5389] ? common_file_perm+0x171/0x1c0 [ 155.983083][ T5389] ? __fget_files+0x28/0x4b0 [ 155.987698][ T5389] ? __fget_files+0x28/0x4b0 [ 155.992316][ T5389] security_file_ioctl+0x6c/0xa0 [ 155.997256][ T5389] __se_sys_ioctl+0x48/0x170 [ 156.001849][ T5389] do_syscall_64+0x4c/0xa0 [ 156.006268][ T5389] ? clear_bhb_loop+0x60/0xb0 [ 156.010949][ T5389] ? clear_bhb_loop+0x60/0xb0 [ 156.015632][ T5389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.021533][ T5389] RIP: 0033:0x7fdc1459ce59 [ 156.025943][ T5389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.045548][ T5389] RSP: 002b:00007fdc15471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.053965][ T5389] RAX: ffffffffffffffda RBX: 00007fdc14815fa0 RCX: 00007fdc1459ce59 [ 156.061936][ T5389] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000003 [ 156.069902][ T5389] RBP: 00007fdc15471090 R08: 0000000000000000 R09: 0000000000000000 [ 156.077872][ T5389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.085860][ T5389] R13: 00007fdc14816038 R14: 00007fdc14815fa0 R15: 00007fff165c07f8 [ 156.093835][ T5389] [ 156.096861][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.137193][ T5391] loop0: detected capacity change from 0 to 16 [ 156.143838][ T5391] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 156.151724][ T5391] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 156.165858][ T5391] erofs: (device loop0): erofs_init_device: empty device tag @ pos 0 [ 156.226662][ T5389] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.271164][ T4350] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 156.334472][ T5394] rdma_rxe: rxe_register_device failed with error -23 [ 156.369229][ T5394] rdma_rxe: failed to add lo [ 156.696530][ T4567] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 156.704994][ T5391] orangefs_mount: mount request failed with -4 [ 156.756790][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.822204][ T5405] device syzkaller0 entered promiscuous mode [ 156.828376][ T126] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.916579][ T4567] usb 3-1: Using ep0 maxpacket: 16 [ 156.925873][ T4567] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.940971][ T4567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.953070][ T4567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.968259][ T4567] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 156.976963][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 156.984472][ T4567] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.000809][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.010880][ T4567] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 157.024774][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.035287][ T4567] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.035407][ T14] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 157.043880][ T4577] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 157.054623][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.071101][ T4567] usb 3-1: Manufacturer: syz [ 157.071982][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.084322][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.088938][ T4567] usb 3-1: config 0 descriptor?? [ 157.099209][ T126] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 157.109394][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.118224][ T14] usb 2-1: config 0 descriptor?? [ 157.131244][ T126] usb 4-1: config 0 descriptor?? [ 157.256590][ T4577] usb 5-1: Using ep0 maxpacket: 32 [ 157.274884][ T4577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.291715][ T4577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.301980][ T4577] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 157.321207][ T4577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.364929][ T4577] usb 5-1: config 0 descriptor?? [ 157.404694][ T5401] loop3: detected capacity change from 0 to 2048 [ 157.507266][ T5409] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.617124][ T4567] rc_core: IR keymap rc-hauppauge not found [ 157.623107][ T4567] Registered IR keymap rc-empty [ 157.631028][ T4567] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.673538][ T4567] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.170236][ T4567] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 158.540218][ T4567] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 158.573168][ T4567] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.606763][ T4567] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.619195][ T126] usbhid 4-1:0.0: can't add hid device: -71 [ 158.629550][ T126] usbhid: probe of 4-1:0.0 failed with error -71 [ 158.641470][ T4567] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.654686][ T126] usb 4-1: USB disconnect, device number 8 [ 158.706701][ T4567] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.746805][ T4567] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.792099][ T4567] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.830201][ T4567] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.869499][ T4567] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.908132][ T4567] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.946517][ T4567] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.023368][ T4567] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 159.035210][ T4567] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 159.053350][ T4567] usb 3-1: USB disconnect, device number 7 [ 159.546591][ T5000] ================================================================== [ 159.554730][ T5000] BUG: KASAN: use-after-free in __lock_acquire+0x106/0x7d10 [ 159.562074][ T5000] Read of size 8 at addr ffff888073f70bb0 by task gfs2_quotad/5000 [ 159.569996][ T5000] [ 159.572346][ T5000] CPU: 1 PID: 5000 Comm: gfs2_quotad Not tainted syzkaller #0 [ 159.579835][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.589917][ T5000] Call Trace: [ 159.593223][ T5000] [ 159.596174][ T5000] dump_stack_lvl+0x188/0x24e [ 159.600887][ T5000] ? __lock_acquire+0x7d10/0x7d10 [ 159.605949][ T5000] ? show_regs_print_info+0x12/0x12 [ 159.611176][ T5000] ? load_image+0x400/0x400 [ 159.615714][ T5000] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 159.621223][ T5000] ? __virt_addr_valid+0x188/0x540 [ 159.626373][ T5000] ? __virt_addr_valid+0x465/0x540 [ 159.631518][ T5000] ? __lock_acquire+0x106/0x7d10 [ 159.636495][ T5000] print_report+0xa8/0x210 [ 159.640953][ T5000] kasan_report+0x10b/0x140 [ 159.645499][ T5000] ? __lock_acquire+0x106/0x7d10 [ 159.650486][ T5000] __lock_acquire+0x106/0x7d10 [ 159.655284][ T5000] ? verify_lock_unused+0x140/0x140 [ 159.660535][ T5000] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 159.666558][ T5000] ? lock_chain_count+0x20/0x20 [ 159.671442][ T5000] ? __free_object+0x218/0xa70 [ 159.676244][ T5000] ? lockdep_hardirqs_on+0x94/0x140 [ 159.681471][ T5000] ? verify_lock_unused+0x140/0x140 [ 159.686710][ T5000] ? alloc_object+0x640/0x640 [ 159.691533][ T5000] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 159.697558][ T5000] ? lock_chain_count+0x20/0x20 [ 159.702454][ T5000] lock_acquire+0x1bb/0x4a0 [ 159.706993][ T5000] ? finish_wait+0xb8/0x1d0 [ 159.711626][ T5000] ? timer_delete_sync+0x20/0x20 [ 159.716586][ T5000] ? __mod_timer+0x91e/0xd00 [ 159.721207][ T5000] ? read_lock_is_recursive+0x10/0x10 [ 159.726629][ T5000] _raw_spin_lock_irqsave+0xb0/0x100 [ 159.731952][ T5000] ? finish_wait+0xb8/0x1d0 [ 159.737018][ T5000] ? _raw_spin_lock+0x40/0x40 [ 159.741748][ T5000] ? update_process_times+0x1b0/0x1b0 [ 159.747172][ T5000] finish_wait+0xb8/0x1d0 [ 159.751554][ T5000] gfs2_quotad+0x4f3/0x680 [ 159.756012][ T5000] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 159.761160][ T5000] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 159.767095][ T5000] ? wake_bit_function+0x200/0x200 [ 159.772248][ T5000] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 159.778183][ T5000] ? __kthread_parkme+0x162/0x1c0 [ 159.783250][ T5000] kthread+0x29d/0x330 [ 159.787361][ T5000] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 159.792534][ T5000] ? kthread_blkcg+0xd0/0xd0 [ 159.797153][ T5000] ret_from_fork+0x1f/0x30 [ 159.801614][ T5000] [ 159.804664][ T5000] [ 159.807039][ T5000] Allocated by task 5394: [ 159.811411][ T5000] kasan_set_track+0x4b/0x70 [ 159.816042][ T5000] __kasan_kmalloc+0x8e/0xa0 [ 159.820666][ T5000] __kmalloc+0xb0/0x240 [ 159.824854][ T5000] _ib_alloc_device+0x39/0x5c0 [ 159.829655][ T5000] rxe_net_add+0x1f/0xe0 [ 159.833942][ T5000] rxe_newlink+0x6b/0xf0 [ 159.838213][ T5000] nldev_newlink+0x58f/0x610 [ 159.842832][ T5000] rdma_nl_rcv+0x6cd/0x9f0 [ 159.847299][ T5000] netlink_unicast+0x74d/0x8d0 [ 159.852092][ T5000] netlink_sendmsg+0x8ad/0xbd0 [ 159.856970][ T5000] ____sys_sendmsg+0x5be/0x970 [ 159.861790][ T5000] ___sys_sendmsg+0x2a2/0x360 [ 159.866505][ T5000] __se_sys_sendmsg+0x1bb/0x2a0 [ 159.871380][ T5000] do_syscall_64+0x4c/0xa0 [ 159.875821][ T5000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.881794][ T5000] [ 159.884137][ T5000] Freed by task 126: [ 159.888047][ T5000] kasan_set_track+0x4b/0x70 [ 159.892672][ T5000] kasan_save_free_info+0x2d/0x50 [ 159.897777][ T5000] ____kasan_slab_free+0x126/0x1e0 [ 159.902933][ T5000] slab_free_freelist_hook+0x131/0x1a0 [ 159.908425][ T5000] kmem_cache_free_bulk+0x348/0x460 [ 159.913658][ T5000] kfree_rcu_work+0x33f/0x890 [ 159.918360][ T5000] process_one_work+0x8a2/0x1160 [ 159.923328][ T5000] worker_thread+0xaa2/0x1270 [ 159.928031][ T5000] kthread+0x29d/0x330 [ 159.932142][ T5000] ret_from_fork+0x1f/0x30 [ 159.936598][ T5000] [ 159.938944][ T5000] Last potentially related work creation: [ 159.944673][ T5000] kasan_save_stack+0x3a/0x60 [ 159.949395][ T5000] __kasan_record_aux_stack+0xb2/0xc0 [ 159.954853][ T5000] kvfree_call_rcu+0x103/0x870 [ 159.959669][ T5000] device_release+0x92/0x1c0 [ 159.964300][ T5000] kobject_put+0x21d/0x460 [ 159.968761][ T5000] rxe_net_add+0x97/0xe0 [ 159.973043][ T5000] rxe_newlink+0x6b/0xf0 [ 159.977308][ T5000] nldev_newlink+0x58f/0x610 [ 159.981924][ T5000] rdma_nl_rcv+0x6cd/0x9f0 [ 159.986377][ T5000] netlink_unicast+0x74d/0x8d0 [ 159.991171][ T5000] netlink_sendmsg+0x8ad/0xbd0 [ 159.995966][ T5000] ____sys_sendmsg+0x5be/0x970 [ 160.000772][ T5000] ___sys_sendmsg+0x2a2/0x360 [ 160.005471][ T5000] __se_sys_sendmsg+0x1bb/0x2a0 [ 160.010346][ T5000] do_syscall_64+0x4c/0xa0 [ 160.014786][ T5000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.020711][ T5000] [ 160.023066][ T5000] The buggy address belongs to the object at ffff888073f70000 [ 160.023066][ T5000] which belongs to the cache kmalloc-8k of size 8192 [ 160.037141][ T5000] The buggy address is located 2992 bytes inside of [ 160.037141][ T5000] 8192-byte region [ffff888073f70000, ffff888073f72000) [ 160.050623][ T5000] [ 160.052978][ T5000] The buggy address belongs to the physical page: [ 160.059447][ T5000] page:ffffea0001cfdc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73f70 [ 160.069633][ T5000] head:ffffea0001cfdc00 order:3 compound_mapcount:0 compound_pincount:0 [ 160.077983][ T5000] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 160.086019][ T5000] raw: 00fff00000010200 ffffea0001e48e00 dead000000000006 ffff888017442280 [ 160.094637][ T5000] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 160.103243][ T5000] page dumped because: kasan: bad access detected [ 160.109672][ T5000] page_owner tracks the page as allocated [ 160.115406][ T5000] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4016, tgid 4016 (S50sshd), ts 48410257458, free_ts 48366211732 [ 160.135580][ T5000] post_alloc_hook+0x173/0x1a0 [ 160.140382][ T5000] get_page_from_freelist+0x1a1e/0x1ab0 [ 160.145974][ T5000] __alloc_pages+0x1ec/0x4f0 [ 160.150600][ T5000] alloc_slab_page+0x5d/0x160 [ 160.155308][ T5000] new_slab+0x87/0x2c0 [ 160.159424][ T5000] ___slab_alloc+0xbc6/0x1240 [ 160.164181][ T5000] __kmem_cache_alloc_node+0x1a0/0x260 [ 160.169673][ T5000] kmalloc_trace+0x26/0xe0 [ 160.174133][ T5000] tomoyo_init_log+0x1090/0x1f80 [ 160.179101][ T5000] tomoyo_supervisor+0x35f/0x11a0 [ 160.184185][ T5000] tomoyo_env_perm+0x14e/0x1f0 [ 160.188997][ T5000] tomoyo_find_next_domain+0x1578/0x1a50 [ 160.194676][ T5000] tomoyo_bprm_check_security+0x100/0x150 [ 160.200456][ T5000] security_bprm_check+0x5e/0x90 [ 160.205441][ T5000] bprm_execve+0xa50/0x17e0 [ 160.209990][ T5000] do_execveat_common+0x51b/0x6c0 [ 160.215083][ T5000] page last free stack trace: [ 160.219798][ T5000] free_unref_page_prepare+0x8b4/0x9a0 [ 160.225317][ T5000] free_unref_page+0x2e/0x3f0 [ 160.230050][ T5000] __unfreeze_partials+0x1a5/0x200 [ 160.235196][ T5000] put_cpu_partial+0x17c/0x250 [ 160.240015][ T5000] qlist_free_all+0x76/0xe0 [ 160.244561][ T5000] kasan_quarantine_reduce+0x144/0x160 [ 160.250075][ T5000] __kasan_slab_alloc+0x1e/0x80 [ 160.254977][ T5000] slab_post_alloc_hook+0x4b/0x480 [ 160.260134][ T5000] kmem_cache_alloc+0x123/0x2f0 [ 160.265025][ T5000] vm_area_dup+0x23/0x1a0 [ 160.269384][ T5000] __split_vma+0xb9/0x500 [ 160.273748][ T5000] do_mas_align_munmap+0x7b9/0x12b0 [ 160.278979][ T5000] do_mas_munmap+0x240/0x2b0 [ 160.283618][ T5000] mmap_region+0x6e0/0x1ca0 [ 160.288181][ T5000] do_mmap+0x964/0xfd0 [ 160.292284][ T5000] vm_mmap_pgoff+0x1c1/0x2d0 [ 160.296919][ T5000] [ 160.299305][ T5000] Memory state around the buggy address: [ 160.304962][ T5000] ffff888073f70a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 160.313049][ T5000] ffff888073f70b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 160.321143][ T5000] >ffff888073f70b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 160.329249][ T5000] ^ [ 160.334903][ T5000] ffff888073f70c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 160.343000][ T5000] ffff888073f70c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 160.351082][ T5000] ================================================================== [ 160.359188][ T5000] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 160.366390][ T5000] CPU: 1 PID: 5000 Comm: gfs2_quotad Not tainted syzkaller #0 [ 160.373863][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.383940][ T5000] Call Trace: [ 160.387245][ T5000] [ 160.390208][ T5000] dump_stack_lvl+0x188/0x24e [ 160.394925][ T5000] ? memcpy+0x3c/0x60 [ 160.398951][ T5000] ? show_regs_print_info+0x12/0x12 [ 160.404194][ T5000] ? load_image+0x400/0x400 [ 160.408756][ T5000] panic+0x2e5/0x730 [ 160.412704][ T5000] ? __lock_acquire+0x7d10/0x7d10 [ 160.417782][ T5000] ? bpf_jit_dump+0xd0/0xd0 [ 160.422327][ T5000] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 160.428276][ T5000] ? _raw_spin_unlock+0x40/0x40 [ 160.433172][ T5000] check_panic_on_warn+0x80/0xa0 [ 160.438156][ T5000] ? __lock_acquire+0x106/0x7d10 [ 160.443132][ T5000] end_report+0x66/0x110 [ 160.447416][ T5000] kasan_report+0x118/0x140 [ 160.451965][ T5000] ? __lock_acquire+0x106/0x7d10 [ 160.456972][ T5000] __lock_acquire+0x106/0x7d10 [ 160.461786][ T5000] ? verify_lock_unused+0x140/0x140 [ 160.467078][ T5000] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 160.473124][ T5000] ? lock_chain_count+0x20/0x20 [ 160.478004][ T5000] ? __free_object+0x218/0xa70 [ 160.482794][ T5000] ? lockdep_hardirqs_on+0x94/0x140 [ 160.488025][ T5000] ? verify_lock_unused+0x140/0x140 [ 160.493273][ T5000] ? alloc_object+0x640/0x640 [ 160.497972][ T5000] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 160.503994][ T5000] ? lock_chain_count+0x20/0x20 [ 160.508910][ T5000] lock_acquire+0x1bb/0x4a0 [ 160.513446][ T5000] ? finish_wait+0xb8/0x1d0 [ 160.518066][ T5000] ? timer_delete_sync+0x20/0x20 [ 160.523047][ T5000] ? __mod_timer+0x91e/0xd00 [ 160.527664][ T5000] ? read_lock_is_recursive+0x10/0x10 [ 160.533073][ T5000] _raw_spin_lock_irqsave+0xb0/0x100 [ 160.538744][ T5000] ? finish_wait+0xb8/0x1d0 [ 160.543282][ T5000] ? _raw_spin_lock+0x40/0x40 [ 160.547990][ T5000] ? update_process_times+0x1b0/0x1b0 [ 160.553401][ T5000] finish_wait+0xb8/0x1d0 [ 160.557759][ T5000] gfs2_quotad+0x4f3/0x680 [ 160.562211][ T5000] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 160.567379][ T5000] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 160.573321][ T5000] ? wake_bit_function+0x200/0x200 [ 160.578466][ T5000] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 160.584397][ T5000] ? __kthread_parkme+0x162/0x1c0 [ 160.589459][ T5000] kthread+0x29d/0x330 [ 160.593554][ T5000] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 160.598710][ T5000] ? kthread_blkcg+0xd0/0xd0 [ 160.603342][ T5000] ret_from_fork+0x1f/0x30 [ 160.607805][ T5000] [ 160.611423][ T5000] Kernel Offset: disabled [ 160.615761][ T5000] Rebooting in 86400 seconds..