last executing test programs: 9m59.524501272s ago: executing program 1 (id=369): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m59.289873662s ago: executing program 1 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./bus\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = open$dir(0x0, 0x418000, 0x88) name_to_handle_at(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000080000000006000001000000000c6d71d0c10000033e00000b860000080000000080"], &(0x7f0000000240), 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'syz_tun\x00', @random="0163014030d9"}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 9m58.17267139s ago: executing program 1 (id=372): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20044815}, 0x40000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 9m56.054816131s ago: executing program 1 (id=376): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x2c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)={r7, 0x2, 0x10, 0x9, 0xfffffffffffffffe}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000300)={r7, 0x27b, 0x3d, "78e7dffb08833685be2d784845d8908ee8360c603dbd3aab03790c0c91165de5f31e4bb4f7fe1a31c52be6827658fc1a74b2814b2279331beaf3c69506"}, 0x45) r8 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 9m53.499460151s ago: executing program 1 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, 0x140a, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x7}]}, 0x18}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rtc(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x2c) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000300)={r9, 0x27b, 0x3d, "78e7dffb08833685be2d784845d8908ee8360c603dbd3aab03790c0c91165de5f31e4bb4f7fe1a31c52be6827658fc1a74b2814b2279331beaf3c69506"}, 0x45) r10 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 9m51.691989809s ago: executing program 1 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, 0x140a, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x7}]}, 0x18}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x2c) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000300)={r9, 0x27b, 0x3d, "78e7dffb08833685be2d784845d8908ee8360c603dbd3aab03790c0c91165de5f31e4bb4f7fe1a31c52be6827658fc1a74b2814b2279331beaf3c69506"}, 0x45) r10 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 9m36.244299113s ago: executing program 32 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, 0x140a, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x7}]}, 0x18}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x2c) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000300)={r9, 0x27b, 0x3d, "78e7dffb08833685be2d784845d8908ee8360c603dbd3aab03790c0c91165de5f31e4bb4f7fe1a31c52be6827658fc1a74b2814b2279331beaf3c69506"}, 0x45) r10 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 4m47.669314371s ago: executing program 3 (id=928): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000001600010a000000e65d"], 0x78}}, 0x24000814) syz_mount_image$squashfs(&(0x7f000001f880), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x1, 0x18f, &(0x7f000001f8c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg$unix(r5, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000100)="888bc541a4239c581ce86dc98d9d63f805f3c8fa64d314", 0x17}], 0x1}, 0x48043) 4m45.259680284s ago: executing program 3 (id=932): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3800204, &(0x7f0000003240)=ANY=[], 0x2, 0x33c, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) close(0xffffffffffffffff) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000a40)=""/39, 0x27) getdents64(r0, 0xfffffffffffffffe, 0x29) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) setsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000)=0x7, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x4000, r3}, 0x18) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xfffffffffffffd78, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 4m41.459838997s ago: executing program 3 (id=938): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000007, 0x11, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) syz_io_uring_setup(0x2b0d, &(0x7f0000019580)={0x0, 0x4, 0x1, 0x3}, &(0x7f0000000200), &(0x7f0000ffe000)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24040090) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r7, &(0x7f0000001280), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r8, &(0x7f0000000580)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) r9 = socket(0x2, 0x80805, 0xfffffffc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000004c80)={0x0, 0xf3}, &(0x7f0000004d40)=0x8) 4m41.111096013s ago: executing program 3 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f61e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9064d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 4m40.732471679s ago: executing program 3 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, 0x140a, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x7}]}, 0x18}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$rtc(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$RTC_PIE_ON(r6, 0x7005) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x2c) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000300)={r10, 0x27b, 0x3d, "78e7dffb08833685be2d784845d8908ee8360c603dbd3aab03790c0c91165de5f31e4bb4f7fe1a31c52be6827658fc1a74b2814b2279331beaf3c69506"}, 0x45) r11 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 4m38.740671314s ago: executing program 3 (id=943): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2c020400) recvmmsg(r1, &(0x7f0000000380)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)=""/213, 0xd5}, {&(0x7f0000000400)=""/175, 0xaf}], 0x2, &(0x7f00000001c0)=""/53, 0x35}, 0xfffffff9}], 0x1, 0x43, &(0x7f00000004c0)={0x0, 0x3938700}) socket$inet6_mptcp(0xa, 0x1, 0x106) fsmount(r2, 0x0, 0x0) r3 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_emit_vhci(&(0x7f0000004480)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000140)={r9, 0xc, 0xa, 0x78, 0x5, 0xb16}, 0x14) r10 = accept4(r5, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r10) 4m23.235150871s ago: executing program 33 (id=943): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2c020400) recvmmsg(r1, &(0x7f0000000380)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)=""/213, 0xd5}, {&(0x7f0000000400)=""/175, 0xaf}], 0x2, &(0x7f00000001c0)=""/53, 0x35}, 0xfffffff9}], 0x1, 0x43, &(0x7f00000004c0)={0x0, 0x3938700}) socket$inet6_mptcp(0xa, 0x1, 0x106) fsmount(r2, 0x0, 0x0) r3 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_emit_vhci(&(0x7f0000004480)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000140)={r9, 0xc, 0xa, 0x78, 0x5, 0xb16}, 0x14) r10 = accept4(r5, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r10) 3m31.096042563s ago: executing program 0 (id=1083): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="24f15c686864a2a39153f3b5", 0xc, 0xc094, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@deltclass={0xa4, 0x29, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0x8, 0xffe0}, {0xffff, 0xd}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x10000, 0x80}}, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x8001, 0x9}}, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x4, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x5, 0x101}}, @TCA_HFSC_RSC={0x10, 0x1, {0xc1, 0xf, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0xc861, 0x8, 0x9}}, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x13c, 0x9}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x95}, 0x5854) 3m30.094503456s ago: executing program 0 (id=1084): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', r2, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2f}}}}}) (fail_nth: 1) 3m29.471403903s ago: executing program 0 (id=1085): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', r2, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2f}}}}}) 3m27.752441677s ago: executing program 0 (id=1087): r0 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x2000) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xbd, 0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010428bd700002dcdf2507e089fe", @ANYRES32=r6, @ANYBLOB="8000e4090a000200bb"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000340)="d54aa9a8203fc3f4eebd1efeca2498cdede5e64710b6f82356e6da3b6be1acd93889609eaf6b2e47be359e6f451a2b9ee5ed6e523ea7941e3782db46d0cf1dba1346485daecac47cb0f0d6aa8dede466cb4f744a297fbb4f83599706d38143e283a095085010c7e750f0c50f12a9", 0x6e}, {&(0x7f00000003c0)="ef53ee4403f769eab174347a57a79c62ea637e0e242d1b03c7be54678f38fc8929f9d1399fd42dc08c2a93d688c1cfce491ab83ad84e22b196073046c6a241ee522e72d2729bcbd07e1c108d2ace99a59b003ff111bf31c4d79a1c47883f62779dab3492564430efec1961df5268c596be", 0x71}], 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m24.199522259s ago: executing program 0 (id=1093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x481, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000004c0)=0xfffd) (fail_nth: 1) 3m22.825282218s ago: executing program 0 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000080a01010000000000000000020000090900010073797a30"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8084) (fail_nth: 1) 3m22.208060805s ago: executing program 34 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000080a01010000000000000000020000090900010073797a30"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8084) (fail_nth: 1) 3m3.403360484s ago: executing program 4 (id=1119): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8) flock(r0, 0x5) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = syz_open_dev$video4linux(0x0, 0x28, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x14d, @private0, 0x6}}, 0x9c4, 0xffff, 0x7ff, 0x80000000, 0x40, 0x1, 0x90}, 0x9c) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x15c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1780000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6ca, @private1={0xfc, 0x1, '\x00', 0x1}, 0xea7}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @private2, 0x61c3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @empty, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @private0, 0x105}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x80}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x4) flock(r6, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x2) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xa7}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x8, 0x2014}, 0x20) sendmmsg$inet_sctp(r9, &(0x7f0000001a40)=[{&(0x7f0000000180)=@in={0x2, 0x4e62, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000040)="608d", 0x2}], 0x1, &(0x7f0000000000)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x3, 0x0}}], 0x18, 0x1}], 0x1, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0x4f, 0x2, 0xd, "939eb8daa05d6460c84c809f201776f9", "44e1f1460a327b35c6e4f6e02a46eb810ae5f67a3a5450c95f00a5e7e0fb30e90c0c02f770326f8b436e427f5cf554c8ca6c1d32eb7977239e2b"}, 0x4f, 0x0) 3m2.285419162s ago: executing program 4 (id=1120): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x9}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x99d7faedb58583f8, 0x7800, 0x7fffffff, 0x7, {{0x16, 0x4, 0x3, 0x1f, 0x58, 0x64, 0x0, 0x7f, 0x29, 0x0, @private=0xa010100, @local, {[@timestamp={0x44, 0x8, 0x19, 0x0, 0xb, [0x0]}, @cipso={0x86, 0x39, 0x2, [{0x0, 0x9, "7c7b9d3c812b99"}, {0x7, 0xb, "48ded3e9e39285c36b"}, {0x7, 0xf, "2d119cb5301eabb0cd7074db58"}, {0x1, 0xd, "b8518c99acb5306e87c12f"}, {0x0, 0x3, "16"}]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x883, '\x00', r0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) syz_open_procfs(r1, &(0x7f00000001c0)='net/netfilter\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000080)={0xffff, 0x2, 'client0\x00', 0x0, "da7001f989848ed3", "3cc6ff88f553ad7ea847a92ca633cd3db806ea5673420e97ad466406a69f00d1", 0x5, 0x7}) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x20, 0x4}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x24, 0x14, 0x519, 0x70bd2a, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "d76f51d2877e3e480d"}]}, 0x24}}, 0x48000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000840)={0x300, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000200030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x4000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r9, 0xffff) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$addseals(r9, 0x409, 0x7) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000100)={r9, 0x0, 0x0, 0x8000}) syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000280)={0x1, 0x8, 0x7, &(0x7f00000000c0)={0x15, "9c8b7b54ed6c11328c605f56210be9e44338a796c88bca91b6df79768d434313e8"}}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x2101}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x9, @loopback, 0x400}]}}}}}}}}, 0x0) 2m59.027472112s ago: executing program 4 (id=1125): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2m57.398370152s ago: executing program 4 (id=1126): r0 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x2000) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xbd, 0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010428bd700002dcdf2507e089fe", @ANYRES32=r6, @ANYBLOB="8000e4090a000200bb"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000340)="d54aa9a8203fc3f4eebd1efeca2498cdede5e64710b6f82356e6da3b6be1acd93889609eaf6b2e47be359e6f451a2b9ee5ed6e523ea7941e3782db46d0cf1dba1346485daecac47cb0f0d6aa8dede466cb4f744a297fbb4f83599706d38143e283a095085010c7e750f0c50f12a9", 0x6e}, {&(0x7f00000003c0)="ef53ee4403f769eab174347a57a79c62ea637e0e242d1b03c7be54678f38fc8929f9d1399fd42dc08c2a93d688c1cfce491ab83ad84e22b196073046c6a241ee522e72d2729bcbd07e1c108d2ace99a59b003ff111bf31c4d79a1c47883f62779dab3492564430efec1961df5268c596be", 0x71}], 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m54.082397645s ago: executing program 4 (id=1135): unshare(0x2c020600) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x5c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x5c}}, 0x0) 2m53.443422032s ago: executing program 4 (id=1136): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2m52.639218107s ago: executing program 35 (id=1136): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 15.186267776s ago: executing program 7 (id=1428): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) write$P9_RSTATu(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="c20200007d00000005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="7c00330700000000000800008100d1", 0x0, 0x469, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x8031, r4, 0xe49cd000) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r7, 0x1}], 0x1, 0x101) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8) 14.240537257s ago: executing program 7 (id=1430): lseek(0xffffffffffffffff, 0x9, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000800)=[{0x0}, {&(0x7f00000001c0)="f3ba9e8346ddfd46f5ba7fbc25c6aed71214dcfaa44b98dfdbc07b1c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec984cc37874a28d", 0x4a}, {0x0}, {&(0x7f0000000500)="0f15ce0e2a894e2afb7a77dc4a4ec84b8109b2c95397d40adb9d5e8df8fd9a3167faa56aa764e6", 0x27}, {0x0}, {0x0}], 0x6, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'ipvlan1\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0x3, 0x8, "b320218e7ade"}}) syz_mount_image$xfs(&(0x7f0000000580), &(0x7f0000002180)='./file0\x00', 0x840, &(0x7f00000021c0)={[{}, {@allocsize={'allocsize', 0x3d, [0x1f, 0x74, 0x0, 0x34, 0x67, 0x39, 0x2d, 0x74, 0x67, 0x6d]}}, {@noquota}, {@ikeep}, {@usrquota}, {@nobarrier}, {@dax_never}], [{@uid_lt}]}, 0x1, 0x96c5, &(0x7f0000012d80)="$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") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x164) r3 = fanotify_init(0x2, 0x1000) fanotify_mark(r3, 0x541, 0x40000019, r2, 0x0) fanotify_mark(r3, 0x542, 0x1020, r2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0xb, 0x40000003}, 0x8) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000001780)=ANY=[], 0x0, 0x0, &(0x7f0000001780)) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) connect$bt_sco(r1, &(0x7f0000000340), 0x8) syz_mount_image$nilfs2(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x4018400, &(0x7f0000000000)=ANY=[], 0x1, 0xf94, &(0x7f00000011c0)="$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") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x2020) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) lstat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) shutdown(r1, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000001480)={[{@part={'part', 0x3d, 0x1}}, {@codepage={'codepage', 0x3d, 'macceltic'}}, {@part={'part', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@creator={'creator', 0x3d, "0d9848bc"}}]}, 0x11, 0x2bd, &(0x7f0000000200)="$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") r6 = getpid() r7 = syz_open_procfs(r6, &(0x7f0000000540)='mountstats\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r8, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}}}, 0x10) read$FUSE(r7, &(0x7f0000006b40)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='netfs_sreq_ref\x00', r7, 0x0, 0x6}, 0x18) 10.903768371s ago: executing program 7 (id=1437): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x9}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x99d7faedb58583f8, 0x7800, 0x7fffffff, 0x7, {{0x19, 0x4, 0x3, 0x1f, 0x64, 0x64, 0x0, 0x7f, 0x29, 0x0, @private=0xa010100, @local, {[@timestamp={0x44, 0x8, 0x19, 0x0, 0xb, [0x0]}, @cipso={0x86, 0x47, 0x2, [{0x0, 0xe, "4c4c047bc45d9b4142b04405"}, {0x0, 0x9, "7c7b9d3c812b99"}, {0x7, 0xb, "48ded3e9e39285c36b"}, {0x7, 0xf, "2d119cb5301eabb0cd7074db58"}, {0x1, 0xd, "b8518c99acb5306e87c12f"}, {0x0, 0x3, "16"}]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x883, '\x00', r0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) syz_open_procfs(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000080)={0xffff, 0x2, 'client0\x00', 0x0, "da7001f989848ed3", "3cc6ff88f553ad7ea847a92ca633cd3db806ea5673420e97ad466406a69f00d1", 0x5, 0x7}) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x20, 0x4}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x24, 0x14, 0x519, 0x70bd2a, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "d76f51d2877e3e480d"}]}, 0x24}}, 0x48000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000840)={0x300, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000200030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x4000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r9, 0xffff) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$addseals(r9, 0x409, 0x7) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000100)={r9, 0x0, 0x0, 0x8000}) syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000280)={0x1, 0x8, 0x7, &(0x7f00000000c0)={0x15, "9c8b7b54ed6c11328c605f56210be9e44338a796c88bca91b6df79768d434313e8"}}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x2101}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x9, @loopback, 0x400}]}}}}}}}}, 0x0) 6.842093055s ago: executing program 7 (id=1448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = open$dir(0x0, 0x418000, 0x88) name_to_handle_at(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=ANY=[], &(0x7f0000000240), 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'syz_tun\x00', @random="0163014030d9"}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000000000)='./file0\x00', 0x100000a, &(0x7f0000000100)={[{@journal_async_commit}, {@heartbeat_none}, {@user_xattr}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@resv_level={'resv_level', 0x3d, 0x3}}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 6.03094974s ago: executing program 6 (id=1450): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x80400, 0x0) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x1}, 0x20040810) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10002, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) connect$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x9, @local, 0x4, 0x3}, 0x20) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000040)={[0x2]}) 4.985720775s ago: executing program 6 (id=1453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @empty, 0xffffffff}, {0xa, 0x4e23, 0x7, @remote, 0x7}, r2, 0x7}}, 0x48) (fail_nth: 1) 4.219295568s ago: executing program 6 (id=1456): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x9}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x99d7faedb58583f8, 0x7800, 0x7fffffff, 0x7, {{0x19, 0x4, 0x3, 0x1f, 0x64, 0x64, 0x0, 0x7f, 0x29, 0x0, @private=0xa010100, @local, {[@timestamp={0x44, 0x8, 0x19, 0x0, 0xb, [0x0]}, @cipso={0x86, 0x47, 0x2, [{0x0, 0xe, "4c4c047bc45d9b4142b04405"}, {0x0, 0x9, "7c7b9d3c812b99"}, {0x7, 0xb, "48ded3e9e39285c36b"}, {0x7, 0xf, "2d119cb5301eabb0cd7074db58"}, {0x1, 0xd, "b8518c99acb5306e87c12f"}, {0x0, 0x3, "16"}]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x883, '\x00', r0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) syz_open_procfs(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000080)={0xffff, 0x2, 'client0\x00', 0x0, "da7001f989848ed3", "3cc6ff88f553ad7ea847a92ca633cd3db806ea5673420e97ad466406a69f00d1", 0x5, 0x7}) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x20, 0x4}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x24, 0x14, 0x519, 0x70bd2a, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "d76f51d2877e3e480d"}]}, 0x24}}, 0x48000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000840)={0x300, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000200030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x4000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r9, 0xffff) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$addseals(r9, 0x409, 0x7) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000100)={r9, 0x0, 0x0, 0x8000}) syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000280)={0x1, 0x8, 0x7, &(0x7f00000000c0)={0x15, "9c8b7b54ed6c11328c605f56210be9e44338a796c88bca91b6df79768d434313e8"}}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x2101}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x9, @loopback, 0x400}]}}}}}}}}, 0x0) 4.101156593s ago: executing program 2 (id=1457): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000240)={0xfffffffe, 0x8, 0xa4, 0x5, 0x0, 0x4, 0x4, 0xffffffff, 0x10, 0x101, 0x2, 0x3, &(0x7f0000000000)=[0x7, 0x8], 0x2, &(0x7f00000000c0)="3b62b1cffe83d43f0f31c805dad7c5f6f380dbbcdf7a5c0f8270433331f55e9eba50bc82f99078e4711bd73f42ceada0cfc8593ee02fec4991461c67aa3fd64701870aa3dd003b16841eb4b471398cb7aed5a25536f32d609666fa660a5a98ffd5f78386369945f3e6d27ee6c5c67f49ea830e863b321b3ce948270c4801333288ed79dda18a6b7dca7479e40662ae8de3fdfc285c7e44fb7d2b00", 0x9b}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioperm(0x0, 0x7fff, 0x15f9) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) syz_io_uring_setup(0x1e1d, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000002bc0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}\xf3\xf8\xab\xbd\xf03L\xb0\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xae\x8dVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x1f\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf49\xd2\xfb\x9e\xef\xabR\x88\x13\x9et\xcb\x82\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10\x00'/355, 0x5) fallocate(r2, 0x0, 0x0, 0x10001) finit_module(r2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00') setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) socket$alg(0x26, 0x5, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x24008804) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 3.748982438s ago: executing program 2 (id=1458): mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) setreuid(0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x3, @none}, 0xe) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x4040814) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) inotify_init() getpid() prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x80001) syz_open_procfs(0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000000)={@my=0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) 3.407368173s ago: executing program 5 (id=1459): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) write$P9_RSTATu(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="c20200007d00000005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="7c00330700000000000800008100d1", 0x0, 0x469, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x8031, r4, 0xe49cd000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r7) 3.407083603s ago: executing program 2 (id=1460): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x0, 0x0, 'syz0\x00', 0x20000000}, 0x0, [0x0, 0x0, 0x0, 0xfffdfffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x71, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc19, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0xffffffffffffff15, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bfd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) (fail_nth: 1) 3.151174514s ago: executing program 2 (id=1461): unshare(0x2c020600) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r6, @ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0xffffffffffffffff) fdatasync(r1) 2.705578423s ago: executing program 5 (id=1462): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x49e5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)) r1 = getpgrp(0x0) prlimit64(r1, 0x6, 0x0, &(0x7f00000007c0)) r2 = dup(0xffffffffffffffff) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0xcbb12f4d, @empty, 0x1}}, [0xc5c00, 0x2, 0x7, 0x1, 0x80000000, 0x3c, 0x6, 0x1, 0x9, 0xce3e, 0x6, 0x0, 0x3, 0x4, 0x5]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x58, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6d1}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x1}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000780)=0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x0, 0x0, 'syz0\x00', 0x20000000}, 0x0, [0x0, 0x0, 0x0, 0xfffdfffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x71, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc19, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0xffffffffffffff15, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bfd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) 2.648821615s ago: executing program 7 (id=1463): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b35b82edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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") r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noinit_itable}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f00000007c0)='./file0\x00', 0x40, 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f00000003c0)=""/111, 0xd9, 0x6f, 0x1, 0x6, 0x10000, @value=r1}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x9, 0x2c0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000fafffffff3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20"], 0x0, 0x96, 0x0, 0x1}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000009aef520000950000000e726ed6d1faa9f6cbb1660cca000000007d6b8d4b867ce712ec4ff5418d6a46b641e20f019103305ea77d178f0b04c701b77ab7"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r7 = openat$cgroup_int(r5, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040), 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r9 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) sendfile(r9, r9, &(0x7f0000000080), 0x7f03) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r10) 2.583498738s ago: executing program 5 (id=1464): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000a00)="39e8dcfa461ac09e8a722e34d7e498893ffa560200133b06000000000000001770faf047145bc79e0b9971bcbedac0eeaf3300000000000000000000cab0312cf6b68ced648cdb670a6bf4d650ac2b5546216e3ce964359f", 0x58}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 2.424163095s ago: executing program 6 (id=1465): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000a00)="39e8dcfa461ac09e8a722e34d7e498893ffa560200133b06000000000000001770faf047145bc79e0b9971bcbedac0eeaf3300000000000000000000cab0312cf6b68ced648cdb670a6bf4d650ac2b5546216e3ce964359f", 0x58}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) (fail_nth: 1) 2.396194786s ago: executing program 5 (id=1466): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000a00)="39e8dcfa461ac09e8a722e34d7e498893ffa560200133b06000000000000001770faf047145bc79e0b9971bcbedac0eeaf3300000000000000000000cab0312cf6b68ced648cdb670a6bf4d650ac2b5546216e3ce964359f", 0x58}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8000000000000000, 0x414140) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd2c, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_DATA_WEP40={0x9, 0xa}]}]}, 0x34}}, 0x40) setreuid(0x0, 0xee00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01e318"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 2.263344482s ago: executing program 6 (id=1467): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000001600010a000000e65d"], 0x78}}, 0x24000814) syz_mount_image$squashfs(&(0x7f000001f880), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x1, 0x18f, &(0x7f000001f8c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(0x0, 0x10000, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg$unix(r5, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000100)="888bc541a4239c581ce86dc98d9d63f805f3c8fa64d314", 0x17}], 0x1}, 0x48043) 2.173084866s ago: executing program 5 (id=1468): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="f050e1978e5c2a1bf72572e6fa985f9b9734ab0b87c84be70312e4e864335fee", @ANYRES32=0x0, @ANYBLOB="a70d040000000000280012800e00010069703667726574617000000014000280060010004e210000060011004e2000001400030069703667726574617030000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b7398bf}, 0x8040) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000240)=ANY=[], 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000080)={0xa1, 0x0, 0x802, 0x0, 0x0, 0x4, 0x0}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x6a4, 0xd, 0xa, 0x53621efc78ccc123, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x67c, 0x3, 0x0, 0x1, [{0x180, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x17c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "3307e1"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "78e5f91f482f441da0e057926462672c755af6159fe698bec9fa8a4c252432fad2af03420651614ed1b48546c4959356cd1a978bc22bf789ef6fe41035cd965a5655cb28f6e5c11ecfee6dd68775d7e01cc129aa75c434441ebf66f6f70cea53b8e6ff1574b5f999ba0b9b5fdf8e9e7ec6df5d9ca4edde53269025b93c1231da448f93eb70f687101b36cc4f9fb8944d280a6022cd08f4eec34d84ab4284edce60a4b275ec27d277ffb6801d441f15eb37e0c77c30"}, @NFTA_DATA_VALUE={0x9c, 0x1, "13bd7e25574d3d2a157e12d0a827b01ee898cdac8c4b8228a3793c320e37fec6f22ed5e5e1ac500cba7d564b5c59a347d3d5143341de7c9447bb43b44b47a64615e72fb456de3b9b30d5b1fe9345cd036cb0c8691aec45778a2e38b6250a7f810657b7002b515f9371047124cce3979e1ee8c03b98ade780de80c8e358e18735600ada6093454c78654b84a2ec3a7b8790cbd5bac0ad7d54"}]}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xe1, 0x6, 0x1, 0x0, "e89f62b84d670b52c72e3247efb26c5306b1338c1b5dd8ba268068e4d6b6a9eb154b6392e74d1014ba4914d9b6ec49e28dd06e4f4f014ed86c576fd99a7e2543ff5d34c6a7d805293590bec8630e745064622f4325c5d5ab792a172173daffa18345b6e0e2f9e9da4620ff5026e14b3bfad0c9d967ca4cf0787db470c94e41b60ae3347d2540a710cb3e68c5c2ba918f6ac75b8ed0bbcd65210afd00f61bad0add8fa8816f57f045922b8ad28249b8ea3df16fea095517916dd2a61dd424fd2fa8b6b22e5abaa750ef1b7dbb81e1325f3490d99cfb70038e5da6118412"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x3e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_DATA={0x278, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x98, 0x1, "7780edb3901a3541dfb3826147ba84e63f4f1d15e1538ed15abf43f7121ce2dda5e808f8d997f615527082bab27cc7af566b74c9617080584c30ee6169f2a516e24a53a1628d836cef0d30e858caa6d5307b26b854deacf71c77c7c6d3f115d8a991d3f4839564bb193d3e2c41e350fa849e6ec7b876771d31cbd56978a155e63779c1997182b90bc303b06d1defc9a4fafc1492"}, @NFTA_DATA_VALUE={0xce, 0x1, "8068464ab6c2a176205e0b72cf3ce8ec913177abb8068997559b30bec0f431c34088964661e17d21e3c8ced68485cf622160063ebef3c273767c200bcd0d8306f2421579a662afbde05b69deb52962b2d1f0cf4adbc314d912fecbe4b2ab3c358fc1ae5052da2ba2b7eb2a5a76a94af35815763d3a845240e4fb28e07f987123d84836f233aefd61c2f71483d6d4883ba23de0ec6302ddf60fe9431591c6de2cd74c07a2f54564c634c20a177a638cc9562e0879bee37fa70c0e32f1f84ac77eddebb5bdecb1d3307142"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x8e, 0x6, 0x1, 0x0, "4a23416a9267728f47fd92ea9695b91053328710c7207c43ef440c3bcd660c1df49cc28330f96f555f97c817390cb8a321b598f382f6be2bfad95e5aed625fef77100f1ee377079f8c4e338a5fbe63d0cb4b39562da715c93a6a33fd0e35646d5a9d296833d8fd49df25a639a32b00f0465395f43016fbe395f83c99f729286b75eeb4a38325c6acbef8"}, @NFTA_SET_ELEM_USERDATA={0xae, 0x6, 0x1, 0x0, "d402453f6b5ebec18f83b6df73bbb7945d304f3ea757144856eb17817eebdc3763f26e6d899fe70d261cecb189f339d5276bede775740743da13046947451ab0ec5644f49729674e8e79b4e2affcacb0d998dc51ea857586d01d5bb115ce5bab00f76dd898e146703aa729645a88c70b4280ae694a42c922b3ede554cc3e98917ae1025ec42bb218dd43f3cb13b79dd822080b9696829da3f582cb2e8fd9829914a79091b4ff62987510"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x20000805}, 0x440c4) 1.284637644s ago: executing program 2 (id=1469): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x80400, 0x0) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x1}, 0x20040810) r3 = syz_open_dev$evdev(0x0, 0x0, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) (fail_nth: 1) connect$l2tp6(r6, &(0x7f0000000080)={0xa, 0x0, 0x9, @local, 0x4, 0x3}, 0x20) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, 0x0) 1.226403247s ago: executing program 6 (id=1470): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) write$P9_RSTATu(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="c20200007d00000005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="7c00330700000000000800008100d1", 0x0, 0x469, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf, 0x8031, r4, 0xe49cd000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r7) 450.6774ms ago: executing program 2 (id=1471): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = open$dir(0x0, 0x418000, 0x88) name_to_handle_at(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=ANY=[], &(0x7f0000000240), 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'syz_tun\x00', @random="0163014030d9"}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000000000)='./file0\x00', 0x100000a, &(0x7f0000000100)={[{@journal_async_commit}, {@heartbeat_none}, {@user_xattr}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@resv_level={'resv_level', 0x3d, 0x3}}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 293.129156ms ago: executing program 7 (id=1472): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() r5 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x80400, 0x0) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4}, 0x20008090) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x8, 0x1, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x80, 0x6, 0x9}}) r8 = syz_open_dev$evdev(0x0, 0x0, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0xff0f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) connect$can_bcm(r5, &(0x7f0000000180)={0x1d, r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp6(0xa, 0x2, 0x73) 0s ago: executing program 5 (id=1473): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x9}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x99d7faedb58583f8, 0x7800, 0x7fffffff, 0x7, {{0x19, 0x4, 0x3, 0x1f, 0x64, 0x64, 0x0, 0x7f, 0x29, 0x0, @private=0xa010100, @local, {[@timestamp={0x44, 0x8, 0x19, 0x0, 0xb, [0x0]}, @cipso={0x86, 0x47, 0x2, [{0x0, 0xe, "4c4c047bc45d9b4142b04405"}, {0x0, 0x9, "7c7b9d3c812b99"}, {0x7, 0xb, "48ded3e9e39285c36b"}, {0x7, 0xf, "2d119cb5301eabb0cd7074db58"}, {0x1, 0xd, "b8518c99acb5306e87c12f"}, {0x0, 0x3, "16"}]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x883, '\x00', r0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) syz_open_procfs(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000080)={0xffff, 0x2, 'client0\x00', 0x0, "da7001f989848ed3", "3cc6ff88f553ad7ea847a92ca633cd3db806ea5673420e97ad466406a69f00d1", 0x5, 0x7}) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x20, 0x4}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x24, 0x14, 0x519, 0x70bd2a, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "d76f51d2877e3e480d"}]}, 0x24}}, 0x48000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000840)={0x300, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000200030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x4000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r9, 0xffff) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$addseals(r9, 0x409, 0x7) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000100)={r9, 0x0, 0x0, 0x8000}) syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000280)={0x1, 0x8, 0x7, &(0x7f00000000c0)={0x15, "9c8b7b54ed6c11328c605f56210be9e44338a796c88bca91b6df79768d434313e8"}}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x2101}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x9, @loopback, 0x400}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 99202][T11027] ? show_regs_print_info+0x20/0x20 [ 774.604441][T11027] ? load_image+0x3b0/0x3b0 [ 774.608980][T11027] ? __might_fault+0xaa/0x120 [ 774.613691][T11027] ? __lock_acquire+0x7c80/0x7c80 [ 774.618768][T11027] should_fail_ex+0x39d/0x4d0 [ 774.623486][T11027] _copy_from_user+0x2f/0xe0 [ 774.628117][T11027] comm_write+0xe6/0x2d0 [ 774.632392][T11027] ? end_current_label_crit_section+0x149/0x170 [ 774.638682][T11027] ? proc_tid_comm_permission+0x1a0/0x1a0 [ 774.644424][T11027] ? fsnotify_perm+0x5d/0x5e0 [ 774.649290][T11027] ? security_file_permission+0x79/0xa0 [ 774.654852][T11027] do_iter_write+0x50e/0xc70 [ 774.659546][T11027] ? proc_tid_comm_permission+0x1a0/0x1a0 [ 774.665273][T11027] ? vfs_iter_write+0xa0/0xa0 [ 774.669968][T11027] ? rcu_read_lock_any_held+0xb4/0x120 [ 774.675444][T11027] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 774.680747][T11027] do_writev+0x252/0x410 [ 774.685022][T11027] ? do_readv+0x3e0/0x3e0 [ 774.689384][T11027] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 774.695383][T11027] ? lock_chain_count+0x20/0x20 [ 774.700262][T11027] ? lockdep_hardirqs_on+0x98/0x150 [ 774.705476][T11027] do_syscall_64+0x55/0xb0 [ 774.709899][T11027] ? clear_bhb_loop+0x40/0x90 [ 774.714590][T11027] ? clear_bhb_loop+0x40/0x90 [ 774.719275][T11027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 774.725183][T11027] RIP: 0033:0x7f97b5d8f749 [ 774.729608][T11027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.749307][T11027] RSP: 002b:00007f97b6b7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 774.757736][T11027] RAX: ffffffffffffffda RBX: 00007f97b5fe6180 RCX: 00007f97b5d8f749 [ 774.765720][T11027] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000009 [ 774.773698][T11027] RBP: 00007f97b6b7b090 R08: 0000000000000000 R09: 0000000000000000 [ 774.781673][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.789653][T11027] R13: 00007f97b5fe6218 R14: 00007f97b5fe6180 R15: 00007ffd71f53168 [ 774.797667][T11027] [ 774.810864][T11027] warning: `syz.5.1185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 774.909551][ T788] usb 7-1: Product: syz [ 774.914841][ T788] usb 7-1: Manufacturer: syz [ 774.991369][ T788] cdc_wdm 7-1:1.0: skipping garbage [ 775.040459][ T788] cdc_wdm 7-1:1.0: skipping garbage [ 775.211916][ T788] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 775.350609][ T788] cdc_wdm 7-1:1.0: Unknown control protocol [ 777.783191][T11011] tipc: Enabled bearer , priority 10 [ 777.790947][ T788] usb 7-1: USB disconnect, device number 7 [ 778.304689][T11046] loop7: detected capacity change from 0 to 8 [ 778.315993][T11046] squashfs: Unknown parameter '' [ 778.599803][T11045] autofs4:pid:11045:autofs_fill_super: called with bogus options [ 778.628734][T11047] loop6: detected capacity change from 0 to 2048 [ 778.745427][T11047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 779.029600][T11047] FAULT_INJECTION: forcing a failure. [ 779.029600][T11047] name failslab, interval 1, probability 0, space 0, times 0 [ 779.042331][T11047] CPU: 0 PID: 11047 Comm: syz.6.1189 Not tainted syzkaller #0 [ 779.049842][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.059918][T11047] Call Trace: [ 779.063231][T11047] [ 779.066179][T11047] dump_stack_lvl+0x16c/0x230 [ 779.070894][T11047] ? show_regs_print_info+0x20/0x20 [ 779.076130][T11047] ? load_image+0x3b0/0x3b0 [ 779.080674][T11047] ? __might_sleep+0xe0/0xe0 [ 779.085311][T11047] ? __lock_acquire+0x7c80/0x7c80 [ 779.090367][T11047] should_fail_ex+0x39d/0x4d0 [ 779.095103][T11047] should_failslab+0x9/0x20 [ 779.099658][T11047] slab_pre_alloc_hook+0x59/0x310 [ 779.104757][T11047] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 779.110430][T11047] kmem_cache_alloc+0x5a/0x2e0 [ 779.115220][T11047] ? getname_flags+0xbb/0x500 [ 779.119928][T11047] getname_flags+0xbb/0x500 [ 779.124474][T11047] __x64_sys_rename+0x5f/0x90 [ 779.129185][T11047] do_syscall_64+0x55/0xb0 [ 779.133646][T11047] ? clear_bhb_loop+0x40/0x90 [ 779.138354][T11047] ? clear_bhb_loop+0x40/0x90 [ 779.143083][T11047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 779.149026][T11047] RIP: 0033:0x7f08be98f749 [ 779.153467][T11047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.173112][T11047] RSP: 002b:00007f08bf7d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 779.181554][T11047] RAX: ffffffffffffffda RBX: 00007f08bebe6090 RCX: 00007f08be98f749 [ 779.189549][T11047] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080 [ 779.197546][T11047] RBP: 00007f08bf7d8090 R08: 0000000000000000 R09: 0000000000000000 [ 779.205554][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.213554][T11047] R13: 00007f08bebe6128 R14: 00007f08bebe6090 R15: 00007ffc79a99878 [ 779.221583][T11047] [ 779.506523][ T27] audit: type=1800 audit(2000000004.100:36): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1189" name="file1" dev="loop6" ino=1346 res=0 errno=0 [ 780.698632][ T9681] Bluetooth: hci2: command 0x0406 tx timeout [ 781.156097][T11052] loop7: detected capacity change from 0 to 262144 [ 781.204223][T11052] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop7 scanned by syz.7.1190 (11052) [ 781.224512][T11052] BTRFS info (device loop7): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 781.235619][T11052] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 781.245081][T11052] BTRFS info (device loop7): using free space tree [ 781.429592][T11052] BTRFS info (device loop7): enabling ssd optimizations [ 781.436670][T11052] BTRFS info (device loop7): auto enabling async discard [ 781.487948][T10872] BTRFS warning (device loop7): checksum verify failed on logical 30457856 mirror 1 wanted 0x402e75f1de9ccfe6 found 0x6ccf92cbe8a88a4a level 0 [ 781.542447][T11052] BTRFS info (device loop7): read error corrected: ino 0 off 30457856 (dev /dev/loop7 sector 75872) [ 781.553914][T11052] BTRFS info (device loop7): read error corrected: ino 0 off 30461952 (dev /dev/loop7 sector 75880) [ 781.566289][T11052] BTRFS info (device loop7): read error corrected: ino 0 off 30466048 (dev /dev/loop7 sector 75888) [ 781.584745][T11052] BTRFS info (device loop7): read error corrected: ino 0 off 30470144 (dev /dev/loop7 sector 75896) [ 781.619055][T11052] FAULT_INJECTION: forcing a failure. [ 781.619055][T11052] name failslab, interval 1, probability 0, space 0, times 0 [ 781.632303][T11052] CPU: 1 PID: 11052 Comm: syz.7.1190 Not tainted syzkaller #0 [ 781.639786][T11052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 781.649859][T11052] Call Trace: [ 781.653135][T11052] [ 781.656094][T11052] dump_stack_lvl+0x16c/0x230 [ 781.660803][T11052] ? show_regs_print_info+0x20/0x20 [ 781.666022][T11052] ? load_image+0x3b0/0x3b0 [ 781.670541][T11052] ? __might_sleep+0xe0/0xe0 [ 781.675137][T11052] ? __lock_acquire+0x7c80/0x7c80 [ 781.680166][T11052] should_fail_ex+0x39d/0x4d0 [ 781.684858][T11052] should_failslab+0x9/0x20 [ 781.689406][T11052] slab_pre_alloc_hook+0x59/0x310 [ 781.694483][T11052] kmem_cache_alloc+0x5a/0x2e0 [ 781.699290][T11052] ? btrfs_getxattr+0x50/0x1b0 [ 781.704093][T11052] btrfs_getxattr+0x50/0x1b0 [ 781.708701][T11052] ? btrfs_initxattrs+0x2a0/0x2a0 [ 781.713742][T11052] __vfs_getxattr+0x3e8/0x420 [ 781.718442][T11052] cap_inode_need_killpriv+0x45/0x60 [ 781.723749][T11052] security_inode_need_killpriv+0x62/0x90 [ 781.729520][T11052] __file_remove_privs+0x232/0x5c0 [ 781.734648][T11052] ? file_remove_privs+0x20/0x20 [ 781.739613][T11052] ? down_write+0x162/0x1f0 [ 781.744123][T11052] ? down_read_killable+0x340/0x340 [ 781.749335][T11052] btrfs_write_check+0x155/0x550 [ 781.754287][T11052] ? generic_write_checks+0xc9/0x100 [ 781.759776][T11052] btrfs_do_write_iter+0x51b/0x11b0 [ 781.765010][T11052] ? btrfs_check_nocow_unlock+0x40/0x40 [ 781.770573][T11052] ? common_file_perm+0x198/0x1f0 [ 781.775643][T11052] do_iter_write+0x79a/0xc70 [ 781.780275][T11052] ? vfs_iter_write+0xa0/0xa0 [ 781.784980][T11052] ? rcu_read_lock_any_held+0xb4/0x120 [ 781.790480][T11052] do_pwritev+0x205/0x340 [ 781.794892][T11052] ? do_preadv+0x330/0x330 [ 781.799344][T11052] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 781.805347][T11052] ? lock_chain_count+0x20/0x20 [ 781.810239][T11052] ? lockdep_hardirqs_on+0x98/0x150 [ 781.815452][T11052] ? __x64_sys_pwritev2+0xbe/0x100 [ 781.820584][T11052] do_syscall_64+0x55/0xb0 [ 781.825030][T11052] ? clear_bhb_loop+0x40/0x90 [ 781.829745][T11052] ? clear_bhb_loop+0x40/0x90 [ 781.834438][T11052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 781.840347][T11052] RIP: 0033:0x7fa98f78f749 [ 781.844775][T11052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.864394][T11052] RSP: 002b:00007fa9906cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 781.872819][T11052] RAX: ffffffffffffffda RBX: 00007fa98f9e5fa0 RCX: 00007fa98f78f749 [ 781.880805][T11052] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 781.888806][T11052] RBP: 00007fa9906cf090 R08: 00000000fffffffa R09: 0000000000000003 [ 781.896788][T11052] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 781.904783][T11052] R13: 00007fa98f9e6038 R14: 00007fa98f9e5fa0 R15: 00007ffe215362b8 [ 781.912783][T11052] [ 781.921746][ T27] audit: type=1800 audit(2000000006.490:37): pid=11052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1190" name="file2" dev="loop7" ino=261 res=0 errno=0 [ 782.135938][T10810] BTRFS info (device loop7): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 784.072392][T11084] loop5: detected capacity change from 0 to 8 [ 784.200841][T11084] SQUASHFS error: lzo decompression failed, data probably corrupt [ 784.241272][T11084] SQUASHFS error: Failed to read block 0x91: -5 [ 784.289074][T11084] SQUASHFS error: Unable to read metadata cache entry [8f] [ 784.370793][T11084] SQUASHFS error: Unable to read inode 0x11f [ 784.513300][T11084] loop5: detected capacity change from 0 to 1024 [ 784.555643][T11084] EXT4-fs: Ignoring removed orlov option [ 784.590114][T11084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 784.652139][T11084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.868568][T10040] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.198690][T11093] tipc: Enabling of bearer rejected, already enabled [ 785.355062][T11099] loop5: detected capacity change from 0 to 8 [ 785.362282][T11099] squashfs: Unknown parameter '' [ 785.983425][ T6776] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 785.996434][T11096] autofs4:pid:11096:autofs_fill_super: called with bogus options [ 786.567565][T11103] loop5: detected capacity change from 0 to 2048 [ 786.681491][T11103] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.964836][ T27] audit: type=1800 audit(2000000011.800:38): pid=11103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1199" name="file1" dev="loop5" ino=1313 res=0 errno=0 [ 788.490034][T11109] loop7: detected capacity change from 0 to 32768 [ 788.612321][T11109] (syz.7.1195,11109,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 788.628460][T11109] (syz.7.1195,11109,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 788.737389][T11109] JBD2: Ignoring recovery information on journal [ 788.944956][T11109] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 789.024568][T11113] loop6: detected capacity change from 0 to 512 [ 789.174487][T11113] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 789.767368][T11113] EXT4-fs (loop6): 1 truncate cleaned up [ 789.785766][T11113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.897049][T11111] @0Ù: renamed from syz_tun (while UP) [ 790.357253][T10810] ocfs2: Unmounting device (7,7) on (node local) [ 790.370164][ T27] audit: type=1326 audit(2000000015.240:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11124 comm="syz.2.1205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f853af8f749 code=0x0 [ 790.456985][T11126] Cannot find set identified by id 65534 to match [ 791.102781][T11129] FAULT_INJECTION: forcing a failure. [ 791.102781][T11129] name failslab, interval 1, probability 0, space 0, times 0 [ 791.116131][T11129] CPU: 0 PID: 11129 Comm: syz.7.1204 Not tainted syzkaller #0 [ 791.123766][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 791.133826][T11129] Call Trace: [ 791.137143][T11129] [ 791.140088][T11129] dump_stack_lvl+0x16c/0x230 [ 791.144784][T11129] ? show_regs_print_info+0x20/0x20 [ 791.150001][T11129] ? load_image+0x3b0/0x3b0 [ 791.154532][T11129] ? __might_sleep+0xe0/0xe0 [ 791.159131][T11129] ? __lock_acquire+0x7c80/0x7c80 [ 791.164174][T11129] should_fail_ex+0x39d/0x4d0 [ 791.168869][T11129] should_failslab+0x9/0x20 [ 791.173387][T11129] slab_pre_alloc_hook+0x59/0x310 [ 791.178427][T11129] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 791.184171][T11129] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 791.189911][T11129] __kmem_cache_alloc_node+0x53/0x260 [ 791.195301][T11129] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 791.201045][T11129] __kmalloc+0xa4/0x240 [ 791.205241][T11129] tomoyo_realpath_from_path+0xe3/0x5d0 [ 791.210847][T11129] tomoyo_path_number_perm+0x1ea/0x590 [ 791.216317][T11129] ? tomoyo_path_number_perm+0x1ba/0x590 [ 791.221975][T11129] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 791.227448][T11129] ? ksys_write+0x1c1/0x250 [ 791.231995][T11129] ? __fget_files+0x28/0x4d0 [ 791.236599][T11129] security_file_ioctl+0x70/0xa0 [ 791.241540][T11129] __se_sys_ioctl+0x48/0x170 [ 791.246133][T11129] do_syscall_64+0x55/0xb0 [ 791.250559][T11129] ? clear_bhb_loop+0x40/0x90 [ 791.255340][T11129] ? clear_bhb_loop+0x40/0x90 [ 791.260023][T11129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.265937][T11129] RIP: 0033:0x7fa98f78f749 [ 791.270376][T11129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.289991][T11129] RSP: 002b:00007fa9906cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 791.298402][T11129] RAX: ffffffffffffffda RBX: 00007fa98f9e5fa0 RCX: 00007fa98f78f749 [ 791.306472][T11129] RDX: 00002000000002c0 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 791.314452][T11129] RBP: 00007fa9906cf090 R08: 0000000000000000 R09: 0000000000000000 [ 791.322441][T11129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.330411][T11129] R13: 00007fa98f9e6038 R14: 00007fa98f9e5fa0 R15: 00007ffe215362b8 [ 791.338398][T11129] [ 791.347264][T11129] ERROR: Out of memory at tomoyo_realpath_from_path. [ 791.371061][T10533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.761407][T11131] tipc: Enabling of bearer rejected, already enabled [ 791.781610][T11131] tipc: Enabling of bearer rejected, already enabled [ 791.866656][ T5755] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 792.083036][ T5755] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 792.118088][ T5755] usb 7-1: config 0 has no interface number 0 [ 792.128797][ T5755] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 792.142453][ T5755] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 792.154446][ T5755] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 792.163701][ T5755] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.195016][ T5755] usb 7-1: config 0 descriptor?? [ 792.208253][T11135] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 792.237705][ T5755] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 792.330076][ T5755] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 792.363786][ T5755] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 792.564097][ C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 793.702276][ T9271] usb 7-1: USB disconnect, device number 8 [ 794.651981][T11152] loop7: detected capacity change from 0 to 8 [ 794.667687][T11151] loop5: detected capacity change from 0 to 32768 [ 794.681918][T11151] (syz.5.1212,11151,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 794.695971][T11151] (syz.5.1212,11151,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 794.732030][T11152] squashfs: Unknown parameter '' [ 794.758903][T11151] JBD2: Ignoring recovery information on journal [ 794.816126][T11151] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 794.870844][T11148] autofs4:pid:11148:autofs_fill_super: called with bogus options [ 794.972976][T11157] FAULT_INJECTION: forcing a failure. [ 794.972976][T11157] name failslab, interval 1, probability 0, space 0, times 0 [ 795.014545][T11157] CPU: 0 PID: 11157 Comm: syz.6.1213 Not tainted syzkaller #0 [ 795.022205][T11157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.032292][T11157] Call Trace: [ 795.035592][T11157] [ 795.038548][T11157] dump_stack_lvl+0x16c/0x230 [ 795.043275][T11157] ? show_regs_print_info+0x20/0x20 [ 795.048511][T11157] ? load_image+0x3b0/0x3b0 [ 795.053050][T11157] ? __might_sleep+0xe0/0xe0 [ 795.057670][T11157] ? __lock_acquire+0x7c80/0x7c80 [ 795.062729][T11157] should_fail_ex+0x39d/0x4d0 [ 795.067451][T11157] should_failslab+0x9/0x20 [ 795.071997][T11157] slab_pre_alloc_hook+0x59/0x310 [ 795.077054][T11157] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 795.082816][T11157] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 795.088596][T11157] __kmem_cache_alloc_node+0x53/0x260 [ 795.094011][T11157] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 795.099768][T11157] __kmalloc+0xa4/0x240 [ 795.103960][T11157] tomoyo_realpath_from_path+0xe3/0x5d0 [ 795.109566][T11157] tomoyo_path_number_perm+0x1ea/0x590 [ 795.115066][T11157] ? tomoyo_path_number_perm+0x1ba/0x590 [ 795.120753][T11157] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 795.126249][T11157] ? ksys_write+0x1c1/0x250 [ 795.130826][T11157] ? __fget_files+0x28/0x4d0 [ 795.135473][T11157] security_file_ioctl+0x70/0xa0 [ 795.140462][T11157] __se_sys_ioctl+0x48/0x170 [ 795.145090][T11157] do_syscall_64+0x55/0xb0 [ 795.149538][T11157] ? clear_bhb_loop+0x40/0x90 [ 795.154256][T11157] ? clear_bhb_loop+0x40/0x90 [ 795.158963][T11157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.164892][T11157] RIP: 0033:0x7f08be98f749 [ 795.169341][T11157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.188985][T11157] RSP: 002b:00007f08bf7f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 795.197534][T11157] RAX: ffffffffffffffda RBX: 00007f08bebe5fa0 RCX: 00007f08be98f749 [ 795.205543][T11157] RDX: 0000000000000038 RSI: 000000000000ae03 RDI: 0000000000000003 [ 795.213546][T11157] RBP: 00007f08bf7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 795.221563][T11157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.229564][T11157] R13: 00007f08bebe6038 R14: 00007f08bebe5fa0 R15: 00007ffc79a99878 [ 795.237582][T11157] [ 795.277586][T11157] ERROR: Out of memory at tomoyo_realpath_from_path. [ 795.324006][T10040] ocfs2: Unmounting device (7,5) on (node local) [ 795.565577][T11160] FAULT_INJECTION: forcing a failure. [ 795.565577][T11160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.591675][T11160] CPU: 0 PID: 11160 Comm: syz.6.1215 Not tainted syzkaller #0 [ 795.599225][T11160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.609308][T11160] Call Trace: [ 795.612615][T11160] [ 795.615568][T11160] dump_stack_lvl+0x16c/0x230 [ 795.620291][T11160] ? show_regs_print_info+0x20/0x20 [ 795.625528][T11160] ? load_image+0x3b0/0x3b0 [ 795.630068][T11160] ? __might_fault+0xaa/0x120 [ 795.634777][T11160] ? __lock_acquire+0x7c80/0x7c80 [ 795.639851][T11160] should_fail_ex+0x39d/0x4d0 [ 795.644579][T11160] _copy_from_user+0x2f/0xe0 [ 795.649205][T11160] __sys_sendto+0x2cf/0x620 [ 795.653737][T11160] ? file_end_write+0x159/0x250 [ 795.658626][T11160] ? __ia32_sys_getpeername+0x90/0x90 [ 795.664044][T11160] ? __fget_files+0x44a/0x4d0 [ 795.668763][T11160] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 795.674782][T11160] ? lock_chain_count+0x20/0x20 [ 795.679685][T11160] __x64_sys_sendto+0xde/0xf0 [ 795.684395][T11160] do_syscall_64+0x55/0xb0 [ 795.688836][T11160] ? clear_bhb_loop+0x40/0x90 [ 795.693559][T11160] ? clear_bhb_loop+0x40/0x90 [ 795.698292][T11160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.704224][T11160] RIP: 0033:0x7f08be98f749 [ 795.708679][T11160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.728316][T11160] RSP: 002b:00007f08bf7f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 795.736769][T11160] RAX: ffffffffffffffda RBX: 00007f08bebe5fa0 RCX: 00007f08be98f749 [ 795.745197][T11160] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 795.753188][T11160] RBP: 00007f08bf7f9090 R08: 0000200000000280 R09: 000000000000001c [ 795.761179][T11160] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 795.769174][T11160] R13: 00007f08bebe6038 R14: 00007f08bebe5fa0 R15: 00007ffc79a99878 [ 795.777186][T11160] [ 795.987740][T11162] loop7: detected capacity change from 0 to 2048 [ 796.095904][T11162] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 796.264498][ T27] audit: type=1800 audit(2000000021.130:40): pid=11164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1216" name="file1" dev="loop7" ino=1346 res=0 errno=0 [ 797.765607][ T27] audit: type=1326 audit(2000000022.630:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08be98f749 code=0x7ffc0000 [ 797.794905][ T27] audit: type=1326 audit(2000000022.660:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08be98f749 code=0x7ffc0000 [ 797.825219][ T27] audit: type=1326 audit(2000000022.660:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08be98f749 code=0x7ffc0000 [ 797.855019][ T27] audit: type=1326 audit(2000000022.660:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08be98f749 code=0x7ffc0000 [ 797.878346][ T27] audit: type=1326 audit(2000000022.660:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f08be98f749 code=0x7ffc0000 [ 797.924339][ T27] audit: type=1326 audit(2000000022.660:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08be98f749 code=0x7ffc0000 [ 797.947284][ T27] audit: type=1326 audit(2000000022.660:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08be98f749 code=0x7ffc0000 [ 797.972795][ T27] audit: type=1326 audit(2000000022.660:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f08be98f749 code=0x7ffc0000 [ 798.098694][ T27] audit: type=1326 audit(2000000022.660:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08be98f749 code=0x7ffc0000 [ 799.439928][T11193] @0Ù: renamed from syz_tun (while UP) [ 800.323399][T11193] loop6: detected capacity change from 0 to 32768 [ 800.335083][T11193] (syz.6.1222,11193,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 800.348845][T11193] (syz.6.1222,11193,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 800.408498][T11193] JBD2: Ignoring recovery information on journal [ 800.457773][T11193] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 800.780252][T10533] ocfs2: Unmounting device (7,6) on (node local) [ 801.205819][T11209] loop6: detected capacity change from 0 to 2048 [ 801.390218][T11209] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 801.647941][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 801.647995][ T27] audit: type=1800 audit(2000000026.390:60): pid=11209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1227" name="file1" dev="loop6" ino=1313 res=0 errno=0 [ 801.766587][ T5755] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 802.167825][T11210] loop7: detected capacity change from 0 to 8 [ 802.364410][ T5755] usb 6-1: Using ep0 maxpacket: 8 [ 802.411784][T11210] squashfs: Unknown parameter '' [ 802.484367][ T5755] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.626168][ T5755] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 802.776046][ T5755] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 802.925457][ T5755] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 802.947138][T11207] autofs4:pid:11207:autofs_fill_super: called with bogus options [ 803.002629][ T5755] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 803.033909][ T5755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.254300][ T5755] hub 6-1:1.0: bad descriptor, ignoring hub [ 803.266393][ T5755] hub: probe of 6-1:1.0 failed with error -5 [ 803.273682][ T5755] cdc_wdm 6-1:1.0: skipping garbage [ 803.286378][ T5755] cdc_wdm 6-1:1.0: skipping garbage [ 803.306742][ T5755] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 803.685828][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1229'. [ 804.016231][T11221] program syz.6.1232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 804.048078][ T5755] cdc_wdm 6-1:1.0: Unknown control protocol [ 804.087395][ T5755] usb 6-1: USB disconnect, device number 13 [ 804.154708][T11229] FAULT_INJECTION: forcing a failure. [ 804.154708][T11229] name failslab, interval 1, probability 0, space 0, times 0 [ 804.171588][T11229] CPU: 0 PID: 11229 Comm: syz.7.1234 Not tainted syzkaller #0 [ 804.179110][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 804.189196][T11229] Call Trace: [ 804.192508][T11229] [ 804.195466][T11229] dump_stack_lvl+0x16c/0x230 [ 804.200191][T11229] ? show_regs_print_info+0x20/0x20 [ 804.205434][T11229] ? load_image+0x3b0/0x3b0 [ 804.209982][T11229] ? __might_sleep+0xe0/0xe0 [ 804.214612][T11229] ? __lock_acquire+0x7c80/0x7c80 [ 804.219680][T11229] should_fail_ex+0x39d/0x4d0 [ 804.224396][T11229] should_failslab+0x9/0x20 [ 804.228924][T11229] slab_pre_alloc_hook+0x59/0x310 [ 804.233980][T11229] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 804.239744][T11229] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 804.245509][T11229] __kmem_cache_alloc_node+0x53/0x260 [ 804.250931][T11229] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 804.256690][T11229] __kmalloc+0xa4/0x240 [ 804.260897][T11229] tomoyo_realpath_from_path+0xe3/0x5d0 [ 804.266500][T11229] tomoyo_path_number_perm+0x1ea/0x590 [ 804.272004][T11229] ? tomoyo_path_number_perm+0x1ba/0x590 [ 804.277684][T11229] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 804.283196][T11229] ? ksys_write+0x1c1/0x250 [ 804.287812][T11229] ? __fget_files+0x28/0x4d0 [ 804.292464][T11229] security_file_ioctl+0x70/0xa0 [ 804.297446][T11229] __se_sys_ioctl+0x48/0x170 [ 804.302071][T11229] do_syscall_64+0x55/0xb0 [ 804.306513][T11229] ? clear_bhb_loop+0x40/0x90 [ 804.311241][T11229] ? clear_bhb_loop+0x40/0x90 [ 804.315961][T11229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.322018][T11229] RIP: 0033:0x7fa98f78f749 [ 804.326496][T11229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.346143][T11229] RSP: 002b:00007fa9906cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 804.354576][T11229] RAX: ffffffffffffffda RBX: 00007fa98f9e5fa0 RCX: 00007fa98f78f749 [ 804.362565][T11229] RDX: 0100000000000000 RSI: 00000000c0046209 RDI: 0000000000000003 [ 804.370562][T11229] RBP: 00007fa9906cf090 R08: 0000000000000000 R09: 0000000000000000 [ 804.378546][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.386534][T11229] R13: 00007fa98f9e6038 R14: 00007fa98f9e5fa0 R15: 00007ffe215362b8 [ 804.394524][T11229] [ 804.401195][T11229] ERROR: Out of memory at tomoyo_realpath_from_path. [ 804.408099][T11229] binder: 11228:11229 ioctl c0046209 100000000000000 returned -22 [ 804.615612][T11233] 9pnet_fd: Insufficient options for proto=fd [ 804.877780][T11242] loop5: detected capacity change from 0 to 8 [ 805.007157][T11242] SQUASHFS error: lzo decompression failed, data probably corrupt [ 805.032737][T11242] SQUASHFS error: Failed to read block 0x91: -5 [ 805.064169][T11242] SQUASHFS error: Unable to read metadata cache entry [8f] [ 805.100174][T11242] SQUASHFS error: Unable to read inode 0x11f [ 806.518831][T11251] netlink: 'syz.6.1242': attribute type 7 has an invalid length. [ 807.411065][ T5755] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 807.636982][ T5755] usb 6-1: Using ep0 maxpacket: 16 [ 807.649693][ T5755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 807.675716][ T5755] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 807.693242][ T5755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.706519][ T5755] usb 6-1: Product: syz [ 807.710717][ T5755] usb 6-1: Manufacturer: syz [ 807.725531][ T5755] usb 6-1: SerialNumber: syz [ 807.734268][ T5755] usb 6-1: config 0 descriptor?? [ 807.757212][ T5755] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 807.786523][ T5755] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 809.716688][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.725680][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.336879][ T5755] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 810.456194][ T5755] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 810.465311][ T5755] em28xx 6-1:0.0: board has no eeprom [ 810.616657][ T5755] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 810.624565][ T5755] em28xx 6-1:0.0: dvb set to bulk mode. [ 810.642453][ T9271] em28xx 6-1:0.0: Binding DVB extension [ 810.682678][ T5755] usb 6-1: USB disconnect, device number 14 [ 810.734237][ T5755] em28xx 6-1:0.0: Disconnecting em28xx [ 810.879466][T11275] program syz.5.1247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 810.897831][ T9271] em28xx 6-1:0.0: Registering input extension [ 810.904858][ T5755] em28xx 6-1:0.0: Closing input extension [ 811.008595][ T5755] em28xx 6-1:0.0: Freeing device [ 811.395707][T11290] loop7: detected capacity change from 0 to 8 [ 812.606570][ T8605] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 812.799623][ T8605] usb 7-1: Using ep0 maxpacket: 8 [ 812.821261][ T8605] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 812.838075][ T8605] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 812.857687][ T8605] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 812.934158][T11304] loop5: detected capacity change from 0 to 8 [ 812.941536][T11304] squashfs: Unknown parameter '' [ 813.051796][T11304] autofs4:pid:11304:autofs_fill_super: called with bogus options [ 813.136422][ T8605] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.151884][ T8605] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 813.161431][ T8605] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.235081][T11306] netlink: 'syz.2.1258': attribute type 7 has an invalid length. [ 814.636222][ T8605] usb 7-1: GET_CAPABILITIES returned 0 [ 814.667744][ T8605] usbtmc 7-1:16.0: can't read capabilities [ 814.858612][T11300] FAULT_INJECTION: forcing a failure. [ 814.858612][T11300] name failslab, interval 1, probability 0, space 0, times 0 [ 814.906812][T11300] CPU: 1 PID: 11300 Comm: syz.6.1256 Not tainted syzkaller #0 [ 814.914358][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 814.924448][T11300] Call Trace: [ 814.927750][T11300] [ 814.930716][T11300] dump_stack_lvl+0x16c/0x230 [ 814.935436][T11300] ? show_regs_print_info+0x20/0x20 [ 814.940682][T11300] ? load_image+0x3b0/0x3b0 [ 814.945220][T11300] ? __might_sleep+0xe0/0xe0 [ 814.949847][T11300] ? __lock_acquire+0x7c80/0x7c80 [ 814.954909][T11300] should_fail_ex+0x39d/0x4d0 [ 814.959628][T11300] should_failslab+0x9/0x20 [ 814.964229][T11300] slab_pre_alloc_hook+0x59/0x310 [ 814.969298][T11300] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 814.975075][T11300] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 814.980842][T11300] __kmem_cache_alloc_node+0x53/0x260 [ 814.986262][T11300] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 814.992049][T11300] __kmalloc+0xa4/0x240 [ 814.996258][T11300] tomoyo_realpath_from_path+0xe3/0x5d0 [ 815.001867][T11300] tomoyo_path_number_perm+0x1ea/0x590 [ 815.007367][T11300] ? tomoyo_path_number_perm+0x1ba/0x590 [ 815.013041][T11300] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 815.018543][T11300] ? ksys_write+0x1c1/0x250 [ 815.023114][T11300] ? __fget_files+0x28/0x4d0 [ 815.027756][T11300] security_file_ioctl+0x70/0xa0 [ 815.032736][T11300] __se_sys_ioctl+0x48/0x170 [ 815.037360][T11300] do_syscall_64+0x55/0xb0 [ 815.041828][T11300] ? clear_bhb_loop+0x40/0x90 [ 815.046538][T11300] ? clear_bhb_loop+0x40/0x90 [ 815.051261][T11300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.057206][T11300] RIP: 0033:0x7f08be98f749 [ 815.061650][T11300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.081296][T11300] RSP: 002b:00007f08bf7f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 815.089747][T11300] RAX: ffffffffffffffda RBX: 00007f08bebe5fa0 RCX: 00007f08be98f749 [ 815.097745][T11300] RDX: 0000000000000000 RSI: 0000000000005b23 RDI: 0000000000000004 [ 815.105743][T11300] RBP: 00007f08bf7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 815.113750][T11300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.121753][T11300] R13: 00007f08bebe6038 R14: 00007f08bebe5fa0 R15: 00007ffc79a99878 [ 815.129791][T11300] [ 815.144765][T11310] netlink: 'syz.5.1260': attribute type 7 has an invalid length. [ 815.366583][T11300] ERROR: Out of memory at tomoyo_realpath_from_path. [ 815.407940][ T8605] usb 7-1: USB disconnect, device number 9 [ 816.633572][T11318] loop6: detected capacity change from 0 to 8 [ 817.968046][T11321] loop6: detected capacity change from 0 to 8 [ 818.013370][T11321] SQUASHFS error: lzo decompression failed, data probably corrupt [ 818.178740][T11321] SQUASHFS error: Failed to read block 0x91: -5 [ 818.185071][T11321] SQUASHFS error: Unable to read metadata cache entry [8f] [ 818.192381][T11321] SQUASHFS error: Unable to read inode 0x11f [ 818.236230][T11325] loop5: detected capacity change from 0 to 512 [ 818.267450][T11325] EXT4-fs: Ignoring removed i_version option [ 818.491742][T11325] EXT4-fs: Ignoring removed bh option [ 819.414573][T11325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.437495][T11325] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 819.600083][T11321] loop6: detected capacity change from 0 to 1024 [ 819.637361][T11321] EXT4-fs: Ignoring removed orlov option [ 819.643070][T11321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 819.932532][T11321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.319967][T10533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.403426][T10040] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.936813][T11347] netlink: 'syz.6.1267': attribute type 7 has an invalid length. [ 821.989265][T11345] tipc: Enabling of bearer rejected, already enabled [ 822.031669][T11345] tipc: Enabling of bearer rejected, already enabled [ 824.056687][T11364] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1274'. [ 824.084420][T11366] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1274'. [ 824.606299][T11372] netlink: 'syz.5.1278': attribute type 7 has an invalid length. [ 827.441162][T11376] loop6: detected capacity change from 0 to 32768 [ 827.479593][T11376] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1270 (11376) [ 827.539815][T11376] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 827.566435][T11376] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 827.586967][T11376] BTRFS error (device loop6): unrecognized mount option 'func=KEXEC_KERNEL_CHECK' [ 827.628252][T11376] BTRFS error (device loop6): open_ctree failed: -22 [ 827.653980][ T8512] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (8512) [ 827.868826][T11390] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 827.881402][T11390] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 828.206469][ T9271] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 828.388729][ T9271] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 828.426525][ T9271] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 828.447127][ T9271] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 828.456227][ T9271] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.497090][T11391] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 828.540790][ T9271] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 829.501855][ T5755] usb 7-1: USB disconnect, device number 10 [ 829.657457][T11401] loop5: detected capacity change from 0 to 8 [ 829.734409][T11401] SQUASHFS error: lzo decompression failed, data probably corrupt [ 829.782058][T11406] netlink: 'syz.7.1287': attribute type 7 has an invalid length. [ 830.902267][T11401] SQUASHFS error: Failed to read block 0x91: -5 [ 830.971661][T11401] SQUASHFS error: Unable to read metadata cache entry [8f] [ 831.023989][T11401] SQUASHFS error: Unable to read inode 0x11f [ 831.143932][T11401] loop5: detected capacity change from 0 to 1024 [ 831.159941][T11401] EXT4-fs: Ignoring removed orlov option [ 831.165647][T11401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 831.240157][T11401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.489146][T10040] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.641403][T11415] autofs4:pid:11415:autofs_fill_super: called with bogus options [ 832.722961][T11424] loop5: detected capacity change from 0 to 8 [ 832.886502][ T172] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 833.179876][ T172] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 833.259539][T11427] syz.7.1288: attempt to access beyond end of device [ 833.259539][T11427] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 833.300603][ T172] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 833.346269][ T172] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 833.365630][T11427] syz.7.1288: attempt to access beyond end of device [ 833.365630][T11427] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0 [ 833.389295][ T172] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.408838][T11427] Mount JFS Failure: -5 [ 833.413183][T11427] jfs_mount failed w/return code = -5 [ 833.459257][T11421] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 833.548894][ T172] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 833.923261][ T9271] usb 7-1: USB disconnect, device number 11 [ 834.456552][ T172] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 834.647217][ T172] usb 6-1: Using ep0 maxpacket: 32 [ 834.667721][ T172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.686772][ T172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.716532][ T172] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 834.730605][ T172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.744127][ T172] usb 6-1: config 0 descriptor?? [ 834.750176][T11446] netlink: 'syz.6.1296': attribute type 7 has an invalid length. [ 835.842297][ T172] hub 6-1:0.0: USB hub found [ 836.069183][ T172] hub 6-1:0.0: 2 ports detected [ 836.285187][ T172] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 836.321029][ T172] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 836.547833][ T172] usbhid 6-1:0.0: can't add hid device: -71 [ 836.566481][ T172] usbhid: probe of 6-1:0.0 failed with error -71 [ 837.343309][ T172] usb 6-1: USB disconnect, device number 15 [ 837.468176][T11468] FAULT_INJECTION: forcing a failure. [ 837.468176][T11468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.507465][T11468] CPU: 0 PID: 11468 Comm: syz.5.1303 Not tainted syzkaller #0 [ 837.515006][T11468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 837.525093][T11468] Call Trace: [ 837.528405][T11468] [ 837.531377][T11468] dump_stack_lvl+0x16c/0x230 [ 837.536111][T11468] ? show_regs_print_info+0x20/0x20 [ 837.541358][T11468] ? load_image+0x3b0/0x3b0 [ 837.545906][T11468] ? __might_fault+0xaa/0x120 [ 837.550611][T11468] ? __lock_acquire+0x7c80/0x7c80 [ 837.555674][T11468] should_fail_ex+0x39d/0x4d0 [ 837.555937][T11473] loop7: detected capacity change from 0 to 8 [ 837.560372][T11468] _copy_from_user+0x2f/0xe0 [ 837.560401][T11468] ___sys_sendmsg+0x159/0x290 [ 837.575762][T11468] ? __sys_sendmsg+0x270/0x270 [ 837.580561][T11468] ? __lock_acquire+0x7c80/0x7c80 [ 837.585615][T11468] __se_sys_sendmsg+0x1a5/0x270 [ 837.590477][T11468] ? __x64_sys_sendmsg+0x80/0x80 [ 837.595434][T11468] ? lockdep_hardirqs_on+0x98/0x150 [ 837.600652][T11468] do_syscall_64+0x55/0xb0 [ 837.605073][T11468] ? clear_bhb_loop+0x40/0x90 [ 837.609765][T11468] ? clear_bhb_loop+0x40/0x90 [ 837.614449][T11468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 837.620350][T11468] RIP: 0033:0x7f97b5d8f749 [ 837.624774][T11468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.644383][T11468] RSP: 002b:00007f97b6bbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.652806][T11468] RAX: ffffffffffffffda RBX: 00007f97b5fe5fa0 RCX: 00007f97b5d8f749 [ 837.660874][T11468] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 837.668855][T11468] RBP: 00007f97b6bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 837.676842][T11468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.684828][T11468] R13: 00007f97b5fe6038 R14: 00007f97b5fe5fa0 R15: 00007ffd71f53168 [ 837.692919][T11468] [ 837.714879][T11473] SQUASHFS error: lzo decompression failed, data probably corrupt [ 837.724309][T11473] SQUASHFS error: Failed to read block 0x91: -5 [ 837.737847][T11474] netlink: 'syz.2.1306': attribute type 7 has an invalid length. [ 838.864475][T11473] SQUASHFS error: Unable to read metadata cache entry [8f] [ 838.886501][ T28] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 838.915181][T11473] SQUASHFS error: Unable to read inode 0x11f [ 839.086631][ T28] usb 7-1: Using ep0 maxpacket: 32 [ 839.103414][ T28] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.128142][ T28] usb 7-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 839.154292][T11473] loop7: detected capacity change from 0 to 1024 [ 839.161588][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.215675][T11473] EXT4-fs: Ignoring removed orlov option [ 839.217346][ T28] usb 7-1: config 0 descriptor?? [ 839.257003][ T28] dw2102: su3000_identify_state [ 839.262432][ T28] dvb-usb: found a 'TeVii S662' in warm state. [ 839.269263][ T28] dw2102: su3000_power_ctrl: 1, initialized 0 [ 839.275699][ T28] dvb-usb: bulk message failed: -22 (2/0) [ 839.275842][T11473] EXT4-fs: Ignoring removed nomblk_io_submit option [ 839.285047][ T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 839.350076][ T28] dvbdev: DVB: registering new adapter (TeVii S662) [ 839.378827][ T28] usb 7-1: media controller created [ 839.402282][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 839.427254][ T28] dw2102: i2c transfer failed. [ 839.446489][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 839.452545][ T28] dw2102: i2c transfer failed. [ 839.507810][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 839.532575][ T28] dw2102: i2c transfer failed. [ 839.544585][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 839.666384][ T28] dw2102: i2c transfer failed. [ 839.671254][T11471] dvb-usb: bulk message failed: -22 (27/0) [ 839.711474][T11471] dw2102: i2c transfer failed. [ 839.718669][T11473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.784701][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 839.790679][ T28] dw2102: i2c transfer failed. [ 839.805273][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 839.811440][ T28] dw2102: i2c transfer failed. [ 839.816248][ T28] dvb-usb: MAC address: 02:02:02:02:02:02 [ 839.843666][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 839.925913][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 839.942696][ T28] dw2102: command 0x0e transfer failed. [ 839.973395][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 840.000029][ T28] dw2102: command 0x0e transfer failed. [ 840.020328][T10810] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.322261][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 840.329851][ T28] dw2102: command 0x0e transfer failed. [ 840.348079][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 840.355925][ T28] dw2102: command 0x0e transfer failed. [ 840.369882][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 840.375657][ T28] dw2102: command 0x51 transfer failed. [ 840.394087][ T28] dvb-usb: bulk message failed: -22 (5/0) [ 840.400009][ T28] dw2102: i2c probe for address 0x68 failed. [ 840.406084][ T28] dvb-usb: bulk message failed: -22 (5/0) [ 840.418675][ T28] dw2102: i2c probe for address 0x69 failed. [ 840.424834][ T28] dvb-usb: bulk message failed: -22 (5/0) [ 840.434404][ T28] dw2102: i2c probe for address 0x6a failed. [ 840.469199][ T28] dw2102: probing for demodulator failed. Is the external power switched on? [ 840.494682][ T28] dvb-usb: no frontend was attached by 'TeVii S662' [ 840.550639][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 841.036441][ T28] rc_core: IR keymap rc-tt-1500 not found [ 841.077079][ T28] Registered IR keymap rc-empty [ 841.186782][ T28] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 841.219488][ T28] input: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input38 [ 841.244294][ T28] dvb-usb: schedule remote query interval to 250 msecs. [ 841.276574][ T28] dw2102: su3000_power_ctrl: 0, initialized 1 [ 841.293039][ T28] dvb-usb: TeVii S662 successfully initialized and connected. [ 841.323778][ T28] usb 7-1: USB disconnect, device number 12 [ 841.426647][ T28] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 841.469122][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 841.498338][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 841.520495][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 841.541635][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 841.563363][ T9690] Bluetooth: hci0: command 0x0406 tx timeout [ 841.575983][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 841.590283][T11507] netlink: 'syz.2.1316': attribute type 7 has an invalid length. [ 842.677417][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 842.693854][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 842.707599][ T9] usb 6-1: Product: syz [ 842.712059][ T9] usb 6-1: Manufacturer: syz [ 842.724321][T11505] tipc: Started in network mode [ 842.729416][T11505] tipc: Node identity aafc80e28d69, cluster identity 4711 [ 842.745062][T11505] tipc: Enabled bearer , priority 0 [ 842.758951][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 842.764208][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 842.775476][T11505] syzkaller0: entered promiscuous mode [ 842.782625][T11505] syzkaller0: entered allmulticast mode [ 842.788637][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 842.794572][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 842.879032][ T28] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 842.938563][T11505] tipc: Resetting bearer [ 842.967893][T11504] tipc: Resetting bearer [ 842.989385][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 842.996057][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 843.006611][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 843.013280][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 843.020376][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 843.027027][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 843.033646][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 843.040314][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 843.047321][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 843.053964][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 843.060570][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 843.067205][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 843.073523][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 843.080166][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 843.088544][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 843.095184][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 843.102123][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 843.108774][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 843.114949][ T28] usb 7-1: Using ep0 maxpacket: 32 [ 843.115677][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 843.126698][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 843.146697][ T9] usb 6-1: USB disconnect, device number 16 [ 843.152667][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 843.163829][T11504] tipc: Disabling bearer [ 843.172581][ T28] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.201965][ T28] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.224000][ T28] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 843.234141][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.244418][T11485] tipc: Enabling of bearer rejected, already enabled [ 843.261426][ T28] usb 7-1: config 0 descriptor?? [ 843.295442][ T28] hub 7-1:0.0: USB hub found [ 843.300974][T11485] tipc: Enabling of bearer rejected, already enabled [ 844.261166][ T28] hub 7-1:0.0: 2 ports detected [ 844.414146][T11517] loop5: detected capacity change from 0 to 1764 [ 844.470285][ T28] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 844.492378][ T28] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 844.535019][ T5755] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 844.548624][ T28] usbhid 7-1:0.0: can't add hid device: -71 [ 844.554662][ T28] usbhid: probe of 7-1:0.0 failed with error -71 [ 844.731035][ T5755] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 844.754956][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 844.779473][ T28] usb 7-1: USB disconnect, device number 13 [ 844.919408][T11524] fido_id[11524]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 844.930989][T11526] loop7: detected capacity change from 0 to 1024 [ 844.993332][ T9] usb 6-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 845.025118][ T9] usb 6-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid maxpacket 65278, setting to 1024 [ 845.040817][ T9] usb 6-1: config 0 interface 0 altsetting 60 bulk endpoint 0xD has invalid maxpacket 1024 [ 845.053860][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 845.065987][ T9] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 845.076301][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.139807][ T9] usb 6-1: config 0 descriptor?? [ 845.151136][T11517] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 845.442248][T11532] loop7: detected capacity change from 0 to 8 [ 845.998766][T11517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.046846][T11517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.152599][T11538] netlink: 'syz.2.1325': attribute type 7 has an invalid length. [ 846.466700][ T9] usb 6-1: string descriptor 0 read error: -71 [ 846.478084][ T9] usb 6-1: ucan: probing device on interface #0 [ 846.518343][ T9] usb 6-1: ucan: invalid endpoint configuration [ 846.525011][ T9] usb 6-1: ucan: probe failed; try to update the device firmware [ 846.606269][ T9] usb 6-1: USB disconnect, device number 17 [ 846.980432][T11547] autofs4:pid:11547:autofs_fill_super: called with bogus options [ 847.046481][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 847.288341][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 847.316510][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 847.335377][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 847.354746][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 847.376210][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 847.405242][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 847.426369][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 847.434402][ T9] usb 6-1: Product: syz [ 847.456366][ T9] usb 6-1: Manufacturer: syz [ 847.471268][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 847.478008][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 847.488262][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 847.496446][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 847.694534][ T9] usb 6-1: USB disconnect, device number 18 [ 847.694610][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 848.290747][ T5851] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 848.318278][ T5851] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 848.349735][T11544] tipc: Enabling of bearer rejected, already enabled [ 848.462628][T11545] loop7: detected capacity change from 0 to 32768 [ 848.547211][T11545] XFS (loop7): Invalid superblock magic number [ 850.511807][T11582] netlink: 'syz.5.1336': attribute type 7 has an invalid length. [ 852.229846][T11584] autofs4:pid:11584:autofs_fill_super: called with bogus options [ 853.733938][T11591] loop6: detected capacity change from 0 to 4096 [ 853.840432][T11591] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 854.289265][T11591] ntfs3: loop6: Failed to initialize $Extend/$Reparse. [ 854.394196][T11600] loop7: detected capacity change from 0 to 4096 [ 854.409600][T11590] tipc: Enabling of bearer rejected, already enabled [ 854.414646][T11600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 854.478114][T11600] EXT4-fs (loop7): Test dummy encryption mode enabled [ 854.497445][ T27] audit: type=1326 audit(2000000079.370:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11602 comm="syz.2.1343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f853af8f749 code=0x0 [ 854.516568][T11600] EXT4-fs (loop7): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 854.595138][T11600] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 854.647862][T11600] System zones: 0-5 [ 854.655706][T11600] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.174153][T11608] FAULT_INJECTION: forcing a failure. [ 855.174153][T11608] name failslab, interval 1, probability 0, space 0, times 0 [ 855.187916][T11608] CPU: 0 PID: 11608 Comm: syz.5.1339 Not tainted syzkaller #0 [ 855.195415][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 855.205497][T11608] Call Trace: [ 855.208790][T11608] [ 855.211732][T11608] dump_stack_lvl+0x16c/0x230 [ 855.216529][T11608] ? show_regs_print_info+0x20/0x20 [ 855.221754][T11608] ? load_image+0x3b0/0x3b0 [ 855.226281][T11608] ? __might_sleep+0xe0/0xe0 [ 855.230897][T11608] ? __lock_acquire+0x7c80/0x7c80 [ 855.235941][T11608] should_fail_ex+0x39d/0x4d0 [ 855.240642][T11608] should_failslab+0x9/0x20 [ 855.245165][T11608] slab_pre_alloc_hook+0x59/0x310 [ 855.250204][T11608] ? kvmalloc_node+0x70/0x180 [ 855.254914][T11608] ? kvmalloc_node+0x70/0x180 [ 855.259621][T11608] __kmem_cache_alloc_node+0x53/0x260 [ 855.265022][T11608] ? kvmalloc_node+0x70/0x180 [ 855.269728][T11608] __kmalloc_node+0xa4/0x230 [ 855.274350][T11608] kvmalloc_node+0x70/0x180 [ 855.278869][T11608] file_tty_write+0x2e6/0x980 [ 855.283578][T11608] vfs_write+0x43b/0x940 [ 855.287849][T11608] ? file_end_write+0x250/0x250 [ 855.292727][T11608] ? __fget_files+0x44a/0x4d0 [ 855.297432][T11608] ? __fdget_pos+0x1d8/0x330 [ 855.302041][T11608] ? ksys_write+0x75/0x250 [ 855.306477][T11608] ksys_write+0x147/0x250 [ 855.310831][T11608] ? __ia32_sys_read+0x90/0x90 [ 855.315614][T11608] ? lockdep_hardirqs_on+0x98/0x150 [ 855.320830][T11608] do_syscall_64+0x55/0xb0 [ 855.325250][T11608] ? clear_bhb_loop+0x40/0x90 [ 855.329945][T11608] ? clear_bhb_loop+0x40/0x90 [ 855.334642][T11608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 855.340549][T11608] RIP: 0033:0x7f97b5d8f749 [ 855.344972][T11608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.364592][T11608] RSP: 002b:00007f97b6bbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 855.373041][T11608] RAX: ffffffffffffffda RBX: 00007f97b5fe5fa0 RCX: 00007f97b5d8f749 [ 855.381029][T11608] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 855.389008][T11608] RBP: 00007f97b6bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 855.396992][T11608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.404976][T11608] R13: 00007f97b5fe6038 R14: 00007f97b5fe5fa0 R15: 00007ffd71f53168 [ 855.412973][T11608] [ 855.696428][ T5755] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 855.818231][T11615] loop5: detected capacity change from 0 to 8 [ 856.589234][ T5755] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 856.598034][ T5755] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 856.608431][ T5755] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 856.617453][ T5755] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 856.629024][ T5755] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 856.656601][ T5755] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 856.676699][ T5755] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 856.685437][ T5755] usb 7-1: Product: syz [ 856.689849][ T5755] usb 7-1: Manufacturer: syz [ 856.710651][ T5755] cdc_wdm 7-1:1.0: skipping garbage [ 856.716428][ T5755] cdc_wdm 7-1:1.0: skipping garbage [ 856.801670][ T5755] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 856.839170][ T5755] cdc_wdm 7-1:1.0: Unknown control protocol [ 857.001497][ C0] wdm_int_callback: 114 callbacks suppressed [ 857.001522][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 857.014135][ C0] wdm_int_callback: 114 callbacks suppressed [ 857.014147][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 857.026534][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 857.033168][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 857.040831][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 857.047451][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 857.054588][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 857.061215][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 857.067748][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 857.074385][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 857.080774][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 857.087426][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 857.093937][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 857.100583][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 857.107305][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 857.113944][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 857.120441][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 857.127081][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 857.134063][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 857.140718][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 857.228465][T10810] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.578780][ T5851] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 857.585465][T11610] tipc: Enabling of bearer rejected, already enabled [ 857.599028][ T9] usb 7-1: USB disconnect, device number 14 [ 857.605025][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 857.618404][ T5851] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 857.650722][T11610] tipc: Enabling of bearer rejected, already enabled [ 858.542978][T11630] loop7: detected capacity change from 0 to 32768 [ 858.556165][T11630] (syz.7.1347,11630,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 858.568776][T11621] fido_id[11621]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 858.588018][T11630] (syz.7.1347,11630,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 858.615541][T11630] JBD2: Ignoring recovery information on journal [ 858.630173][T11625] netlink: 'syz.5.1348': attribute type 7 has an invalid length. [ 860.209877][T11630] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 860.658991][T10810] ocfs2: Unmounting device (7,7) on (node local) [ 860.813720][ T9] hid (null): unknown global tag 0xe [ 860.832006][ T9] hid (null): unknown global tag 0xc [ 860.859394][ T9] hid-generic FF0B:0007:0008.0009: unknown main item tag 0x1 [ 860.941844][T11640] netlink: 'syz.6.1351': attribute type 29 has an invalid length. [ 861.154731][ T9] hid-generic FF0B:0007:0008.0009: unexpected long global item [ 861.356082][ T9] hid-generic: probe of FF0B:0007:0008.0009 failed with error -22 [ 862.017110][ T9271] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 862.197768][ T9271] usb 7-1: device descriptor read/64, error -71 [ 862.486626][ T9271] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 862.666634][ T9271] usb 7-1: device descriptor read/64, error -71 [ 862.828140][ T9271] usb usb7-port1: attempt power cycle [ 863.277150][ T9271] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 863.311192][ T9271] usb 7-1: device descriptor read/8, error -71 [ 863.550493][ T5828] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 863.608617][ T9271] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 863.634570][ T5828] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 863.687551][ T9271] usb 7-1: device descriptor read/8, error -71 [ 863.825411][ T9271] usb usb7-port1: unable to enumerate USB device [ 864.246626][ T5755] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 864.467253][ T5755] usb 6-1: Using ep0 maxpacket: 32 [ 864.476136][ T5755] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.491439][ T5755] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 864.500615][ T5755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.519573][ T5755] usb 6-1: config 0 descriptor?? [ 864.528022][ T5755] dw2102: su3000_identify_state [ 864.532941][ T5755] dvb-usb: found a 'TeVii S662' in warm state. [ 864.545785][ T5755] dw2102: su3000_power_ctrl: 1, initialized 0 [ 864.552102][ T5755] dvb-usb: bulk message failed: -22 (2/0) [ 864.572445][ T5755] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 864.583348][ T5755] dvbdev: DVB: registering new adapter (TeVii S662) [ 864.590071][ T5755] usb 6-1: media controller created [ 864.595377][ T5755] dvb-usb: bulk message failed: -22 (6/0) [ 864.611639][ T5755] dw2102: i2c transfer failed. [ 864.616662][ T5755] dvb-usb: bulk message failed: -22 (6/0) [ 864.622429][ T5755] dw2102: i2c transfer failed. [ 864.627322][ T5755] dvb-usb: bulk message failed: -22 (6/0) [ 864.633073][ T5755] dw2102: i2c transfer failed. [ 864.637960][ T5755] dvb-usb: bulk message failed: -22 (6/0) [ 864.643706][ T5755] dw2102: i2c transfer failed. [ 864.648896][ T5755] dvb-usb: bulk message failed: -22 (6/0) [ 864.654819][ T5755] dw2102: i2c transfer failed. [ 864.659742][ T5755] dvb-usb: bulk message failed: -22 (6/0) [ 864.665498][ T5755] dw2102: i2c transfer failed. [ 864.670408][ T5755] dvb-usb: MAC address: 02:02:02:02:02:02 [ 864.694342][ T5755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 864.737217][T11661] dvb-usb: bulk message failed: -22 (27/0) [ 864.743095][T11661] dw2102: i2c transfer failed. [ 864.777955][ T5755] dvb-usb: bulk message failed: -22 (3/0) [ 864.795920][ T5755] dw2102: command 0x0e transfer failed. [ 864.809836][ T5755] dvb-usb: bulk message failed: -22 (3/0) [ 864.822548][ T5755] dw2102: command 0x0e transfer failed. [ 864.891532][T11665] netlink: 'syz.6.1359': attribute type 7 has an invalid length. [ 866.442785][ T5755] dvb-usb: bulk message failed: -22 (3/0) [ 866.459919][ T5755] dw2102: command 0x0e transfer failed. [ 866.465525][ T5755] dvb-usb: bulk message failed: -22 (3/0) [ 866.500008][ T5755] dw2102: command 0x0e transfer failed. [ 866.515788][ T5755] dvb-usb: bulk message failed: -22 (1/0) [ 866.521658][ T5755] dw2102: command 0x51 transfer failed. [ 866.527441][ T5755] dvb-usb: bulk message failed: -22 (5/0) [ 866.533382][ T5755] dw2102: i2c probe for address 0x68 failed. [ 866.540214][ T5755] dvb-usb: bulk message failed: -22 (5/0) [ 866.546052][ T5755] dw2102: i2c probe for address 0x69 failed. [ 866.553612][ T5755] dvb-usb: bulk message failed: -22 (5/0) [ 866.568545][ T5755] dw2102: i2c probe for address 0x6a failed. [ 866.574645][ T5755] dw2102: probing for demodulator failed. Is the external power switched on? [ 866.584026][ T5755] dvb-usb: no frontend was attached by 'TeVii S662' [ 866.706391][ T5755] rc_core: IR keymap rc-tt-1500 not found [ 866.712188][ T5755] Registered IR keymap rc-empty [ 866.729832][ T5755] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 866.765613][ T5755] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input39 [ 866.816123][ T5755] dvb-usb: schedule remote query interval to 250 msecs. [ 866.866391][ T5755] dw2102: su3000_power_ctrl: 0, initialized 1 [ 866.875623][T11672] tipc: Enabling of bearer rejected, already enabled [ 866.916547][ T5755] dvb-usb: TeVii S662 successfully initialized and connected. [ 866.955163][T11672] tipc: Enabling of bearer rejected, already enabled [ 866.999930][ T5755] usb 6-1: USB disconnect, device number 19 [ 867.157681][T11670] loop7: detected capacity change from 0 to 32768 [ 867.165303][T11670] (syz.7.1362,11670,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "a" or missing value [ 867.176570][T11670] (syz.7.1362,11670,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 868.015111][ T5755] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 868.440902][ T9690] Bluetooth: hci4: command 0x0406 tx timeout [ 869.959266][ T5851] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 870.215910][ T5851] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 870.242489][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.255333][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.552507][T11703] fido_id[11703]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 870.771624][T11709] loop6: detected capacity change from 0 to 8 [ 870.800176][T11709] squashfs: Unknown parameter '' [ 871.667829][T11712] FAULT_INJECTION: forcing a failure. [ 871.667829][T11712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.726434][ T5851] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 871.773235][T11712] CPU: 0 PID: 11712 Comm: syz.7.1368 Not tainted syzkaller #0 [ 871.780769][T11712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 871.790959][T11712] Call Trace: [ 871.794264][T11712] [ 871.797249][T11712] dump_stack_lvl+0x16c/0x230 [ 871.801970][T11712] ? show_regs_print_info+0x20/0x20 [ 871.807200][T11712] ? load_image+0x3b0/0x3b0 [ 871.811725][T11712] ? __might_fault+0xaa/0x120 [ 871.816522][T11712] ? __lock_acquire+0x7c80/0x7c80 [ 871.821575][T11712] should_fail_ex+0x39d/0x4d0 [ 871.826311][T11712] _copy_from_user+0x2f/0xe0 [ 871.830927][T11712] do_ipt_set_ctl+0x68f/0xcc0 [ 871.836025][T11712] ? ipt_unregister_table_exit+0x230/0x230 [ 871.841886][T11712] ? __lock_acquire+0x7c80/0x7c80 [ 871.846972][T11712] ? rcu_is_watching+0x15/0xb0 [ 871.851770][T11712] ? trace_contention_end+0x39/0xe0 [ 871.856998][T11712] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 871.862643][T11712] ? mutex_unlock+0x10/0x10 [ 871.867143][T11712] ? aa_sk_perm+0x7fc/0x930 [ 871.871656][T11712] ? aa_af_perm+0x2b0/0x2b0 [ 871.876168][T11712] nf_setsockopt+0x263/0x280 [ 871.880775][T11712] ? sock_common_recvmsg+0x1b0/0x1b0 [ 871.886121][T11712] do_sock_setsockopt+0x175/0x1a0 [ 871.891157][T11712] ? __fdget+0x180/0x210 [ 871.895435][T11712] __x64_sys_setsockopt+0x184/0x200 [ 871.900652][T11712] do_syscall_64+0x55/0xb0 [ 871.905070][T11712] ? clear_bhb_loop+0x40/0x90 [ 871.909772][T11712] ? clear_bhb_loop+0x40/0x90 [ 871.914488][T11712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.920392][T11712] RIP: 0033:0x7fa98f78f749 [ 871.924911][T11712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.944540][T11712] RSP: 002b:00007fa9906ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 871.952984][T11712] RAX: ffffffffffffffda RBX: 00007fa98f9e6090 RCX: 00007fa98f78f749 [ 871.960973][T11712] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 871.968956][T11712] RBP: 00007fa9906ae090 R08: 00000000000003d0 R09: 0000000000000000 [ 871.976931][T11712] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000001 [ 871.984931][T11712] R13: 00007fa98f9e6128 R14: 00007fa98f9e6090 R15: 00007ffe215362b8 [ 871.992924][T11712] [ 872.116449][ T5851] usb 6-1: Using ep0 maxpacket: 32 [ 872.135561][ T5851] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.164750][ T5851] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 872.207256][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.266694][ T5851] usb 6-1: config 0 descriptor?? [ 872.290953][ T5851] dw2102: su3000_identify_state [ 872.301266][ T5851] dvb-usb: found a 'TeVii S662' in warm state. [ 872.326576][ T5851] dw2102: su3000_power_ctrl: 1, initialized 0 [ 872.334401][ T5851] dvb-usb: bulk message failed: -22 (2/0) [ 872.364567][ T5851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 872.498894][T11708] dvb-usb: bulk message failed: -22 (27/0) [ 872.504773][T11708] dw2102: i2c transfer failed. [ 872.581288][ T5851] dvbdev: DVB: registering new adapter (TeVii S662) [ 872.649797][T11720] xt_ecn: cannot match TCP bits for non-tcp packets [ 873.386545][ T5851] usb 6-1: media controller created [ 873.391788][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 873.426380][ T5851] dw2102: i2c transfer failed. [ 873.459824][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 873.488154][ T5851] dw2102: i2c transfer failed. [ 873.508740][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 873.543532][ T5851] dw2102: i2c transfer failed. [ 873.574141][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 873.591842][ T5851] dw2102: i2c transfer failed. [ 873.610816][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 873.635547][ T5851] dw2102: i2c transfer failed. [ 873.651264][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 873.702159][ T5851] dw2102: i2c transfer failed. [ 873.726656][ T5851] dvb-usb: MAC address: 02:02:02:02:02:02 [ 873.778269][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 874.014797][ T5851] dvb-usb: bulk message failed: -22 (3/0) [ 874.030501][T11728] xt_ecn: cannot match TCP bits for non-tcp packets [ 874.065636][ T5851] dw2102: command 0x0e transfer failed. [ 874.865052][ T5851] dvb-usb: bulk message failed: -22 (3/0) [ 874.890016][ T5851] dw2102: command 0x0e transfer failed. [ 874.962161][T11732] loop5: detected capacity change from 0 to 8 [ 875.001579][T11732] SQUASHFS error: lzo decompression failed, data probably corrupt [ 875.037112][T11731] loop7: detected capacity change from 0 to 64 [ 875.040186][T11732] SQUASHFS error: Failed to read block 0x91: -5 [ 875.098651][T11732] SQUASHFS error: Unable to read metadata cache entry [8f] [ 875.125470][T11732] SQUASHFS error: Unable to read inode 0x11f [ 875.217895][ T5851] dvb-usb: bulk message failed: -22 (3/0) [ 875.258961][ T5851] dw2102: command 0x0e transfer failed. [ 875.296082][ T5851] dvb-usb: bulk message failed: -22 (3/0) [ 875.363718][ T5851] dw2102: command 0x0e transfer failed. [ 875.391940][T11732] loop5: detected capacity change from 0 to 1024 [ 875.398548][ T5851] dvb-usb: bulk message failed: -22 (1/0) [ 875.424589][ T5851] dw2102: command 0x51 transfer failed. [ 875.466094][T11732] EXT4-fs: Ignoring removed orlov option [ 875.471907][ T5851] dvb-usb: bulk message failed: -22 (5/0) [ 875.491056][T11732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 875.498356][ T5851] dw2102: i2c probe for address 0x68 failed. [ 875.511336][ T5851] dvb-usb: bulk message failed: -22 (5/0) [ 875.542693][ T5851] dw2102: i2c probe for address 0x69 failed. [ 875.586354][ T5851] dvb-usb: bulk message failed: -22 (5/0) [ 875.597730][T11732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 875.644552][ T5851] dw2102: i2c probe for address 0x6a failed. [ 875.695502][ T5851] dw2102: probing for demodulator failed. Is the external power switched on? [ 875.739879][ T5851] dvb-usb: no frontend was attached by 'TeVii S662' [ 875.880373][T10040] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.977377][ T5851] rc_core: IR keymap rc-tt-1500 not found [ 875.998784][ T5851] Registered IR keymap rc-empty [ 876.017426][ T5851] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 876.066646][ T5851] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input40 [ 876.076845][T11738] loop6: detected capacity change from 0 to 8 [ 876.226884][ T5851] dvb-usb: schedule remote query interval to 250 msecs. [ 876.233899][ T5851] dw2102: su3000_power_ctrl: 0, initialized 1 [ 876.240059][ T5851] dvb-usb: TeVii S662 successfully initialized and connected. [ 876.284384][ T5851] usb 6-1: USB disconnect, device number 20 [ 876.545848][T11738] SQUASHFS error: lzo decompression failed, data probably corrupt [ 876.594607][T11738] SQUASHFS error: Failed to read block 0x91: -5 [ 876.647236][ T5851] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 876.675660][T11738] SQUASHFS error: Unable to read metadata cache entry [8f] [ 876.758203][T11738] SQUASHFS error: Unable to read inode 0x11f [ 877.038952][T11738] loop6: detected capacity change from 0 to 1024 [ 877.056743][T11738] EXT4-fs: Ignoring removed orlov option [ 877.062446][T11738] EXT4-fs: Ignoring removed nomblk_io_submit option [ 877.152537][T11738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.260090][T11751] netlink: 'syz.5.1379': attribute type 7 has an invalid length. [ 879.032856][T10533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.080654][T11761] netlink: 'syz.2.1383': attribute type 10 has an invalid length. [ 880.322042][T11761] team0: Device veth1_macvtap failed to register rx_handler [ 880.414830][T11768] loop7: detected capacity change from 0 to 8 [ 880.421729][T11768] squashfs: Unknown parameter '' [ 880.497420][ T8512] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 880.557495][T11769] autofs4:pid:11769:autofs_fill_super: called with bogus options [ 880.567581][T11767] devtmpfs: Cannot enable quota on remount [ 880.800556][T11770] netlink: 'syz.6.1382': attribute type 10 has an invalid length. [ 881.251902][T11770] team0: Device veth1_macvtap failed to register rx_handler [ 882.304441][T11784] loop6: detected capacity change from 0 to 8 [ 882.315705][T11784] squashfs: Unknown parameter '' [ 883.282318][T11791] loop6: detected capacity change from 0 to 8 [ 883.473412][T11791] SQUASHFS error: lzo decompression failed, data probably corrupt [ 883.482341][T11791] SQUASHFS error: Failed to read block 0x91: -5 [ 883.488752][T11791] SQUASHFS error: Unable to read metadata cache entry [8f] [ 883.496054][T11791] SQUASHFS error: Unable to read inode 0x11f [ 883.674073][ T5828] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 883.802821][ T8512] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 883.808999][ T5828] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 883.964722][T11791] loop6: detected capacity change from 0 to 1024 [ 884.003010][T11794] fido_id[11794]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 884.006428][T11791] EXT4-fs: Ignoring removed orlov option [ 884.088917][T11791] EXT4-fs: Ignoring removed nomblk_io_submit option [ 884.282037][T11791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 884.578840][T11806] loop5: detected capacity change from 0 to 8 [ 884.585846][T11806] squashfs: Unknown parameter '' [ 884.662477][T11806] autofs4:pid:11806:autofs_fill_super: called with bogus options [ 885.049444][ T6761] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 885.141607][ T5828] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 885.152051][ T5828] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 885.432665][T10533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.495524][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1399'. [ 885.527996][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1399'. [ 885.583902][T11814] fido_id[11814]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 885.698601][T11818] loop7: detected capacity change from 0 to 1024 [ 885.757152][T11818] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 889.433142][ T5850] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 889.473117][ T5850] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 891.474693][T11852] FAULT_INJECTION: forcing a failure. [ 891.474693][T11852] name failslab, interval 1, probability 0, space 0, times 0 [ 891.487471][T11852] CPU: 1 PID: 11852 Comm: syz.5.1405 Not tainted syzkaller #0 [ 891.494964][T11852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 891.505038][T11852] Call Trace: [ 891.508338][T11852] [ 891.511286][T11852] dump_stack_lvl+0x16c/0x230 [ 891.516002][T11852] ? show_regs_print_info+0x20/0x20 [ 891.521242][T11852] ? load_image+0x3b0/0x3b0 [ 891.525781][T11852] ? __might_sleep+0xe0/0xe0 [ 891.530402][T11852] ? __lock_acquire+0x7c80/0x7c80 [ 891.535536][T11852] ? lockdep_hardirqs_on+0x98/0x150 [ 891.540859][T11852] should_fail_ex+0x39d/0x4d0 [ 891.545574][T11852] should_failslab+0x9/0x20 [ 891.550102][T11852] slab_pre_alloc_hook+0x59/0x310 [ 891.555157][T11852] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.560906][T11852] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.566659][T11852] __kmem_cache_alloc_node+0x53/0x260 [ 891.572065][T11852] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.577820][T11852] __kmalloc+0xa4/0x240 [ 891.582015][T11852] tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.587618][T11852] tomoyo_path_number_perm+0x1ea/0x590 [ 891.593113][T11852] ? tomoyo_path_number_perm+0x1ba/0x590 [ 891.598774][T11852] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 891.604264][T11852] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 891.610324][T11852] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 891.616023][T11852] ? __se_sys_ioctl+0x31/0x170 [ 891.620819][T11852] security_file_ioctl+0x70/0xa0 [ 891.625797][T11852] __se_sys_ioctl+0x48/0x170 [ 891.630419][T11852] do_syscall_64+0x55/0xb0 [ 891.634853][T11852] ? clear_bhb_loop+0x40/0x90 [ 891.639558][T11852] ? clear_bhb_loop+0x40/0x90 [ 891.644272][T11852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.650196][T11852] RIP: 0033:0x7f97b5d8f749 [ 891.654631][T11852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.674255][T11852] RSP: 002b:00007f97b6b7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.682692][T11852] RAX: ffffffffffffffda RBX: 00007f97b5fe6180 RCX: 00007f97b5d8f749 [ 891.690687][T11852] RDX: 0000200000000040 RSI: 00000000a0044d07 RDI: 000000000000000a [ 891.698688][T11852] RBP: 00007f97b6b7b090 R08: 0000000000000000 R09: 0000000000000000 [ 891.706680][T11852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.714669][T11852] R13: 00007f97b5fe6218 R14: 00007f97b5fe6180 R15: 00007ffd71f53168 [ 891.722682][T11852] [ 891.729590][T11852] ERROR: Out of memory at tomoyo_realpath_from_path. [ 892.676986][T11859] loop6: detected capacity change from 0 to 8 [ 892.697152][T11859] SQUASHFS error: lzo decompression failed, data probably corrupt [ 892.718572][T11859] SQUASHFS error: Failed to read block 0x91: -5 [ 893.022847][T11859] SQUASHFS error: Unable to read metadata cache entry [8f] [ 893.046705][T11859] SQUASHFS error: Unable to read inode 0x11f [ 893.060706][T11860] loop5: detected capacity change from 0 to 8 [ 893.067739][T11860] squashfs: Unknown parameter '' [ 893.094317][T11862] devtmpfs: Cannot enable quota on remount [ 893.102838][ T8512] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 893.114794][T11860] autofs4:pid:11860:autofs_fill_super: called with bogus options [ 893.596642][T11863] netlink: 'syz.7.1409': attribute type 10 has an invalid length. [ 893.780895][T11863] team0: Device veth1_macvtap failed to register rx_handler [ 893.798553][T11859] loop6: detected capacity change from 0 to 1024 [ 893.985079][T11859] EXT4-fs: Ignoring removed orlov option [ 893.992407][T11859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 894.130624][T11859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.700668][ T5755] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 894.717672][ T5755] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 894.743858][T11870] tipc: Enabling of bearer rejected, already enabled [ 895.096068][T11880] loop7: detected capacity change from 0 to 256 [ 895.129686][T11880] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 895.307581][T10533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.747417][T11886] loop6: detected capacity change from 0 to 8 [ 895.760096][T11886] SQUASHFS error: lzo decompression failed, data probably corrupt [ 895.772860][T11886] SQUASHFS error: Failed to read block 0x91: -5 [ 895.779288][T11886] SQUASHFS error: Unable to read metadata cache entry [8f] [ 895.789652][T11886] SQUASHFS error: Unable to read inode 0x11f [ 896.009761][T11890] loop7: detected capacity change from 0 to 8 [ 896.017035][T11890] squashfs: Unknown parameter '' [ 896.740245][ T8512] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 896.896059][T11886] loop6: detected capacity change from 0 to 1024 [ 896.935193][T11886] EXT4-fs: Ignoring removed orlov option [ 896.977853][T11886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 897.042772][T11886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.230603][T10533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.661391][T11907] autofs4:pid:11907:autofs_fill_super: called with bogus options [ 897.690772][T11901] loop5: detected capacity change from 0 to 32768 [ 897.736698][ T9271] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 897.916478][ T9271] usb 7-1: Using ep0 maxpacket: 32 [ 897.925307][ T9271] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.935606][ T9271] usb 7-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 897.945828][ T9271] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.979122][ T9271] usb 7-1: config 0 descriptor?? [ 898.002917][ T9271] dw2102: su3000_identify_state [ 898.010264][ T9271] dvb-usb: found a 'TeVii S662' in warm state. [ 898.020565][ T9271] dw2102: su3000_power_ctrl: 1, initialized 0 [ 898.022466][T11908] loop5: detected capacity change from 0 to 4096 [ 898.028217][ T9271] dvb-usb: bulk message failed: -22 (2/0) [ 898.048223][T11908] NILFS (loop5): unrecognized mount option "reiserfs" [ 898.061914][ T9271] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 898.075274][ T9271] dvbdev: DVB: registering new adapter (TeVii S662) [ 898.085511][ T9271] usb 7-1: media controller created [ 898.093381][ T9271] dvb-usb: bulk message failed: -22 (6/0) [ 898.100408][ T9271] dw2102: i2c transfer failed. [ 898.105464][ T9271] dvb-usb: bulk message failed: -22 (6/0) [ 898.111593][ T9271] dw2102: i2c transfer failed. [ 898.117036][ T9271] dvb-usb: bulk message failed: -22 (6/0) [ 898.128221][ T9271] dw2102: i2c transfer failed. [ 898.138536][ T9271] dvb-usb: bulk message failed: -22 (6/0) [ 898.144393][ T9271] dw2102: i2c transfer failed. [ 898.156888][ T9271] dvb-usb: bulk message failed: -22 (6/0) [ 898.169158][ T9271] dw2102: i2c transfer failed. [ 898.184287][ T9271] dvb-usb: bulk message failed: -22 (6/0) [ 898.225469][ T9271] dw2102: i2c transfer failed. [ 898.237212][T11903] dvb-usb: bulk message failed: -22 (27/0) [ 898.243074][T11903] dw2102: i2c transfer failed. [ 898.252914][ T9271] dvb-usb: MAC address: 02:02:02:02:02:02 [ 898.309889][ T9271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 898.393919][ T9271] dvb-usb: bulk message failed: -22 (3/0) [ 898.412161][T11912] devtmpfs: Cannot enable quota on remount [ 898.422739][T11912] netlink: 'syz.2.1422': attribute type 10 has an invalid length. [ 898.431583][T11912] team0: Device veth1_macvtap failed to register rx_handler [ 898.448642][ T9271] dw2102: command 0x0e transfer failed. [ 898.454631][ T9271] dvb-usb: bulk message failed: -22 (3/0) [ 898.460805][ T9271] dw2102: command 0x0e transfer failed. [ 898.826478][ T9271] dvb-usb: bulk message failed: -22 (3/0) [ 898.832373][ T9271] dw2102: command 0x0e transfer failed. [ 898.838381][ T9271] dvb-usb: bulk message failed: -22 (3/0) [ 898.850181][ T9271] dw2102: command 0x0e transfer failed. [ 898.856169][ T9271] dvb-usb: bulk message failed: -22 (1/0) [ 898.878342][ T9271] dw2102: command 0x51 transfer failed. [ 899.051009][ T9271] dvb-usb: bulk message failed: -22 (5/0) [ 899.069868][ T5851] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 899.086561][ T9271] dw2102: i2c probe for address 0x68 failed. [ 899.095644][ T5851] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 899.154255][ T9271] dvb-usb: bulk message failed: -22 (5/0) [ 899.189293][ T9271] dw2102: i2c probe for address 0x69 failed. [ 899.195360][ T9271] dvb-usb: bulk message failed: -22 (5/0) [ 899.287652][ T9271] dw2102: i2c probe for address 0x6a failed. [ 899.293709][ T9271] dw2102: probing for demodulator failed. Is the external power switched on? [ 899.335541][ T9271] dvb-usb: no frontend was attached by 'TeVii S662' [ 899.447369][T11924] FAULT_INJECTION: forcing a failure. [ 899.447369][T11924] name failslab, interval 1, probability 0, space 0, times 0 [ 899.473156][T11924] CPU: 1 PID: 11924 Comm: syz.5.1425 Not tainted syzkaller #0 [ 899.480686][T11924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 899.490775][T11924] Call Trace: [ 899.494085][T11924] [ 899.497071][T11924] dump_stack_lvl+0x16c/0x230 [ 899.501802][T11924] ? show_regs_print_info+0x20/0x20 [ 899.507060][T11924] ? load_image+0x3b0/0x3b0 [ 899.511607][T11924] ? __might_sleep+0xe0/0xe0 [ 899.516247][T11924] ? __lock_acquire+0x7c80/0x7c80 [ 899.521303][T11924] should_fail_ex+0x39d/0x4d0 [ 899.526030][T11924] should_failslab+0x9/0x20 [ 899.530573][T11924] slab_pre_alloc_hook+0x59/0x310 [ 899.535640][T11924] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 899.541403][T11924] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 899.547167][T11924] __kmem_cache_alloc_node+0x53/0x260 [ 899.552590][T11924] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 899.558359][T11924] __kmalloc+0xa4/0x240 [ 899.562557][T11924] tomoyo_realpath_from_path+0xe3/0x5d0 [ 899.568186][T11924] tomoyo_path_number_perm+0x1ea/0x590 [ 899.573756][T11924] ? tomoyo_path_number_perm+0x1ba/0x590 [ 899.579438][T11924] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 899.584954][T11924] ? ksys_write+0x1c1/0x250 [ 899.589536][T11924] ? __fget_files+0x28/0x4d0 [ 899.594179][T11924] security_file_ioctl+0x70/0xa0 [ 899.599159][T11924] __se_sys_ioctl+0x48/0x170 [ 899.603787][T11924] do_syscall_64+0x55/0xb0 [ 899.608236][T11924] ? clear_bhb_loop+0x40/0x90 [ 899.612963][T11924] ? clear_bhb_loop+0x40/0x90 [ 899.617689][T11924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.623618][T11924] RIP: 0033:0x7f97b5d8f749 [ 899.628064][T11924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.647711][T11924] RSP: 002b:00007f97b6bbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 899.656164][T11924] RAX: ffffffffffffffda RBX: 00007f97b5fe5fa0 RCX: 00007f97b5d8f749 [ 899.664178][T11924] RDX: 0000200000000fc0 RSI: 00000000000007a8 RDI: 0000000000000003 [ 899.672179][T11924] RBP: 00007f97b6bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 899.680180][T11924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.688174][T11924] R13: 00007f97b5fe6038 R14: 00007f97b5fe5fa0 R15: 00007ffd71f53168 [ 899.696187][T11924] [ 899.702894][T11924] ERROR: Out of memory at tomoyo_realpath_from_path. [ 899.736440][ T9271] rc_core: IR keymap rc-tt-1500 not found [ 899.742211][ T9271] Registered IR keymap rc-empty [ 899.760875][ T9271] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 899.778702][ T9271] input: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input41 [ 899.803502][ T9271] dvb-usb: schedule remote query interval to 250 msecs. [ 899.813594][ T9271] dw2102: su3000_power_ctrl: 0, initialized 1 [ 899.826349][ T9271] dvb-usb: TeVii S662 successfully initialized and connected. [ 899.856916][ T9271] usb 7-1: USB disconnect, device number 19 [ 899.941297][ T9271] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 899.959398][ T9681] Bluetooth: hci4: command 0x0406 tx timeout [ 900.191475][T11933] xt_cgroup: path and classid specified [ 900.596913][ T9271] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 900.827533][ T9271] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 900.837596][ T9271] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 900.889454][ T9271] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 900.904594][ T9271] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 900.915921][ T9271] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 900.941330][ T9271] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 900.950779][ T9271] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 900.963666][ T9271] usb 7-1: Product: syz [ 900.969332][ T9271] usb 7-1: Manufacturer: syz [ 901.040434][ T9271] cdc_wdm 7-1:1.0: skipping garbage [ 901.045688][ T9271] cdc_wdm 7-1:1.0: skipping garbage [ 901.065221][ T9271] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 901.096354][ T9271] cdc_wdm 7-1:1.0: Unknown control protocol [ 901.297272][ C0] wdm_int_callback: 1992 callbacks suppressed [ 901.297296][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 901.310021][ C0] wdm_int_callback: 1992 callbacks suppressed [ 901.310040][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 901.324557][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 901.331197][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 901.347160][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 901.353805][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 901.360107][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 901.366752][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 901.373544][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 901.380202][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 901.386718][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 901.393358][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 901.399886][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 901.406518][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 901.413004][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 901.419634][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 901.425970][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 901.432601][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 901.439065][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 901.445793][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 901.452002][ T172] usb 7-1: USB disconnect, device number 20 [ 901.458132][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 901.543111][T11919] tipc: Enabling of bearer rejected, already enabled [ 901.584733][T11919] tipc: Enabling of bearer rejected, already enabled [ 901.874843][T11939] loop7: detected capacity change from 0 to 32768 [ 902.424667][T11947] xt_cgroup: path and classid specified [ 903.265160][T11939] loop7: detected capacity change from 0 to 8192 [ 903.292130][T11939] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 903.334116][T11939] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 903.376733][T11939] REISERFS (device loop7): using ordered data mode [ 903.383286][T11939] reiserfs: using flush barriers [ 903.407094][T11939] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 903.453239][T11939] REISERFS (device loop7): checking transaction log (loop7) [ 903.480174][T11939] REISERFS (device loop7): Using r5 hash to sort names [ 903.502902][T11939] reiserfs: enabling write barrier flush mode [ 903.517782][T11939] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 903.535547][T11939] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 903.546406][T11939] REISERFS (device loop7): Remounting filesystem read-only [ 903.553966][T11939] REISERFS error (device loop7): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 903.556693][ T9271] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 903.570350][T11939] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 903.591529][T11939] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 903.602544][T11939] REISERFS error (device loop7): zam-7001 reiserfs_find_entry: io error [ 903.612266][T11939] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 903.628197][T11939] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 903.639242][T11939] REISERFS error (device loop7): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 903.652909][T11939] REISERFS warning (device loop7): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 903.682775][T11939] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 903.700255][T11939] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 903.710964][T11939] REISERFS (device loop7): Remounting filesystem read-only [ 903.718484][T11939] REISERFS error (device loop7): zam-7001 reiserfs_find_entry: io error [ 903.805061][ T9271] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 903.816121][ T9271] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 903.836256][ T9271] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 903.859083][ T9271] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 903.877221][ T9271] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 903.899821][T11958] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 903.907364][ T9271] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 903.946195][T11958] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 903.946229][ T9271] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 903.973916][ T9271] usb 7-1: Product: syz [ 903.983942][ T9271] usb 7-1: Manufacturer: syz [ 903.989030][T11958] REISERFS error (device loop7): zam-7001 reiserfs_find_entry: io error [ 903.991824][T11959] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 904.028883][ T9271] cdc_wdm 7-1:1.0: skipping garbage [ 904.035341][T11959] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 904.042000][ T9271] cdc_wdm 7-1:1.0: skipping garbage [ 904.063442][ T9271] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 904.072774][ T9271] cdc_wdm 7-1:1.0: Unknown control protocol [ 904.074238][T11959] REISERFS error (device loop7): zam-7001 reiserfs_find_entry: io error [ 904.254070][ T172] usb 7-1: USB disconnect, device number 21 [ 904.260260][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 904.477930][T11956] tipc: Enabling of bearer rejected, already enabled [ 904.525852][T11956] tipc: Enabling of bearer rejected, already enabled [ 905.245517][T11961] loop5: detected capacity change from 0 to 32768 [ 905.276614][T11961] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1435 (11961) [ 905.316950][T11961] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 905.335135][T11961] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 905.344933][T11961] BTRFS info (device loop5): enabling auto defrag [ 905.351550][T11961] BTRFS info (device loop5): force clearing of disk cache [ 905.359081][T11961] BTRFS info (device loop5): enabling disk space caching [ 905.373801][T11961] BTRFS info (device loop5): max_inline at 0 [ 905.383772][T11961] BTRFS info (device loop5): disk space caching is enabled [ 905.627736][T11961] BTRFS info (device loop5): enabling ssd optimizations [ 905.642347][T11993] FAULT_INJECTION: forcing a failure. [ 905.642347][T11993] name failslab, interval 1, probability 0, space 0, times 0 [ 905.655301][T11961] BTRFS info (device loop5): auto enabling async discard [ 905.676118][T11961] BTRFS info (device loop5): rebuilding free space tree [ 905.694432][T11993] CPU: 0 PID: 11993 Comm: syz.6.1439 Not tainted syzkaller #0 [ 905.701925][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 905.712008][T11993] Call Trace: [ 905.715308][T11993] [ 905.718281][T11993] dump_stack_lvl+0x16c/0x230 [ 905.723002][T11993] ? show_regs_print_info+0x20/0x20 [ 905.728240][T11993] ? load_image+0x3b0/0x3b0 [ 905.732782][T11993] ? __might_sleep+0xe0/0xe0 [ 905.737406][T11993] ? __lock_acquire+0x7c80/0x7c80 [ 905.742461][T11993] should_fail_ex+0x39d/0x4d0 [ 905.747183][T11993] should_failslab+0x9/0x20 [ 905.751720][T11993] slab_pre_alloc_hook+0x59/0x310 [ 905.756782][T11993] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 905.762543][T11993] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 905.768304][T11993] __kmem_cache_alloc_node+0x53/0x260 [ 905.773714][T11993] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 905.779474][T11993] __kmalloc+0xa4/0x240 [ 905.783664][T11993] tomoyo_realpath_from_path+0xe3/0x5d0 [ 905.789272][T11993] tomoyo_path_number_perm+0x1ea/0x590 [ 905.794766][T11993] ? tomoyo_path_number_perm+0x1ba/0x590 [ 905.800433][T11993] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 905.805958][T11993] ? ksys_write+0x1c1/0x250 [ 905.810546][T11993] ? __fget_files+0x28/0x4d0 [ 905.815176][T11993] security_file_ioctl+0x70/0xa0 [ 905.820151][T11993] __se_sys_ioctl+0x48/0x170 [ 905.824773][T11993] do_syscall_64+0x55/0xb0 [ 905.829217][T11993] ? clear_bhb_loop+0x40/0x90 [ 905.833948][T11993] ? clear_bhb_loop+0x40/0x90 [ 905.838666][T11993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 905.844598][T11993] RIP: 0033:0x7f08be98f749 [ 905.849054][T11993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.868682][T11993] RSP: 002b:00007f08bf7f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 905.877123][T11993] RAX: ffffffffffffffda RBX: 00007f08bebe5fa0 RCX: 00007f08be98f749 [ 905.885119][T11993] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000003 [ 905.893115][T11993] RBP: 00007f08bf7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 905.901116][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.909115][T11993] R13: 00007f08bebe6038 R14: 00007f08bebe5fa0 R15: 00007ffc79a99878 [ 905.917117][T11993] [ 905.937849][ T9681] Bluetooth: hci4: command 0x0406 tx timeout [ 905.982503][T11993] ERROR: Out of memory at tomoyo_realpath_from_path. [ 906.014956][T11961] BTRFS info (device loop5): disabling free space tree [ 906.046666][T11961] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 906.122511][T11961] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 906.382226][T11998] FAULT_INJECTION: forcing a failure. [ 906.382226][T11998] name failslab, interval 1, probability 0, space 0, times 0 [ 906.395979][T11998] CPU: 1 PID: 11998 Comm: syz.6.1442 Not tainted syzkaller #0 [ 906.403485][T11998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 906.413564][T11998] Call Trace: [ 906.416857][T11998] [ 906.419789][T11998] dump_stack_lvl+0x16c/0x230 [ 906.424482][T11998] ? show_regs_print_info+0x20/0x20 [ 906.429698][T11998] ? load_image+0x3b0/0x3b0 [ 906.434214][T11998] ? __lock_acquire+0x7c80/0x7c80 [ 906.439257][T11998] should_fail_ex+0x39d/0x4d0 [ 906.443961][T11998] should_failslab+0x9/0x20 [ 906.448481][T11998] slab_pre_alloc_hook+0x59/0x310 [ 906.453530][T11998] ? rcu_is_watching+0x15/0xb0 [ 906.458317][T11998] ? kvmalloc_node+0x70/0x180 [ 906.463005][T11998] ? kvmalloc_node+0x70/0x180 [ 906.467693][T11998] __kmem_cache_alloc_node+0x53/0x260 [ 906.473083][T11998] ? kvmalloc_node+0x70/0x180 [ 906.477770][T11998] __kmalloc_node+0xa4/0x230 [ 906.482376][T11998] kvmalloc_node+0x70/0x180 [ 906.486894][T11998] traverse+0xdd/0x560 [ 906.490975][T11998] ? aa_file_perm+0x120/0xec0 [ 906.495671][T11998] ? __lock_acquire+0x7c80/0x7c80 [ 906.500706][T11998] seq_read_iter+0xc4f/0xd50 [ 906.505319][T11998] seq_read+0x15d/0x1f0 [ 906.509489][T11998] ? seq_open+0x140/0x140 [ 906.513841][T11998] ? end_current_label_crit_section+0x149/0x170 [ 906.520104][T11998] ? seq_open+0x140/0x140 [ 906.524438][T11998] proc_reg_read+0x1e4/0x2d0 [ 906.529042][T11998] do_iter_read+0x506/0xc80 [ 906.533567][T11998] ? proc_reg_get_unmapped_area+0x380/0x380 [ 906.539474][T11998] ? vfs_iter_read+0xa0/0xa0 [ 906.544082][T11998] ? __import_iovec+0x5f2/0x860 [ 906.548976][T11998] ? import_iovec+0x73/0xa0 [ 906.553500][T11998] do_preadv+0x1fa/0x330 [ 906.557771][T11998] ? do_writev+0x410/0x410 [ 906.562214][T11998] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 906.568206][T11998] ? lock_chain_count+0x20/0x20 [ 906.573063][T11998] ? lockdep_hardirqs_on+0x98/0x150 [ 906.578266][T11998] do_syscall_64+0x55/0xb0 [ 906.582682][T11998] ? clear_bhb_loop+0x40/0x90 [ 906.587367][T11998] ? clear_bhb_loop+0x40/0x90 [ 906.592056][T11998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 906.597960][T11998] RIP: 0033:0x7f08be98f749 [ 906.602388][T11998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.622004][T11998] RSP: 002b:00007f08bf7f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 906.630426][T11998] RAX: ffffffffffffffda RBX: 00007f08bebe5fa0 RCX: 00007f08be98f749 [ 906.638400][T11998] RDX: 0000000000000001 RSI: 0000200000002400 RDI: 0000000000000005 [ 906.646379][T11998] RBP: 00007f08bf7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 906.654355][T11998] R10: 00000000000039c5 R11: 0000000000000246 R12: 0000000000000001 [ 906.662330][T11998] R13: 00007f08bebe6038 R14: 00007f08bebe5fa0 R15: 00007ffc79a99878 [ 906.670321][T11998] [ 906.682865][ T9681] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 906.694519][ T9681] Bluetooth: hci2: Injecting HCI hardware error event [ 906.703072][ T9681] Bluetooth: hci2: hardware error 0x00 [ 906.785467][ T27] audit: type=1804 audit(2000000131.650:62): pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1435" name="/newroot/113/file0/file1" dev="loop5" ino=260 res=1 errno=0 [ 906.950468][T10040] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 907.358129][T12013] autofs4:pid:12013:autofs_fill_super: called with bogus options [ 907.983311][ T5755] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 907.997790][ T5755] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 908.757515][ T9681] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 908.886486][ T172] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 909.077481][ T172] usb 6-1: Using ep0 maxpacket: 32 [ 909.116825][ T172] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.186528][ T172] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 909.195628][ T172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.258562][ T172] usb 6-1: config 0 descriptor?? [ 909.324855][ T172] dw2102: su3000_identify_state [ 909.556544][ T172] dvb-usb: found a 'TeVii S662' in warm state. [ 909.563815][ T172] dw2102: su3000_power_ctrl: 1, initialized 0 [ 909.570584][T12029] tipc: Enabling of bearer rejected, already enabled [ 909.580412][ T172] dvb-usb: bulk message failed: -22 (2/0) [ 909.589933][ T172] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 909.604455][ T172] dvbdev: DVB: registering new adapter (TeVii S662) [ 909.614678][T12029] tipc: Enabling of bearer rejected, already enabled [ 909.616435][ T172] usb 6-1: media controller created [ 909.640767][ T172] dvb-usb: bulk message failed: -22 (6/0) [ 909.650933][ T172] dw2102: i2c transfer failed. [ 909.659046][ T172] dvb-usb: bulk message failed: -22 (6/0) [ 909.670769][ T172] dw2102: i2c transfer failed. [ 909.680571][ T172] dvb-usb: bulk message failed: -22 (6/0) [ 909.694421][ T172] dw2102: i2c transfer failed. [ 909.703583][ T172] dvb-usb: bulk message failed: -22 (6/0) [ 909.712918][ T172] dw2102: i2c transfer failed. [ 909.721030][ T172] dvb-usb: bulk message failed: -22 (6/0) [ 909.729995][ T172] dw2102: i2c transfer failed. [ 909.739252][ T172] dvb-usb: bulk message failed: -22 (6/0) [ 909.748265][ T172] dw2102: i2c transfer failed. [ 909.756401][ T172] dvb-usb: MAC address: 02:02:02:02:02:02 [ 909.799514][ T172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 909.838975][ T172] dvb-usb: bulk message failed: -22 (3/0) [ 909.850213][ T172] dw2102: command 0x0e transfer failed. [ 909.860130][ T172] dvb-usb: bulk message failed: -22 (3/0) [ 909.870289][ T172] dw2102: command 0x0e transfer failed. [ 910.287005][ T172] dvb-usb: bulk message failed: -22 (3/0) [ 910.292898][ T172] dw2102: command 0x0e transfer failed. [ 910.309878][ T172] dvb-usb: bulk message failed: -22 (3/0) [ 910.315682][ T172] dw2102: command 0x0e transfer failed. [ 910.321726][ T172] dvb-usb: bulk message failed: -22 (1/0) [ 910.329913][ T172] dw2102: command 0x51 transfer failed. [ 910.335510][ T172] dvb-usb: bulk message failed: -22 (5/0) [ 910.346773][ T172] dw2102: i2c probe for address 0x68 failed. [ 910.352894][ T172] dvb-usb: bulk message failed: -22 (5/0) [ 910.386332][ T172] dw2102: i2c probe for address 0x69 failed. [ 910.410147][ T172] dvb-usb: bulk message failed: -22 (5/0) [ 910.429492][ T172] dw2102: i2c probe for address 0x6a failed. [ 910.430466][T12038] FAULT_INJECTION: forcing a failure. [ 910.430466][T12038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.435489][ T172] dw2102: probing for demodulator failed. Is the external power switched on? [ 910.435503][ T172] dvb-usb: no frontend was attached by 'TeVii S662' [ 910.442010][T12026] loop7: detected capacity change from 0 to 32768 [ 910.542441][T12026] (syz.7.1448,12026,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 910.566486][T12038] CPU: 0 PID: 12038 Comm: syz.6.1453 Not tainted syzkaller #0 [ 910.573995][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 910.584060][T12038] Call Trace: [ 910.587344][T12038] [ 910.590271][T12038] dump_stack_lvl+0x16c/0x230 [ 910.594962][T12038] ? show_regs_print_info+0x20/0x20 [ 910.600172][T12038] ? load_image+0x3b0/0x3b0 [ 910.604686][T12038] ? __might_fault+0xaa/0x120 [ 910.609364][T12038] ? __lock_acquire+0x7c80/0x7c80 [ 910.614392][T12038] should_fail_ex+0x39d/0x4d0 [ 910.619075][T12038] _copy_from_user+0x2f/0xe0 [ 910.623663][T12038] ucma_write+0x161/0x2e0 [ 910.628002][T12038] ? ucma_get_global_nl_info+0x70/0x70 [ 910.633473][T12038] ? fsnotify_perm+0x5d/0x5e0 [ 910.638182][T12038] ? security_file_permission+0x79/0xa0 [ 910.643771][T12038] ? ucma_get_global_nl_info+0x70/0x70 [ 910.649238][T12038] vfs_write+0x288/0x940 [ 910.653486][T12038] ? file_end_write+0x250/0x250 [ 910.658342][T12038] ? __fget_files+0x28/0x4d0 [ 910.662948][T12038] ? __fget_files+0x44a/0x4d0 [ 910.667655][T12038] ? __fdget_pos+0x1d8/0x330 [ 910.672266][T12038] ? ksys_write+0x75/0x250 [ 910.676795][T12038] ksys_write+0x147/0x250 [ 910.681132][T12038] ? __ia32_sys_read+0x90/0x90 [ 910.685900][T12038] ? lockdep_hardirqs_on+0x98/0x150 [ 910.691116][T12038] do_syscall_64+0x55/0xb0 [ 910.695551][T12038] ? clear_bhb_loop+0x40/0x90 [ 910.700261][T12038] ? clear_bhb_loop+0x40/0x90 [ 910.705020][T12038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 910.710936][T12038] RIP: 0033:0x7f08be98f749 [ 910.715373][T12038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.734994][T12038] RSP: 002b:00007f08bf7f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 910.743425][T12038] RAX: ffffffffffffffda RBX: 00007f08bebe5fa0 RCX: 00007f08be98f749 [ 910.751404][T12038] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000004 [ 910.759463][T12038] RBP: 00007f08bf7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 910.767434][T12038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.775406][T12038] R13: 00007f08bebe6038 R14: 00007f08bebe5fa0 R15: 00007ffc79a99878 [ 910.783390][T12038] [ 910.816858][T12041] loop5: detected capacity change from 0 to 2048 [ 910.820256][T12026] (syz.7.1448,12026,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 910.843647][T12041] UDF-fs: warning (device loop5): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 910.866886][T12041] UDF-fs: error (device loop5): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (4 > 0) [ 910.880710][ T172] rc_core: IR keymap rc-tt-1500 not found [ 910.892118][ T172] Registered IR keymap rc-empty [ 910.907590][ T172] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 910.922900][T12041] UDF-fs: Scanning with blocksize 512 failed [ 910.938101][ T172] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input42 [ 910.970375][T12041] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 910.980647][ T172] dvb-usb: schedule remote query interval to 250 msecs. [ 910.996747][T12041] UDF-fs: Scanning with blocksize 1024 failed [ 911.028057][ T172] dw2102: su3000_power_ctrl: 0, initialized 1 [ 911.034188][ T172] dvb-usb: TeVii S662 successfully initialized and connected. [ 911.061333][T12041] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 911.096108][T12041] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 911.099434][ T172] usb 6-1: USB disconnect, device number 21 [ 911.126779][T12026] JBD2: Ignoring recovery information on journal [ 911.147974][T12041] UDF-fs: Scanning with blocksize 2048 failed [ 911.159596][T12041] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 911.178178][ T6761] udevd[6761]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 911.277579][ T172] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 911.296918][T12041] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 911.337666][T12041] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 911.345347][T12041] UDF-fs: Scanning with blocksize 4096 failed [ 911.374961][T12041] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 911.378297][T12026] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 911.403200][T12052] Invalid ELF header magic: != ELF [ 911.536667][ T5810] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 911.591922][T12041] loop5: detected capacity change from 0 to 22 [ 911.637778][T12041] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 911.673689][T12041] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 911.736387][ T5810] usb 7-1: Using ep0 maxpacket: 32 [ 911.743879][ T5810] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.779405][ T5810] usb 7-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 911.793590][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.810661][ T5810] usb 7-1: config 0 descriptor?? [ 911.822841][ T5810] dw2102: su3000_identify_state [ 911.834145][ T5810] dvb-usb: found a 'TeVii S662' in warm state. [ 911.847981][ T5810] dw2102: su3000_power_ctrl: 1, initialized 0 [ 911.857612][ T5810] dvb-usb: bulk message failed: -22 (2/0) [ 911.916072][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 911.947504][ T5810] dvbdev: DVB: registering new adapter (TeVii S662) [ 911.954221][ T5810] usb 7-1: media controller created [ 911.973407][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 911.990151][ T5810] dw2102: i2c transfer failed. [ 912.003010][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 912.016928][ T5810] dw2102: i2c transfer failed. [ 912.104977][T12049] dvb-usb: bulk message failed: -22 (27/0) [ 912.164414][T12049] dw2102: i2c transfer failed. [ 912.174442][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 912.227027][ T5810] dw2102: i2c transfer failed. [ 912.236177][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 912.596631][ T5810] dw2102: i2c transfer failed. [ 912.619435][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 912.625229][ T5810] dw2102: i2c transfer failed. [ 912.649265][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 912.663591][ T5810] dw2102: i2c transfer failed. [ 912.671575][ T5810] dvb-usb: MAC address: 02:02:02:02:02:02 [ 912.681315][T10810] ocfs2: Unmounting device (7,7) on (node local) [ 912.730550][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 912.792884][ T5810] dvb-usb: bulk message failed: -22 (3/0) [ 912.806706][ T5810] dw2102: command 0x0e transfer failed. [ 912.810506][T12067] program syz.5.1464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.816347][ T5810] dvb-usb: bulk message failed: -22 (3/0) [ 912.845986][T12063] tipc: Enabling of bearer rejected, already enabled [ 912.856439][ T5810] dw2102: command 0x0e transfer failed. [ 912.875202][T12063] tipc: Enabling of bearer rejected, already enabled [ 913.123234][T12075] loop7: detected capacity change from 0 to 8 [ 913.180247][T12075] SQUASHFS error: lzo decompression failed, data probably corrupt [ 913.196548][ T5810] dvb-usb: bulk message failed: -22 (3/0) [ 913.206598][T12075] SQUASHFS error: Failed to read block 0x91: -5 [ 913.229800][ T5810] dw2102: command 0x0e transfer failed. [ 913.254518][T12075] SQUASHFS error: Unable to read metadata cache entry [8f] [ 913.265382][ T5810] dvb-usb: bulk message failed: -22 (3/0) [ 913.272392][T12077] usb usb9: usbfs: process 12077 (syz.5.1468) did not claim interface 0 before use [ 913.288634][T12075] SQUASHFS error: Unable to read inode 0x11f [ 913.300086][ T5810] dw2102: command 0x0e transfer failed. [ 913.303978][T12077] loop5: detected capacity change from 0 to 512 [ 913.305801][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 913.330262][ T5810] dw2102: command 0x51 transfer failed. [ 913.345326][ T5810] dvb-usb: bulk message failed: -22 (5/0) [ 913.365792][ T5810] dw2102: i2c probe for address 0x68 failed. [ 913.372686][ T5810] dvb-usb: bulk message failed: -22 (5/0) [ 913.378707][ T5810] dw2102: i2c probe for address 0x69 failed. [ 913.384923][ T5810] dvb-usb: bulk message failed: -22 (5/0) [ 913.391162][ T5810] dw2102: i2c probe for address 0x6a failed. [ 913.410415][T12080] loop6: detected capacity change from 0 to 8 [ 913.421621][T12080] squashfs: Unknown parameter '' [ 913.471015][ T5810] dw2102: probing for demodulator failed. Is the external power switched on? [ 913.599745][T12077] EXT4-fs error (device loop5): ext4_xattr_inode_iget:449: comm syz.5.1468: error while reading EA inode 32 err=-116 [ 913.745308][ T5810] dvb-usb: no frontend was attached by 'TeVii S662' [ 913.926028][T12075] loop7: detected capacity change from 0 to 1024 [ 913.948481][T12077] EXT4-fs (loop5): Remounting filesystem read-only [ 913.991749][T12077] EXT4-fs warning (device loop5): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 914.015416][T12075] EXT4-fs: Ignoring removed orlov option [ 914.051490][T12077] EXT4-fs (loop5): 1 orphan inode deleted [ 914.059042][T12077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.072165][T12075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 914.101757][T12077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.139373][ T5810] rc_core: IR keymap rc-tt-1500 not found [ 914.145168][ T5810] Registered IR keymap rc-empty [ 914.235036][T12075] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.248554][ T5810] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 914.258757][ T5810] input: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input43 [ 914.279397][ T5810] dvb-usb: schedule remote query interval to 250 msecs. [ 914.286654][ T5810] dw2102: su3000_power_ctrl: 0, initialized 1 [ 914.293096][ T5810] dvb-usb: TeVii S662 successfully initialized and connected. [ 914.303904][ T5810] usb 7-1: USB disconnect, device number 22 [ 915.212320][T10810] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.355056][ T5810] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 915.581861][ T28] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 915.596556][ T28] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 915.690256][ T5851] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 916.018705][ T5851] usb 6-1: Using ep0 maxpacket: 32 [ 916.636245][ T5851] usb 6-1: device descriptor read/all, error -71 [ 1021.286296][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1021.293330][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5753/1:b..l [ 1021.302037][ C0] rcu: (detected by 0, t=10502 jiffies, g=72161, q=225 ncpus=2) [ 1021.309787][ C0] task:syz-executor state:R running task stack:21616 pid:5753 ppid:5752 flags:0x00004006 [ 1021.322039][ C0] Call Trace: [ 1021.325355][ C0] [ 1021.328313][ C0] __schedule+0x14d2/0x44d0 [ 1021.332882][ C0] ? asan.module_dtor+0x20/0x20 [ 1021.337803][ C0] ? preempt_schedule+0xab/0xc0 [ 1021.342698][ C0] preempt_schedule_common+0x82/0xc0 [ 1021.348029][ C0] preempt_schedule+0xab/0xc0 [ 1021.352748][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1021.358512][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 1021.363577][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1021.368824][ C0] _raw_spin_unlock+0x3a/0x40 [ 1021.373531][ C0] unmap_page_range+0x236f/0x2fe0 [ 1021.378618][ C0] ? copy_page_range+0x3600/0x3600 [ 1021.383768][ C0] ? unmap_single_vma+0x1b0/0x2a0 [ 1021.388836][ C0] unmap_vmas+0x25e/0x3a0 [ 1021.393209][ C0] ? unmap_page_range+0x2fe0/0x2fe0 [ 1021.398439][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 1021.403510][ C0] exit_mmap+0x200/0xb50 [ 1021.407799][ C0] ? exit_mm_release+0x1a/0x30 [ 1021.412590][ C0] ? vm_brk+0x30/0x30 [ 1021.416604][ C0] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1021.422312][ C0] ? uprobe_clear_state+0x278/0x290 [ 1021.427552][ C0] ? mm_update_next_owner+0x562/0x6c0 [ 1021.432991][ C0] __mmput+0x118/0x3c0 [ 1021.437106][ C0] exit_mm+0x1da/0x2c0 [ 1021.441218][ C0] ? do_exit+0x23c0/0x23c0 [ 1021.445689][ C0] ? taskstats_exit+0x35e/0x9e0 [ 1021.450583][ C0] do_exit+0x88e/0x23c0 [ 1021.454781][ C0] ? put_task_struct+0xc0/0xc0 [ 1021.459633][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1021.465648][ C0] ? get_signal+0x1068/0x1400 [ 1021.470367][ C0] ? lock_chain_count+0x20/0x20 [ 1021.475251][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 1021.480313][ C0] do_group_exit+0x21b/0x2d0 [ 1021.484941][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1021.490195][ C0] get_signal+0x12fc/0x1400 [ 1021.494752][ C0] arch_do_signal_or_restart+0x9c/0x7b0 [ 1021.500338][ C0] ? sigprocmask+0x190/0x190 [ 1021.504958][ C0] ? get_sigframe_size+0x20/0x20 [ 1021.509972][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1021.515476][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1021.520793][ C0] exit_to_user_mode_prepare+0xf6/0x180 [ 1021.526381][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 1021.531880][ C0] do_syscall_64+0x61/0xb0 [ 1021.536328][ C0] ? clear_bhb_loop+0x40/0x90 [ 1021.541038][ C0] ? clear_bhb_loop+0x40/0x90 [ 1021.545769][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1021.551698][ C0] RIP: 0033:0x7fbc63b8f50c [ 1021.556140][ C0] RSP: 002b:00007ffd8cd89e40 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 1021.564604][ C0] RAX: fffffffffffffdfe RBX: 00007ffd8cd8a3c0 RCX: 00007fbc63b8f50c [ 1021.572609][ C0] RDX: 0000000000000000 RSI: 00007ffd8cd89f70 RDI: 0000000000000020 [ 1021.580622][ C0] RBP: 00007ffd8cd89f70 R08: 00007ffd8cd89e70 R09: 00007ffd8cd89e80 [ 1021.588621][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd8cd8a210 [ 1021.596619][ C0] R13: 0000000000000000 R14: 00007ffd8cd8a290 R15: 585858582e7a7973 [ 1021.604728][ C0] [ 1021.607786][ C0] rcu: rcu_preempt kthread starved for 10489 jiffies! g72161 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1021.619012][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1021.629021][ C0] rcu: RCU grace-period kthread stack dump: [ 1021.634931][ C0] task:rcu_preempt state:R running task stack:27080 pid:17 ppid:2 flags:0x00004000 [ 1021.645744][ C0] Call Trace: [ 1021.649043][ C0] [ 1021.652008][ C0] __schedule+0x14d2/0x44d0 [ 1021.656577][ C0] ? asan.module_dtor+0x20/0x20 [ 1021.661470][ C0] ? enqueue_timer+0x225/0x530 [ 1021.666261][ C0] ? __mod_timer+0x984/0xdb0 [ 1021.670890][ C0] schedule+0xbd/0x170 [ 1021.674994][ C0] schedule_timeout+0x160/0x280 [ 1021.679877][ C0] ? console_conditional_schedule+0x40/0x40 [ 1021.685804][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1021.691752][ C0] ? update_process_times+0x1b0/0x1b0 [ 1021.697183][ C0] ? prepare_to_swait_event+0x339/0x360 [ 1021.702788][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 1021.707692][ C0] ? rcu_gp_init+0x110e/0x1510 [ 1021.712514][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1021.718720][ C0] ? rcu_gp_init+0x1510/0x1510 [ 1021.723538][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 1021.728451][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1021.733690][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1021.738952][ C0] rcu_gp_kthread+0x99/0x380 [ 1021.743636][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1021.748812][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 1021.753786][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1021.758882][ C0] kthread+0x2fa/0x390 [ 1021.762992][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1021.768153][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1021.772783][ C0] ret_from_fork+0x48/0x80 [ 1021.777247][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1021.781886][ C0] ret_from_fork_asm+0x11/0x20 [ 1021.786701][ C0] [ 1021.789758][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1021.796100][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1021.801356][ C1] NMI backtrace for cpu 1 [ 1021.801366][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1021.801379][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1021.801388][ C1] RIP: 0010:native_apic_msr_eoi+0xf/0x10 [ 1021.801407][ C1] Code: c3 89 c6 89 da 48 c7 c7 e0 8b b9 8c 89 c5 e8 58 98 18 03 89 e8 eb e3 0f 1f 40 00 f3 0f 1e fa b9 0b 08 00 00 31 c0 31 d2 0f 30 f3 0f 1e fa 81 ff cf 00 00 00 7f 0c 83 ff 20 74 2a 83 ff 30 74 [ 1021.801420][ C1] RSP: 0018:ffffc900001f0fd8 EFLAGS: 00000046 [ 1021.801433][ C1] RAX: 0000000000000000 RBX: ffffc90000187ac8 RCX: 000000000000080b [ 1021.801444][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000187ac8 [ 1021.801454][ C1] RBP: 0000000000000001 R08: ffffffff96ee0367 R09: 1ffffffff2ddc06c [ 1021.801464][ C1] R10: dffffc0000000000 R11: fffffbfff2ddc06d R12: 0000000000000000 [ 1021.801474][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1021.801482][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1021.801494][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1021.801521][ C1] CR2: 00007f853bd94f98 CR3: 000000005ff8b000 CR4: 00000000003506e0 [ 1021.801535][ C1] Call Trace: [ 1021.801541][ C1] [ 1021.801546][ C1] __sysvec_irq_work+0x11/0x380 [ 1021.801570][ C1] sysvec_irq_work+0x9c/0xc0 [ 1021.801587][ C1] [ 1021.801593][ C1] [ 1021.801598][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 1021.801617][ C1] RIP: 0010:finish_task_switch+0x26a/0x920 [ 1021.801633][ C1] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 e9 f6 04 00 00 4c 8b 75 d0 4c 89 e7 e8 80 ca 14 09 e8 4b a4 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1021.801646][ C1] RSP: 0018:ffffc90000187b78 EFLAGS: 00000286 [ 1021.801658][ C1] RAX: dc23d19890ad7000 RBX: 0000000000000000 RCX: dc23d19890ad7000 [ 1021.801669][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f80 [ 1021.801681][ C1] RBP: ffffc90000187bd0 R08: ffffffff8e4a212f R09: 1ffffffff1c94425 [ 1021.801692][ C1] R10: dffffc0000000000 R11: fffffbfff1c94426 R12: ffff88801b273c00 [ 1021.801704][ C1] R13: dffffc0000000000 R14: ffff888029cebc00 R15: ffff8880b8f3cac8 [ 1021.801725][ C1] ? finish_task_switch+0x265/0x920 [ 1021.801743][ C1] __schedule+0x14da/0x44d0 [ 1021.801777][ C1] ? asan.module_dtor+0x20/0x20 [ 1021.801801][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1021.801833][ C1] schedule_idle+0x4e/0x80 [ 1021.801878][ C1] do_idle+0x4ac/0x510 [ 1021.801900][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1021.801918][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1021.801937][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1021.801965][ C1] cpu_startup_entry+0x43/0x60 [ 1021.801983][ C1] start_secondary+0xee/0xf0 [ 1021.802000][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1021.802031][ C1]