last executing test programs:

2m57.071918069s ago: executing program 0 (id=108):
r0 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x80b2, 0x110101, 0x3, 0x55}, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000080))
io_uring_enter(r0, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x0)

2m56.978280621s ago: executing program 0 (id=109):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x20000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'multiq3\x00', [0x140, 0x2, 0x0, 0x7, 0x1, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x101, 0x400, 0x6, 0x8, 0x8000004, 0x0, 0x80000a, 0x9, 0x40006, 0x200000, 0xae, 0x100000, 0x8, 0xe, 0x8]})

2m56.978079337s ago: executing program 0 (id=110):
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00')
getdents64(r2, &(0x7f0000000180)=""/235, 0xeb)

2m56.872063977s ago: executing program 0 (id=112):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000003c0)='./file2\x00', 0x1208018, &(0x7f0000000400)=ANY=[@ANYBLOB="756d61736b3d30313737000001003737373737bd373737373737363030cedc787880", @ANYRESDEC=0x0, @ANYBLOB="2c7569643d666f726765742c646d6f64653d303030305604f46f612c8f91ce0e21a449eed3586236c83030303030313030303030303030322c6e6f6164696e6963622c6769643d", @ANYRESDEC, @ANYBLOB=',session=00000000000000044301,nostrict,anchor=00000000000000000000000000000000007,volumm=00000000000000p00031,\x00'], 0x6, 0xc46, &(0x7f0000000f40)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
rmdir(0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xd0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
creat(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

2m56.617570014s ago: executing program 0 (id=116):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810100020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2m56.332121354s ago: executing program 0 (id=119):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000509000000000000000000004c00", @ANYRES32=0x0, @ANYBLOB="a8d400000000000008001b000031aa"], 0x30}, 0x1, 0xffffa888}, 0x0)

2m56.280840737s ago: executing program 32 (id=119):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000509000000000000000000004c00", @ANYRES32=0x0, @ANYBLOB="a8d400000000000008001b000031aa"], 0x30}, 0x1, 0xffffa888}, 0x0)

2m38.129849119s ago: executing program 2 (id=326):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@jqfmt_vfsv0}, {@max_batch_time={'max_batch_time', 0x3d, 0x200006}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x101}}, {@noquota}, {@jqfmt_vfsold}], [{@fowner_gt}, {@obj_type}, {@fsname={'fsname', 0x3d, '\'(%!'}}, {@fowner_eq}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")

2m38.111288394s ago: executing program 2 (id=328):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4001"], 0x87)

2m37.932590528s ago: executing program 2 (id=333):
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20}, {0x2, 0x200, @private=0xa010101}, {0x2, 0x0, @rand_addr=0x64010100}, 0x212, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="0400000000000000000000003801")

2m37.88203455s ago: executing program 2 (id=335):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a})
linkat(r1, &(0x7f0000000100)='mnt\x00', r0, 0x0, 0x1000)

2m37.711521324s ago: executing program 2 (id=340):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0)

2m37.34265478s ago: executing program 2 (id=345):
syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x89, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0)

2m37.283160113s ago: executing program 33 (id=345):
syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x89, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0)

2m3.15129346s ago: executing program 1 (id=751):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0})

2m3.071013295s ago: executing program 1 (id=753):
mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c)

2m2.762138821s ago: executing program 1 (id=757):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f00000024c0)=0xa9de)

2m2.682395836s ago: executing program 1 (id=758):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000438000/0x3000)=nil, 0x400000, 0x2, 0x2})
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(0x0, 0x64042, 0x178)
open(&(0x7f0000000380)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
open(0x0, 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'nr0\x00', 0x20})

2m2.621799221s ago: executing program 1 (id=759):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='select <kernel>\n', 0x10)
write(r0, &(0x7f0000000100)='file read @etc/passwd /as/\\Xid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c)

2m2.332301602s ago: executing program 1 (id=761):
r0 = socket$kcm(0x10, 0x2, 0x4)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006fe00000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)

2m2.275315727s ago: executing program 34 (id=761):
r0 = socket$kcm(0x10, 0x2, 0x4)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006fe00000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)

1m49.511759596s ago: executing program 4 (id=862):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)

1m49.421319271s ago: executing program 4 (id=864):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0)

1m49.371824243s ago: executing program 4 (id=867):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x8008af26, &(0x7f0000000000)={@host})

1m49.23720219s ago: executing program 4 (id=869):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x93, 0x2cd, &(0x7f0000000b80)="$eJzs3U+LW1UUAPDzMpNMqouM4EoE38KFqzLt1k0GaUGclZKFblRsCzIJQgsDLeKbrvwUbt0Igh/Ejd9AcCu4LLTw5L4/yUsMMSlNxc7vt0hv7jvn3nPfyx8aeHe+eHt2fiePe4+//T2Gwyx64xjHkyyOoxety+i6FgDA/9uTsoy/ytoueVlEDPdXFgCwR9X3/9Mdvv9/2XtJAMCeffLpZx+dnp3d+jjPh3F79v3FJP3PPv1bHz+9F1/HNO7GSYyqn/7Lcv5rQXq8XZZlcZgnx/HurLiYpMzZ578245/+GRGHzZPj6nE5/8OzWzfyWie/SHW81sw/TvPfjFG82Zm+k39zTX5MBvFev1P/9RjFb1/FNzGNO1URdX70Ir67kecfNCVeRsrPiovJURW3UB68rGsCAAAAAAAAAAAAAAAAAAAAAMCr73qe53mRWtX+PanR7L9z8Cw96UfeOl7en6fOz9qBTmIUzxb78xRl/NDuz3OS53lZB/YW4x/GW4fznYEAAAAAAAAAAAAAAAAAAADgSnvw8NH5l9Pp3fsvpFHd5N+5p/95xxl3et6JzcFHi7l6TXPDyHHQxmQRG8tI69i65qfNtgfPd+reaGu+tnLop583prdrST0//vvam0Z/i5hOI03y8NF5urTrYrJ1WTEvLFt/Do+i7RlGr7OKNmawdq41jcFyz3B+TcudXn6DtYdG25+o7LJexOtVT7EhOLJNhb3/Rz1O05OtrmKwcqJSo+npNz2d9OUphtu8nrOsfaf0Vz8rsvk7O3shnz0AAAAAAAAAAAAAAAAAAMCy7l3E//B4Y2qvPNpbWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwUi3+/v8OjaJJ3iJ4EPcf/MdLBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ar4OwAA///GhUq0")
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x892, 0x0)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs\x00', 0x1ff)

1m49.051875667s ago: executing program 4 (id=872):
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc)

1m48.856949667s ago: executing program 4 (id=880):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="eda927", 0x3}], 0x1}, 0x20000800)
recvmmsg(r1, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001a80)=""/205, 0xcd}], 0x1, &(0x7f00000004c0)=""/243, 0xf3}, 0xffffffff}], 0x1, 0x2041, 0x0)

1m48.738408574s ago: executing program 35 (id=880):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="eda927", 0x3}], 0x1}, 0x20000800)
recvmmsg(r1, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001a80)=""/205, 0xcd}], 0x1, &(0x7f00000004c0)=""/243, 0xf3}, 0xffffffff}], 0x1, 0x2041, 0x0)

1.340030522s ago: executing program 3 (id=2508):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random="ef00"})

1.339853941s ago: executing program 3 (id=2509):
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xf4}}, 0x1c)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x1, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x1254, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x801, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2d8, 0x0, 0x470, 0xa7, 0x8, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x2, 0x0, 0xfffffffa, 0x3, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0xf5, 0x0, 0x4, 0x0, 0xd318, 0x2000000000, 0x0, 0x4, 0x0, 0x1000000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x6, 0x800000, 0x0, 0x101, 0x272f, 0xd721, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x4, 0x5, 0x1, 0x4000000, 0x7, 0x0, 0xdc5d, 0x0, 0x0, 0x1000, 0x0, 0x8000, 0x0, 0x4000000000006fd, 0x0, 0x6, 0x0, 0x0, 0x7, 0x100]})
setrlimit(0x9, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000580)=0xa300010)

680.695292ms ago: executing program 3 (id=2513):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x6c, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

570.406378ms ago: executing program 6 (id=2515):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
preadv2(r0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/54, 0x36}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000440)=""/246, 0xf6}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/233, 0xe9}], 0x7, 0x8, 0x7, 0x1)

517.191578ms ago: executing program 6 (id=2516):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)

517.046074ms ago: executing program 6 (id=2517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

459.213179ms ago: executing program 6 (id=2518):
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0b031120"], 0x7)

458.925756ms ago: executing program 6 (id=2519):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1003}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

458.45801ms ago: executing program 5 (id=2520):
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)

381.230526ms ago: executing program 6 (id=2521):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4)
syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0)
recvmsg(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)}, 0x40010100)

381.031842ms ago: executing program 5 (id=2522):
unshare(0x22020600)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x8c5, 0x0)

380.706361ms ago: executing program 3 (id=2523):
r0 = syz_clone(0x8d206500, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC")
fchdir(r1)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
syz_open_procfs$namespace(r0, &(0x7f00000044c0)='ns/time\x00')

309.319472ms ago: executing program 5 (id=2524):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

309.01005ms ago: executing program 5 (id=2525):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000000)='7', 0x1)
syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x7, 0x0, 0xe}}}}}}, 0x0)

250.282442ms ago: executing program 5 (id=2526):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, 0x0, 0x0, 0x4}, 0x20)

249.97799ms ago: executing program 5 (id=2527):
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x16f)
socket(0x2a, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801)

283.992µs ago: executing program 3 (id=2528):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{}]}]}, 0x40}}, 0x0)

0s ago: executing program 3 (id=2529):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=2530):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x6202, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
pread64$ublk_bdev(r0, &(0x7f0000000240)=""/69, 0x45, 0x4)

kernel console output (not intermixed with test programs):

110
[  145.749172][ T7760]  cleanup_mnt+0x3d3/0x460
[  145.749183][ T7760]  task_work_run+0x1d9/0x270
[  145.749192][ T7760]  ? __pfx_task_work_run+0x10/0x10
[  145.749204][ T7760]  exit_to_user_mode_loop+0x204/0x770
[  145.749211][ T7760]  ? rcu_is_watching+0x16/0xb0
[  145.749220][ T7760]  do_syscall_64+0x328/0x520
[  145.749228][ T7760]  ? trace_irq_disable+0x3b/0x140
[  145.749234][ T7760]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.749244][ T7760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.749251][ T7760] RIP: 0033:0x7f9bf939f397
[  145.749258][ T7760] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  145.749264][ T7760] RSP: 002b:00007ffe9033bae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  145.749272][ T7760] RAX: 0000000000000000 RBX: 00007f9bf94344bb RCX: 00007f9bf939f397
[  145.749277][ T7760] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9033bba0
[  145.749282][ T7760] RBP: 00007ffe9033bba0 R08: 00007ffe9033cba0 R09: 00000000ffffffff
[  145.749287][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe9033cc30
[  145.749292][ T7760] R13: 00007f9bf94344bb R14: 00000000000238ce R15: 00007ffe9033cc70
[  145.749304][ T7760]  </TASK>
[  145.749307][ T7760] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  145.804270][ T8665] profile_transition: 8 callbacks suppressed
[  145.804279][ T8665] profile_transition: unconfined exec no attachment
[  145.804284][ T8665] apparmor_bprm_creds_for_exec: 7 callbacks suppressed
[  145.804288][ T8665] apparmor_bprm_creds_for_exec: label build failed
[  145.815681][ T8664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1082'.
[  145.816856][ T8664] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.848581][ T5723] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  145.861148][ T5723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.876916][ T5723] usb 7-1: config 0 descriptor??
[  145.880595][ T5723] gspca_main: sunplus-2.14.0 probing 055f:c420
[  146.085811][ T5723] gspca_sunplus: reg_w_riv err -71
[  146.085920][ T5723] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  146.102029][ T5723] usb 7-1: USB disconnect, device number 5
[  146.131200][ T8672] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input23
[  146.367828][ T8686] aa_setprocattr_changehat: aa_setprocattr_changehat: (pid 8686) Magic 0x0 count 0 hat 'changehat'
[  146.368461][   T34] audit: type=1400 audit(1789787330.502:127): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8685 comm="syz.3.1090"
[  146.408470][ T8688] loop3: detected capacity change from 0 to 2048
[  146.415518][ T8688] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.722457][ T5723] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  146.808842][ T8714] loop5: detected capacity change from 0 to 2048
[  146.827746][ T8714] Dev loop5: RDB in block 1 has bad checksum
[  146.874169][ T5723] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00
[  146.876922][ T5723] usb 4-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  146.876943][ T5723] usb 4-1: config 0 interface 0 has no altsetting 0
[  146.876965][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.884268][ T5723] usb 4-1: config 0 descriptor??
[  146.892074][   T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  146.953585][ T8716] loop5: detected capacity change from 0 to 4096
[  146.959269][ T8716] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  146.965920][ T8716] ntfs3(loop5): It is recommended to use chkdsk.
[  147.042859][   T25] usb 7-1: unable to get BOS descriptor or descriptor too short
[  147.042907][   T25] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8
[  147.053979][   T25] usb 7-1: config 13 has an invalid interface number: 50 but max is 3
[  147.054016][   T25] usb 7-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  147.054058][   T25] usb 7-1: config 13 has 1 interface, different from the descriptor's value: 4
[  147.054084][   T25] usb 7-1: config 13 has no interface number 0
[  147.054121][   T25] usb 7-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  147.054158][   T25] usb 7-1: config 13 interface 50 has no altsetting 0
[  147.075225][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.078164][   T25] usb 7-1: Product: syz
[  147.079569][   T25] usb 7-1: Manufacturer: syz
[  147.081558][   T25] usb 7-1: SerialNumber: syz
[  147.249449][ T8718] loop5: detected capacity change from 0 to 32768
[  147.256587][ T8718] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1106 (8718)
[  147.275350][ T8718] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  147.275462][ T8718] BTRFS info (device loop5): using sha256 checksum algorithm
[  147.302244][ T5723] apple 0003:05AC:0232.0011: unknown main item tag 0x0
[  147.302316][ T5723] apple 0003:05AC:0232.0011: unknown main item tag 0x0
[  147.302360][ T5723] apple 0003:05AC:0232.0011: unknown main item tag 0x0
[  147.302376][ T5723] apple 0003:05AC:0232.0011: unknown main item tag 0x0
[  147.302390][ T5723] apple 0003:05AC:0232.0011: unknown main item tag 0x0
[  147.302405][ T5723] apple 0003:05AC:0232.0011: unknown main item tag 0x0
[  147.302423][ T5723] apple 0003:05AC:0232.0011: unknown main item tag 0x0
[  147.302438][ T5723] apple 0003:05AC:0232.0011: unknown main item tag 0x0
[  147.302452][ T5723] apple 0003:05AC:0232.0011: unknown main item tag 0x0
[  147.302465][ T5723] apple 0003:05AC:0232.0011: unknown main item tag 0x0
[  147.312522][ T8730] profile_transition: unconfined exec no attachment
[  147.312534][ T8730] apparmor_bprm_creds_for_exec: label build failed
[  147.312930][ T5723] apple 0003:05AC:0232.0011: hidraw0: USB HID v0.01 Device [HID 05ac:0232] on usb-dummy_hcd.3-1/input0
[  147.348872][   T25] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  147.354735][   T13] usb 7-1: Failed to submit usb control message: -71
[  147.360967][   T13] usb 7-1: unable to send the bmi data to the device: -71
[  147.361017][   T13] usb 7-1: unable to get target info from device
[  147.361041][   T13] usb 7-1: could not get target info (-71)
[  147.361203][   T13] usb 7-1: could not probe fw (-71)
[  147.372559][   T25] usb 7-1: USB disconnect, device number 6
[  147.376007][ T8718] BTRFS info (device loop5): turning off barriers
[  147.376057][ T8718] BTRFS info (device loop5): enabling free space tree
[  147.426746][ T7760] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  147.510878][ T5723] usb 4-1: USB disconnect, device number 25
[  147.690455][ T8738] loop5: detected capacity change from 0 to 32768
[  147.699367][ T8738] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1107 (8738)
[  147.713361][ T8738] BTRFS info (device loop5 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  147.713413][ T8738] BTRFS info (device loop5 state S): using blake2b checksum algorithm
[  147.717784][ T8740] profile_transition: unconfined exec no attachment
[  147.717791][ T8740] apparmor_bprm_creds_for_exec: label build failed
[  147.756747][ T1109] BTRFS warning (device loop5 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0xbd4b976cd9fa1814a05461e3a8d6527e6af0699630a7a870b913a48450669c6b level 0, ignored
[  147.768691][ T8738] BTRFS warning (device loop5 state ES): devid 0 uuid a3373a75-1192-444c-9807-48156503709a is missing
[  147.774288][ T1126] BTRFS warning (device loop5 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0xdcb7575773209a357189e5b2f3b8fd71b0d15f18ca4e677a36d2538f2b7693d1 level 0, ignored
[  147.794906][ T1109] BTRFS warning (device loop5 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x401afd31dc190f42243ccb8f3c46dd862cf2884305920dd2d03d401e95eb4ccd level 0, ignored
[  147.808273][ T1126] BTRFS warning (device loop5 state ECS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1, ignored
[  147.817506][ T1126] BTRFS error (device loop5 state ECS): level verify failed on logical 5328896 mirror 1 wanted 0 found 1
[  147.823078][ T1109] BTRFS warning (device loop5 state ECS): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0x03f37032b0b529a92cc2d9b40919dda221d62f8bc175d07bdd8abd18d59851fb level 0, ignored
[  147.836391][ T1109] BTRFS warning (device loop5 state ECS): checksum verify failed on logical 5267456 mirror 1 wanted 0xce6a0dc39dad9e7cbba6cc000b67b0cf7f3e351c922d08ed6fd033c276f2526b found 0xc8acb2220dd26cbeaf7e61def41ecb1d135feabf0cb66d6d38ec8a1356a8465c level 0, ignored
[  147.850261][ T8738] BTRFS info (device loop5 state ECS): allowing degraded mounts
[  147.850297][ T8738] BTRFS info (device loop5 state ECS): enabling ssd optimizations
[  147.850341][ T8738] BTRFS info (device loop5 state ECS): using spread ssd allocation scheme
[  147.850366][ T8738] BTRFS info (device loop5 state ECS): turning off barriers
[  147.850390][ T8738] BTRFS info (device loop5 state ECS): disabling log replay at mount time
[  147.850415][ T8738] BTRFS info (device loop5 state ECS): enabling free space tree
[  147.850440][ T8738] BTRFS info (device loop5 state ECS): trying to use backup root at mount time
[  147.850465][ T8738] BTRFS info (device loop5 state ECS): ignoring bad roots
[  147.850489][ T8738] BTRFS info (device loop5 state ECS): ignoring data csums
[  147.850513][ T8738] BTRFS info (device loop5 state ECS): ignoring meta csums
[  147.850537][ T8738] BTRFS info (device loop5 state ECS): ignoring unknown super block flags
[  147.850561][ T8738] BTRFS info (device loop5 state ECS): force zlib compression, level 3
[  147.850587][ T8738] BTRFS info (device loop5 state ECS): max_inline set to 0
[  147.869982][ T8754] profile_transition: unconfined exec no attachment
[  147.869994][ T8754] apparmor_bprm_creds_for_exec: label build failed
[  147.944292][ T6284] IPVS: starting estimator thread 0...
[  147.969045][ T7760] BTRFS info (device loop5 state ECS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  148.050689][ T8759] IPVS: using max 44 ests per chain, 105600 per kthread
[  148.255553][ T8772] loop3: detected capacity change from 0 to 512
[  148.336835][ T8774] loop6: detected capacity change from 0 to 256
[  148.630285][   T33] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  148.800226][   T33] usb 4-1: Using ep0 maxpacket: 32
[  148.801185][   T33] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  148.802310][   T33] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  148.802327][   T33] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  148.802344][   T33] usb 4-1: config 0 interface 0 has no altsetting 0
[  148.804795][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.805412][   T33] usb 4-1: Product: syz
[  148.805424][   T33] usb 4-1: Manufacturer: syz
[  148.805433][   T33] usb 4-1: SerialNumber: syz
[  148.809569][   T33] usb 4-1: config 0 descriptor??
[  148.831637][ T5723] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  148.984666][ T5723] usb 7-1: unable to get BOS descriptor or descriptor too short
[  148.984748][ T5723] usb 7-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[  148.993886][ T5723] usb 7-1: config 114 has an invalid interface number: 240 but max is 0
[  148.993934][ T5723] usb 7-1: config 114 has no interface number 0
[  148.994003][ T5723] usb 7-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[  148.994042][ T5723] usb 7-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[  148.994080][ T5723] usb 7-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0
[  148.994117][ T5723] usb 7-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 0
[  148.994155][ T5723] usb 7-1: config 114 interface 240 has no altsetting 0
[  149.022324][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.022375][ T5723] usb 7-1: Product: syz
[  149.022429][ T5723] usb 7-1: Manufacturer: syz
[  149.022462][ T5723] usb 7-1: SerialNumber: syz
[  149.037018][ T8789] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  149.213531][ T8791] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  149.216441][ T8791] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  149.217875][   T33] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  149.257862][ T5723] ir_usb 7-1:114.240: IR Dongle converter detected
[  149.262159][ T5723] usb 7-1: IRDA class descriptor not found, device not bound
[  149.271975][ T5723] usb 7-1: USB disconnect, device number 7
[  149.521044][ T8801] loop5: detected capacity change from 0 to 256
[  149.527821][ T8801] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  149.620617][   T33] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  149.620981][   T33] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  149.627849][   T33] usb 4-1: USB disconnect, device number 26
[  149.666150][ T8809] batadv_slave_0: entered promiscuous mode
[  149.672141][ T8809] batadv_slave_0: left promiscuous mode
[  149.943951][ T8813] loop6: detected capacity change from 0 to 32768
[  149.952276][ T8813] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  149.977843][ T8813] XFS (loop6): Ending clean mount
[  149.999490][ T8093] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  150.213107][ T8819] loop5: detected capacity change from 0 to 32768
[  150.236362][ T8819] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  150.265091][ T8819] XFS (loop5): Ending clean mount
[  150.328321][ T7760] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  150.453014][ T8846] loop6: detected capacity change from 0 to 32768
[  150.463319][ T8846] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1143 (8846)
[  150.481267][ T8848] profile_transition: unconfined exec no attachment
[  150.481370][ T8848] apparmor_bprm_creds_for_exec: label build failed
[  150.490485][ T8846] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  150.494418][ T8846] BTRFS info (device loop6): using blake2b checksum algorithm
[  150.511117][   T33] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  150.535394][ T8846] BTRFS info (device loop6): enabling ssd optimizations
[  150.537633][ T8846] BTRFS info (device loop6): turning on async discard
[  150.539795][ T8846] BTRFS info (device loop6): enabling free space tree
[  150.542071][ T8846] BTRFS info (device loop6): use zstd compression, level 3
[  150.586616][ T8865] profile_transition: unconfined exec no attachment
[  150.586769][ T8865] apparmor_bprm_creds_for_exec: label build failed
[  150.649477][ T8093] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  150.661405][   T33] usb 4-1: Using ep0 maxpacket: 32
[  150.662062][   T33] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  150.663026][   T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.678715][   T33] usb 4-1: config 0 descriptor??
[  150.689714][   T33] gspca_main: sq930x-2.14.0 probing 041e:403c
[  151.340805][   T33] gspca_sq930x: reg_w 0305 fd00 failed -71
[  151.340891][   T33] sq930x 4-1:0.0: probe with driver sq930x failed with error -71
[  151.344285][   T33] usb 4-1: USB disconnect, device number 27
[  151.758725][ T8877] program syz.6.1149 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  151.822267][ T8880] netlink: 'syz.5.1151': attribute type 3 has an invalid length.
[  151.906110][   T34] audit: type=1800 audit(1789787336.042:128): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.1154" name="landingPage" dev="configfs" ino=19747 res=0 errno=0
[  151.913883][   T34] audit: type=1804 audit(1789787336.052:129): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1154" name="/newroot/189/config/usb_gadget/g1/webusb/landingPage" dev="configfs" ino=19747 res=1 errno=0
[  151.999997][ T8891] netlink: 'syz.6.1157': attribute type 6 has an invalid length.
[  152.052020][ T8892] random: crng reseeded on system resumption
[  152.075150][ T8887] Restarting kernel threads ...
[  152.075619][ T8887] Done restarting kernel threads.
[  152.196876][ T8900] loop3: detected capacity change from 0 to 2048
[  152.253187][ T8903] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.362337][   T33] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  152.417091][ T8909] Attempt to restore checkpoint with obsolete wellknown handles
[  152.521360][   T33] usb 6-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00
[  152.525111][   T33] usb 6-1: config index 0 descriptor too short (expected 50, got 32)
[  152.525163][   T33] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.525198][   T33] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  152.525225][   T33] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  152.542700][   T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.542736][   T33] usb 6-1: Product: syz
[  152.542778][   T33] usb 6-1: Manufacturer: syz
[  152.542803][   T33] usb 6-1: SerialNumber: syz
[  152.555016][ T8898] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  152.558306][   T33] usb_debug 6-1:1.0: debug converter detected
[  152.564174][   T33] usb 6-1: debug converter now attached to ttyUSB0
[  152.665435][ T8913] loop3: detected capacity change from 0 to 32768
[  152.757302][    C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  152.760931][   T33] usb 6-1: USB disconnect, device number 7
[  152.769572][   T33] debug ttyUSB0: debug converter now disconnected from ttyUSB0
[  152.772386][ T8923] loop3: detected capacity change from 0 to 512
[  152.775997][   T33] usb_debug 6-1:1.0: device disconnected
[  152.793451][ T8923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.793531][ T8923] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  152.817792][ T6009] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.880184][ T1839] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  153.031509][ T1839] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  153.032607][ T1839] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  153.032629][ T1839] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  153.032675][ T1839] usb 7-1: config 1 interface 0 has no altsetting 0
[  153.035623][ T1839] usb 7-1: string descriptor 0 read error: -22
[  153.035728][ T1839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.038383][ T8921] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  153.058728][ T8936] profile_transition: unconfined exec no attachment
[  153.058784][ T8936] apparmor_bprm_creds_for_exec: label build failed
[  153.447100][ T1839] cp2112 0003:10C4:EA90.0012: unexpected long global item
[  153.447618][ T1839] cp2112 0003:10C4:EA90.0012: parse failed
[  153.447893][ T1839] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -22
[  153.650678][ T5540] usb 7-1: USB disconnect, device number 8
[  154.298363][ T8948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1180'.
[  154.381238][ T8952] loop9: detected capacity change from 0 to 7
[  154.397160][ T8952]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  154.397200][ T8952] loop9: partition table partially beyond EOD, truncated
[  154.397382][ T8952] loop9: p1 size 2989602745 extends beyond EOD, truncated
[  154.408790][ T8954] loop3: detected capacity change from 0 to 4096
[  154.409801][ T8954] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  154.425498][ T8954] ntfs3(loop3): ino=19, mi_enum_attr
[  154.426173][ T8954] ntfs3(loop3): Failed to load root (-22).
[  154.467981][ T5624] udevd[5624]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  154.487544][ T8956] loop6: detected capacity change from 0 to 256
[  154.492739][ T5723] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  154.506314][ T8956] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d)
[  154.558721][ T8958] loop3: detected capacity change from 0 to 4096
[  154.563465][ T8958] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  154.563514][ T8958] ntfs3(loop3): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only.
[  154.568279][ T8958] ntfs3(loop3): ino=0, mi_enum_attr
[  154.575163][ T8958] ntfs3(loop3): Inode r=0 is not in use!
[  154.575321][ T8958] ntfs3(loop3): Failed to load $MFT (-116).
[  154.650156][ T5723] usb 6-1: Using ep0 maxpacket: 8
[  154.651020][ T5723] usb 6-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=6c.24
[  154.652145][ T5723] usb 6-1: config 0 has an invalid interface number: 125 but max is 0
[  154.652155][ T5723] usb 6-1: config 0 has no interface number 0
[  154.652173][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.653905][ T5723] usb 6-1: config 0 descriptor??
[  154.664789][ T5723] gspca_main: spca501-2.14.0 probing 0497:c001
[  154.669922][ T8962] FAULT_INJECTION: forcing a failure.
[  154.669922][ T8962] name failslab, interval 1, probability 0, space 0, times 0
[  154.669964][ T8962] CPU: 1 UID: 0 PID: 8962 Comm: syz.3.1188 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  154.669992][ T8962] Tainted: [L]=SOFTLOCKUP
[  154.669996][ T8962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.670001][ T8962] Call Trace:
[  154.670005][ T8962]  <TASK>
[  154.670025][ T8962]  dump_stack_lvl+0xe8/0x150
[  154.670040][ T8962]  should_fail_ex+0x410/0x560
[  154.670054][ T8962]  should_failslab+0xa8/0x100
[  154.670065][ T8962]  __kmalloc_cache_noprof+0xa3/0x600
[  154.670077][ T8962]  ? __kmalloc_cache_noprof+0x14d/0x600
[  154.670087][ T8962]  ? alloc_netdev_mqs+0xca0/0x12a0
[  154.670095][ T8962]  ? alloc_netdev_mqs+0xca0/0x12a0
[  154.670105][ T8962]  alloc_netdev_mqs+0xca0/0x12a0
[  154.670115][ T8962]  __ip_tunnel_create+0x348/0x550
[  154.670124][ T8962]  ? __pfx___ip_tunnel_create+0x10/0x10
[  154.670133][ T8962]  ? bpf_lsm_capable+0x9/0x20
[  154.670147][ T8962]  ip_tunnel_ctl+0x4fc/0xc50
[  154.670159][ T8962]  vti_tunnel_ctl+0x38e/0x4e0
[  154.670170][ T8962]  ? __pfx_vti_tunnel_ctl+0x10/0x10
[  154.670179][ T8962]  ? rcu_is_watching+0x16/0xb0
[  154.670191][ T8962]  ip_tunnel_siocdevprivate+0x125/0x1d0
[  154.670204][ T8962]  ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10
[  154.670217][ T8962]  ? __pfx___mutex_lock+0x10/0x10
[  154.670226][ T8962]  ? full_name_hash+0x92/0xe0
[  154.670238][ T8962]  dev_ifsioc+0xb56/0x1360
[  154.670249][ T8962]  dev_ioctl+0x84c/0x1150
[  154.670262][ T8962]  sock_ioctl+0x753/0x7e0
[  154.670272][ T8962]  ? __pfx_sock_ioctl+0x10/0x10
[  154.670280][ T8962]  ? __fget_files+0x3a2/0x420
[  154.670288][ T8962]  ? __fget_files+0x2a/0x420
[  154.670297][ T8962]  ? bpf_lsm_file_ioctl+0x9/0x20
[  154.670306][ T8962]  ? __pfx_sock_ioctl+0x10/0x10
[  154.670314][ T8962]  __se_sys_ioctl+0xfc/0x170
[  154.670325][ T8962]  do_syscall_64+0x166/0x520
[  154.670332][ T8962]  ? trace_irq_disable+0x3b/0x140
[  154.670339][ T8962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.670348][ T8962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.670355][ T8962] RIP: 0033:0x7fb65f79e159
[  154.670363][ T8962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.670370][ T8962] RSP: 002b:00007fb660634028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  154.670378][ T8962] RAX: ffffffffffffffda RBX: 00007fb65fa25fa0 RCX: 00007fb65f79e159
[  154.670383][ T8962] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000004
[  154.670388][ T8962] RBP: 00007fb65f83506b R08: 0000000000000000 R09: 0000000000000000
[  154.670393][ T8962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.670397][ T8962] R13: 00007fb65fa26038 R14: 00007fb65fa25fa0 R15: 00007ffeb51e8a58
[  154.670408][ T8962]  </TASK>
[  155.053442][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'.
[  155.076656][ T5723] gspca_spca501: reg write: error -71
[  155.076700][ T5723] spca501 6-1:0.125: Reg write failed for 0x02,0xa048,0x00
[  155.076761][ T5723] spca501 6-1:0.125: probe with driver spca501 failed with error -22
[  155.084459][ T5723] usb 6-1: USB disconnect, device number 8
[  155.094382][ T8981] binder: 8975:8981 ioctl c0306201 200000000080 returned -14
[  155.629756][ T9005] loop5: detected capacity change from 0 to 256
[  155.639367][ T9005] exfat: Deprecated parameter 'utf8'
[  155.639448][ T9005] exfat: Deprecated parameter 'namecase'
[  155.639515][ T9005] exfat: Deprecated parameter 'namecase'
[  155.639530][ T9005] exfat: Deprecated parameter 'utf8'
[  155.652850][ T9005] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  155.654690][ T9005] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  155.664940][ T9005] exFAT-fs (loop5): start_clu is invalid cluster(0x400)
[  155.744848][ T9010] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  155.808160][ T9012] FAULT_INJECTION: forcing a failure.
[  155.808160][ T9012] name failslab, interval 1, probability 0, space 0, times 0
[  155.813768][ T9012] CPU: 1 UID: 0 PID: 9012 Comm: syz.5.1209 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  155.813806][ T9012] Tainted: [L]=SOFTLOCKUP
[  155.813812][ T9012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.813820][ T9012] Call Trace:
[  155.813827][ T9012]  <TASK>
[  155.813833][ T9012]  dump_stack_lvl+0xe8/0x150
[  155.813857][ T9012]  should_fail_ex+0x410/0x560
[  155.813877][ T9012]  should_failslab+0xa8/0x100
[  155.813894][ T9012]  __kmalloc_cache_noprof+0xa3/0x600
[  155.813913][ T9012]  ? __pfx___se_sys_futex+0x10/0x10
[  155.813930][ T9012]  ? __se_sys_timerfd_create+0x106/0x320
[  155.813944][ T9012]  ? __se_sys_timerfd_create+0x106/0x320
[  155.813964][ T9012]  __se_sys_timerfd_create+0x106/0x320
[  155.813982][ T9012]  do_syscall_64+0x166/0x520
[  155.813996][ T9012]  ? trace_irq_disable+0x3b/0x140
[  155.814008][ T9012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.814023][ T9012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.814036][ T9012] RIP: 0033:0x7f9bf939e159
[  155.814050][ T9012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.814061][ T9012] RSP: 002b:00007f9bfa24a028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b
[  155.814077][ T9012] RAX: ffffffffffffffda RBX: 00007f9bf9625fa0 RCX: 00007f9bf939e159
[  155.814086][ T9012] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000001
[  155.814096][ T9012] RBP: 00007f9bf943506b R08: 0000000000000000 R09: 0000000000000000
[  155.814105][ T9012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.814113][ T9012] R13: 00007f9bf9626038 R14: 00007f9bf9625fa0 R15: 00007ffe9033c878
[  155.814132][ T9012]  </TASK>
[  155.992353][ T9018] profile_transition: unconfined exec no attachment
[  155.992405][ T9018] apparmor_bprm_creds_for_exec: label build failed
[  156.042808][ T9022] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1214'.
[  156.065668][ T9020] loop6: detected capacity change from 0 to 4096
[  156.068335][ T9020] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  156.079504][ T9020] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  156.079702][ T9020] ntfs3(loop6): Failed to load $Secure (-22).
[  156.079711][ T9020] ntfs3(loop6): Failed to initialize $Secure (-22).
[  156.095213][ T9025] profile_transition: unconfined exec no attachment
[  156.095255][ T9025] apparmor_bprm_creds_for_exec: label build failed
[  156.123714][ T9026] profile_transition: unconfined exec no attachment
[  156.123756][ T9026] apparmor_bprm_creds_for_exec: label build failed
[  156.258146][ T9033] loop6: detected capacity change from 0 to 4096
[  156.289788][ T9033] ntfs3(loop6): Failed to load $Extend (-22).
[  156.289836][ T9033] ntfs3(loop6): Failed to initialize $Extend.
[  156.316641][   T34] audit: type=1800 audit(1789787340.452:130): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.6.1218" name="file1" dev="loop6" ino=30 res=0 errno=0
[  156.698585][ T9059] loop5: detected capacity change from 0 to 512
[  156.718552][ T9059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.742360][ T7760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.960184][   T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  157.111541][   T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  157.116457][   T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.116533][   T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.116570][   T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  157.116634][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.141123][   T25] usb 7-1: config 0 descriptor??
[  157.332405][ T9084] fuse: fd is not a fuse device
[  157.560802][ T9098] fuse: Bad value for 'fd'
[  157.576861][   T25] plantronics 0003:047F:FFFF.0013: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  157.757116][ T9062] loop6: detected capacity change from 0 to 128
[  157.759244][ T9062] EXT4-fs (loop6): Test dummy encryption mode enabled
[  157.778097][ T9062] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.779974][ T9062] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  157.791182][   T25] usb 7-1: USB disconnect, device number 9
[  158.309173][ T8093] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  158.333674][ T9121] loop5: detected capacity change from 0 to 131072
[  158.335677][ T9121] F2FS-fs (loop5): invalid crc value
[  158.373310][ T9121] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  158.378902][ T9121] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  158.710150][ T5540] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  158.862530][ T5540] usb 7-1: Using ep0 maxpacket: 8
[  158.865008][ T5540] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  158.865879][ T5540] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  158.865893][ T5540] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  158.865901][ T5540] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  158.865910][ T5540] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  158.865919][ T5540] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  158.865933][ T5540] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.868848][ T5540] usb 7-1: config 0 descriptor??
[  158.874388][ T9131] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  159.282871][ T5540] usb 7-1: USB disconnect, device number 10
[  159.290890][   T55] Bluetooth: hci3: Opcode 0x0c03 failed: -19
[  159.746711][ T9155] loop5: detected capacity change from 0 to 2048
[  159.783714][ T9155]  loop5: p1 p3 < > p4 < p5 >
[  159.783763][ T9155] loop5: partition table partially beyond EOD, truncated
[  159.783886][ T9155] loop5: p1 size 196608 extends beyond EOD, truncated
[  159.787968][ T9155] loop5: p3 start 614273 is beyond EOD, truncated
[  159.794873][ T9155] loop5: p5 size 196608 extends beyond EOD, truncated
[  159.993632][ T9167] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  160.091406][ T9175] loop5: detected capacity change from 0 to 64
[  160.104534][ T9175] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  160.286670][ T9190] loop5: detected capacity change from 0 to 2048
[  160.343854][ T9190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.773793][ T9198] scsi_dev_info_list_add_str: bad dev info string '7Li|HՄgJ@00DPb8Cv~&&+q^R' '' ''
[  161.075941][ T9220] jffs2: notice: (9220) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  161.426656][ T9243] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1311'.
[  161.483775][ T9249] FAULT_INJECTION: forcing a failure.
[  161.483775][ T9249] name failslab, interval 1, probability 0, space 0, times 0
[  161.489474][ T9249] CPU: 0 UID: 0 PID: 9249 Comm: syz.6.1313 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  161.489504][ T9249] Tainted: [L]=SOFTLOCKUP
[  161.489508][ T9249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.489513][ T9249] Call Trace:
[  161.489518][ T9249]  <TASK>
[  161.489522][ T9249]  dump_stack_lvl+0xe8/0x150
[  161.489537][ T9249]  should_fail_ex+0x410/0x560
[  161.489582][ T9249]  should_failslab+0xa8/0x100
[  161.489594][ T9249]  __kmalloc_cache_noprof+0xa3/0x600
[  161.489606][ T9249]  ? do_raw_spin_lock+0x12b/0x2f0
[  161.489615][ T9249]  ? sctp_auth_init+0xc5/0x400
[  161.489626][ T9249]  ? sctp_auth_init+0xc5/0x400
[  161.489639][ T9249]  sctp_auth_init+0xc5/0x400
[  161.489649][ T9249]  ? sctp_setsockopt+0x21c/0x12c0
[  161.489662][ T9249]  sctp_setsockopt_auth_supported+0x302/0x530
[  161.489686][ T9249]  sctp_setsockopt+0x599/0x12c0
[  161.489697][ T9249]  ? sock_common_setsockopt+0x36/0xc0
[  161.489712][ T9249]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  161.489724][ T9249]  do_sock_setsockopt+0x17c/0x1b0
[  161.489737][ T9249]  __x64_sys_setsockopt+0x13d/0x1b0
[  161.489750][ T9249]  do_syscall_64+0x166/0x520
[  161.489758][ T9249]  ? trace_irq_disable+0x3b/0x140
[  161.489765][ T9249]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.489775][ T9249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.489782][ T9249] RIP: 0033:0x7fcb12b9e159
[  161.489791][ T9249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.489797][ T9249] RSP: 002b:00007fcb10df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  161.489807][ T9249] RAX: ffffffffffffffda RBX: 00007fcb12e25fa0 RCX: 00007fcb12b9e159
[  161.489813][ T9249] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004
[  161.489817][ T9249] RBP: 00007fcb12c3506b R08: 0000000000000008 R09: 0000000000000000
[  161.489822][ T9249] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000
[  161.489826][ T9249] R13: 00007fcb12e26038 R14: 00007fcb12e25fa0 R15: 00007ffc1729d708
[  161.489838][ T9249]  </TASK>
[  161.629354][ T9259] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1319'.
[  162.070290][ T5540] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  162.221361][ T5540] usb 7-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  162.222421][ T5540] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 66, using maximum allowed: 30
[  162.222454][ T5540] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.222468][ T5540] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 66
[  162.222484][ T5540] usb 7-1: config 0 interface 0 has no altsetting 0
[  162.222505][ T5540] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.224715][ T5540] usb 7-1: config 0 descriptor??
[  162.350134][ T5723] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  162.522174][ T5723] usb 6-1: LPM exit latency is zeroed, disabling LPM.
[  162.524458][ T5723] usb 6-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c
[  162.529328][ T5723] usb 6-1: config 8 has no interfaces?
[  162.535101][ T5723] usb 6-1: string descriptor 0 read error: -22
[  162.537196][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.635395][ T5540] hid_parser_main: 30 callbacks suppressed
[  162.638455][ T5540] waltop 0003:172F:0502.0014: unknown main item tag 0x4
[  162.638530][ T5540] waltop 0003:172F:0502.0014: unknown main item tag 0x0
[  162.638899][ T5540] waltop 0003:172F:0502.0014: unknown main item tag 0x0
[  162.638917][ T5540] waltop 0003:172F:0502.0014: unknown main item tag 0x0
[  162.638932][ T5540] waltop 0003:172F:0502.0014: unknown main item tag 0x0
[  162.638946][ T5540] waltop 0003:172F:0502.0014: unknown main item tag 0x0
[  162.638962][ T5540] waltop 0003:172F:0502.0014: unknown main item tag 0x0
[  162.638976][ T5540] waltop 0003:172F:0502.0014: unknown main item tag 0x0
[  162.638991][ T5540] waltop 0003:172F:0502.0014: unknown main item tag 0x0
[  162.639006][ T5540] waltop 0003:172F:0502.0014: unknown main item tag 0x0
[  162.656526][ T5540] waltop 0003:172F:0502.0014: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.6-1/input0
[  162.753604][ T5540] usb 6-1: USB disconnect, device number 9
[  162.835947][ T5723] usb 7-1: USB disconnect, device number 11
[  163.566177][ T9299] Unsupported ieee802154 address type: 0
[  163.621920][ T9301] netlink: 'syz.5.1340': attribute type 12 has an invalid length.
[  163.621968][ T9301] netlink: 'syz.5.1340': attribute type 29 has an invalid length.
[  163.622021][ T9301] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1340'.
[  163.622056][ T9301] netlink: 'syz.5.1340': attribute type 3 has an invalid length.
[  163.622087][ T9301] netlink: 'syz.5.1340': attribute type 2 has an invalid length.
[  163.622117][ T9301] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1340'.
[  163.698776][ T9305] loop6: detected capacity change from 0 to 128
[  163.712741][ T9305] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  163.728515][ T9305] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  163.783013][ T8093] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  163.937832][ T9321] loop5: detected capacity change from 0 to 256
[  163.941777][ T9321] exfat: Deprecated parameter 'namecase'
[  163.945571][ T9321] exfat: Deprecated parameter 'namecase'
[  163.955112][ T9321] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  164.805753][ T9338] profile_transition: 72 callbacks suppressed
[  164.806037][ T9338] profile_transition: name lookup ix on error
[  164.806048][ T9338] apparmor_bprm_creds_for_exec: label build failed
[  164.821421][ T9336] process '/newroot/371/file0' started with executable stack
[  164.893127][ T9344] FAULT_INJECTION: forcing a failure.
[  164.893127][ T9344] name failslab, interval 1, probability 0, space 0, times 0
[  164.893184][ T9344] CPU: 1 UID: 0 PID: 9344 Comm: syz.6.1358 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  164.893211][ T9344] Tainted: [L]=SOFTLOCKUP
[  164.893215][ T9344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.893219][ T9344] Call Trace:
[  164.893223][ T9344]  <TASK>
[  164.893227][ T9344]  dump_stack_lvl+0xe8/0x150
[  164.893244][ T9344]  should_fail_ex+0x410/0x560
[  164.893256][ T9344]  should_failslab+0xa8/0x100
[  164.893266][ T9344]  __kmalloc_noprof+0xfe/0x720
[  164.893278][ T9344]  ? security_inode_alloc+0x39/0x310
[  164.893289][ T9344]  ? kmem_cache_alloc_noprof+0x156/0x600
[  164.893299][ T9344]  ? sk_prot_alloc+0xe7/0x210
[  164.893309][ T9344]  ? sk_prot_alloc+0xe7/0x210
[  164.893320][ T9344]  sk_prot_alloc+0xe7/0x210
[  164.893328][ T9344]  ? sk_alloc+0x27/0x390
[  164.893338][ T9344]  sk_alloc+0x3a/0x390
[  164.893348][ T9344]  alg_create+0xcf/0x160
[  164.893359][ T9344]  __sock_create+0x4b3/0x9d0
[  164.893370][ T9344]  __sys_socket+0xd6/0x1b0
[  164.893380][ T9344]  __x64_sys_socket+0x7a/0x90
[  164.893388][ T9344]  do_syscall_64+0x166/0x520
[  164.893398][ T9344]  ? trace_irq_disable+0x3b/0x140
[  164.893405][ T9344]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.893414][ T9344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.893421][ T9344] RIP: 0033:0x7fcb12b9e159
[  164.893429][ T9344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.893435][ T9344] RSP: 002b:00007fcb10df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  164.893444][ T9344] RAX: ffffffffffffffda RBX: 00007fcb12e25fa0 RCX: 00007fcb12b9e159
[  164.893449][ T9344] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026
[  164.893454][ T9344] RBP: 00007fcb12c3506b R08: 0000000000000000 R09: 0000000000000000
[  164.893458][ T9344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.893462][ T9344] R13: 00007fcb12e26038 R14: 00007fcb12e25fa0 R15: 00007ffc1729d708
[  164.893473][ T9344]  </TASK>
[  164.986686][ T9348] fuse-io-uring is disabled by module parameter
[  165.056333][ T9354] loop6: detected capacity change from 0 to 1024
[  165.061372][ T9354] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  165.061435][ T9354] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  165.061827][ T9354] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  165.061847][ T9354] EXT4-fs (loop6): filesystem has both journal inode and journal device!
[  165.649974][ T9355] syz.6.1363 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  165.655323][ T9355] CPU: 0 UID: 0 PID: 9355 Comm: syz.6.1363 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  165.655351][ T9355] Tainted: [L]=SOFTLOCKUP
[  165.655355][ T9355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.655360][ T9355] Call Trace:
[  165.655364][ T9355]  <TASK>
[  165.655368][ T9355]  dump_stack_lvl+0xe8/0x150
[  165.655383][ T9355]  dump_header+0xd3/0x4b0
[  165.655394][ T9355]  oom_kill_process+0x3ab/0x9e0
[  165.655404][ T9355]  out_of_memory+0x1064/0x1480
[  165.655412][ T9355]  ? try_charge_memcg+0xbce/0x1590
[  165.655425][ T9355]  ? __pfx_out_of_memory+0x10/0x10
[  165.655432][ T9355]  ? do_raw_spin_unlock+0x4d/0x200
[  165.655445][ T9355]  try_charge_memcg+0xc78/0x1590
[  165.655458][ T9355]  ? __pfx_try_charge_memcg+0x10/0x10
[  165.655466][ T9355]  ? percpu_ref_tryget+0x15/0x180
[  165.655481][ T9355]  ? charge_memcg+0x47/0x310
[  165.655489][ T9355]  charge_memcg+0x1dd/0x310
[  165.655497][ T9355]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  165.655533][ T9355]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  165.655549][ T9355]  swap_cache_alloc_folio+0x4de/0x990
[  165.655573][ T9355]  swap_cache_read_folio+0x44/0x120
[  165.655587][ T9355]  swap_cluster_readahead+0x37c/0x5f0
[  165.655599][ T9355]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  165.655615][ T9355]  swapin_readahead+0x19a/0xbc0
[  165.655627][ T9355]  ? swap_table_get+0x1e/0x260
[  165.655636][ T9355]  ? __pfx_swapin_readahead+0x10/0x10
[  165.655646][ T9355]  ? swap_table_get+0x1e/0x260
[  165.655655][ T9355]  ? swap_table_get+0x1e/0x260
[  165.655662][ T9355]  ? swap_table_get+0x1e/0x260
[  165.655671][ T9355]  ? swap_table_get+0x216/0x260
[  165.655680][ T9355]  ? swap_cache_get_folio+0x2e7/0x2f0
[  165.655696][ T9355]  do_swap_page+0x421/0x4cb0
[  165.655707][ T9355]  ? __pte_offset_map+0x29/0x240
[  165.655716][ T9355]  ? __pte_offset_map+0x29/0x240
[  165.655728][ T9355]  ? do_swap_page+0x120/0x4cb0
[  165.655736][ T9355]  ? __pfx_do_swap_page+0x10/0x10
[  165.655743][ T9355]  ? __pte_offset_map+0x1ae/0x240
[  165.655753][ T9355]  ? pte_offset_map_rw_nolock+0xea/0x160
[  165.655763][ T9355]  handle_mm_fault+0x1332/0x3720
[  165.655776][ T9355]  ? handle_mm_fault+0xf4/0x3720
[  165.655788][ T9355]  ? __pfx_handle_mm_fault+0x10/0x10
[  165.655796][ T9355]  ? lock_vma_under_rcu+0x45a/0x500
[  165.655815][ T9355]  do_user_addr_fault+0xa4f/0x1340
[  165.655827][ T9355]  ? trace_page_fault_user+0x84/0x1e0
[  165.655835][ T9355]  exc_page_fault+0x6a/0xc0
[  165.655844][ T9355]  asm_exc_page_fault+0x26/0x30
[  165.655851][ T9355] RIP: 0033:0x7fcb12b59283
[  165.655860][ T9355] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 2e a4 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b
[  165.655867][ T9355] RSP: 002b:00007ffc1729d800 EFLAGS: 00010246
[  165.655875][ T9355] RAX: 0000000000000000 RBX: 000055557dfd4500 RCX: 0000000000000000
[  165.655880][ T9355] RDX: 00007ffc1729d840 RSI: 0000000000000000 RDI: 0000000000000000
[  165.655884][ T9355] RBP: 00007fcb12e27da0 R08: 0000000000000000 R09: 0000000000000000
[  165.655889][ T9355] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000287f4
[  165.655894][ T9355] R13: 00007fcb12e25fac R14: 00000000000284e6 R15: 00007ffc1729d970
[  165.655905][ T9355]  </TASK>
[  165.718995][ T9355] memory: usage 307200kB, limit 307200kB, failcnt 171
[  165.719011][ T9355] memory+swap: usage 307300kB, limit 9007199254740988kB, failcnt 0
[  165.719021][ T9355] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[  165.719028][ T9355] Memory cgroup stats for /syz6:
[  165.719308][ T9355] cache 0
[  165.719314][ T9355] rss 0
[  165.719319][ T9355] rss_huge 0
[  165.719323][ T9355] shmem 0
[  165.719327][ T9355] mapped_file 0
[  165.719332][ T9355] dirty 0
[  165.719336][ T9355] writeback 0
[  165.719340][ T9355] workingset_refault_anon 3
[  165.719344][ T9355] workingset_refault_file 0
[  165.719348][ T9355] swap 102400
[  165.719353][ T9355] swapcached 163840
[  165.719357][ T9355] pgpgin 30451
[  165.719361][ T9355] pgpgout 30444
[  165.719366][ T9355] pgfault 40097
[  165.719370][ T9355] pgmajfault 1
[  165.719375][ T9355] inactive_anon 24576
[  165.719379][ T9355] active_anon 4096
[  165.719384][ T9355] inactive_file 0
[  165.719388][ T9355] active_file 0
[  165.719392][ T9355] unevictable 0
[  165.719397][ T9355] hierarchical_memory_limit 314572800
[  165.719402][ T9355] hierarchical_memsw_limit 9223372036854771712
[  165.719407][ T9355] total_cache 0
[  165.719412][ T9355] total_rss 0
[  165.719416][ T9355] total_rss_huge 0
[  165.719420][ T9355] total_shmem 0
[  165.719424][ T9355] total_mapped_file 0
[  165.719429][ T9355] total_dirty 0
[  165.719433][ T9355] total_writeback 0
[  165.719438][ T9355] total_workingset_refault_anon 3
[  165.719443][ T9355] total_workingset_refault_file 0
[  165.719447][ T9355] total_swap 102400
[  165.719452][ T9355] total_swapcached 163840
[  165.719456][ T9355] total_pgpgin 30451
[  165.719461][ T9355] total_pgpgout 30444
[  165.719465][ T9355] total_pgfault 40097
[  165.719470][ T9355] total_pgmajfault 1
[  165.719474][ T9355] total_inactive_anon 24576
[  165.719479][ T9355] total_active_anon 4096
[  165.719483][ T9355] total_inactive_file 0
[  165.719488][ T9355] total_active_file 0
[  165.719492][ T9355] total_unevictable 0
[  165.719496][ T9355] anon_cost 0
[  165.719533][ T9355] file_cost 0
[  165.719538][ T9355] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1363,pid=9355,uid=0
[  165.719749][ T9355] Memory cgroup out of memory: Killed process 9355 (syz.6.1363) total-vm:102252kB, anon-rss:1256kB, file-rss:21584kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  165.753795][ T5723] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  165.875458][ T9356] syz.6.1363 (9356) used greatest stack depth: 19960 bytes left
[  165.950865][ T5723] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  165.956855][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  165.956923][ T5723] usb 6-1: Product: syz
[  165.956954][ T5723] usb 6-1: SerialNumber: syz
[  165.981136][ T5723] usb 6-1: config 0 descriptor??
[  166.194697][ T5723] hso 6-1:0.0: Failed to find BULK eps
[  166.362611][ T9384] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.362957][ T9384] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.390217][ T2096] usb 6-1: USB disconnect, device number 10
[  166.469429][ T9384] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.476836][ T9384] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.681636][ T8112] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.681702][ T8112] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.681753][ T8112] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.681766][ T8112] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.710208][ T9396] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1383'.
[  166.716685][ T9399] profile_transition: unconfined exec no attachment
[  166.716793][ T9399] apparmor_bprm_creds_for_exec: label build failed
[  166.766387][ T9402] profile_transition: unconfined exec no attachment
[  166.766451][ T9402] apparmor_bprm_creds_for_exec: label build failed
[  167.217258][ T9407] loop6: detected capacity change from 0 to 131072
[  167.218242][ T9407] F2FS-fs (loop6): Invalid log sectorsize (67108873)
[  167.218252][ T9407] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  167.218633][ T9407] F2FS-fs (loop6): invalid crc value
[  167.256776][ T9407] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  167.261537][ T9407] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  167.261583][ T9407] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  167.792873][ T9441] bond2: peer notification delay (315) is not a multiple of miimon (100), value rounded to 300 ms
[  167.798109][ T9441] bond2 (unregistering): Released all slaves
[  167.980706][ T9449] profile_transition: unconfined exec no attachment
[  167.980757][ T9449] apparmor_bprm_creds_for_exec: label build failed
[  168.002623][ T9450] profile_transition: unconfined exec no attachment
[  168.002667][ T9450] apparmor_bprm_creds_for_exec: label build failed
[  168.331925][ T9453] profile_transition: unconfined exec no attachment
[  168.332041][ T9453] apparmor_bprm_creds_for_exec: label build failed
[  168.451796][ T9455] profile_transition: unconfined exec no attachment
[  168.452043][ T9455] apparmor_bprm_creds_for_exec: label build failed
[  169.628684][ T9480] IPv6: addrconf: prefix option has invalid lifetime
[  169.730220][ T9478] loop6: detected capacity change from 0 to 32768
[  169.885100][ T9493] loop6: detected capacity change from 0 to 524287901
[  169.889697][ T6043] Buffer I/O error on dev loop6, logical block 65535968, async page read
[  169.893603][ T9493] Buffer I/O error on dev loop6, logical block 1, async page read
[  170.230091][ T1839] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  170.261213][ T9419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  170.325225][ T9509] xt_hashlimit: size too large, truncated to 1048576
[  170.450574][ T9513] profile_transition: unconfined exec no attachment
[  170.450677][ T9513] apparmor_bprm_creds_for_exec: label build failed
[  170.739802][ T9511] loop5: detected capacity change from 0 to 131072
[  170.745353][ T1839] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  170.748692][ T9511] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24)
[  170.748839][ T9511] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  170.748852][ T9511] F2FS-fs (loop5): Test dummy encryption mode enabled
[  170.750203][ T9511] F2FS-fs (loop5): invalid crc value
[  170.760605][ T1839] usb 7-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  170.760654][ T1839] usb 7-1: config 0 interface 0 has no altsetting 0
[  170.760702][ T1839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.770093][ T1839] usb 7-1: config 0 descriptor??
[  170.798487][ T9511] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  170.798889][ T9511] loop5: lost filesystem error report for type 5 error -117
[  170.801030][ T9511] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  170.804370][ T9511] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0
[  170.804382][ T9511] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  170.804409][ T9511] F2FS-fs (loop5): Start checkpoint disabled!
[  170.812512][ T9511] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0
[  170.816556][ T9511] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  170.816567][ T9511] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  171.117319][   T28] IPVS: starting estimator thread 0...
[  171.178215][ T1839] ryos 0003:1E7D:3232.0015: invalid report_size 61483
[  171.178275][ T1839] ryos 0003:1E7D:3232.0015: item 0 2 1 7 parsing failed
[  171.178692][ T1839] ryos 0003:1E7D:3232.0015: parse failed
[  171.178719][ T1839] ryos 0003:1E7D:3232.0015: probe with driver ryos failed with error -22
[  171.200197][ T9529] IPVS: using max 87 ests per chain, 208800 per kthread
[  171.379749][ T1839] usb 7-1: USB disconnect, device number 12
[  172.260852][ T5723] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  172.430212][ T5723] usb 6-1: Using ep0 maxpacket: 8
[  172.431452][ T5723] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  172.434870][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.434885][ T5723] usb 6-1: Product: syz
[  172.434894][ T5723] usb 6-1: Manufacturer: syz
[  172.434902][ T5723] usb 6-1: SerialNumber: syz
[  172.437302][ T5723] usb 6-1: config 0 descriptor??
[  172.439948][ T5723] gspca_main: se401-2.14.0 probing 047d:5003
[  172.845088][ T5723] gspca_se401: Bayer format not supported!
[  172.869202][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1447'.
[  173.025513][ T9567] loop6: detected capacity change from 0 to 32768
[  173.031584][ T9567] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1452 (9567)
[  173.042064][ T9567] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  173.042100][ T9567] BTRFS info (device loop6): using blake2b checksum algorithm
[  173.055767][ T9574] profile_transition: unconfined exec no attachment
[  173.055809][ T9574] apparmor_bprm_creds_for_exec: label build failed
[  173.074838][   T25] usb 6-1: USB disconnect, device number 11
[  173.118363][ T9567] BTRFS info (device loop6): enabling ssd optimizations
[  173.118404][ T9567] BTRFS info (device loop6): turning on async discard
[  173.118456][ T9567] BTRFS info (device loop6): enabling free space tree
[  173.118482][ T9567] BTRFS info (device loop6): use zstd compression, level 3
[  173.137172][   T34] audit: type=1800 audit(1789787357.272:131): pid=9567 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.6.1452" name="file1" dev="loop6" ino=260 res=0 errno=0
[  173.156709][ T8093] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  173.189948][ T9591] profile_transition: unconfined exec no attachment
[  173.189991][ T9591] apparmor_bprm_creds_for_exec: label build failed
[  173.777800][ T9629] profile_transition: unconfined exec no attachment
[  173.777886][ T9629] apparmor_bprm_creds_for_exec: label build failed
[  173.815828][ T9632] profile_transition: unconfined exec no attachment
[  173.815916][ T9632] apparmor_bprm_creds_for_exec: label build failed
[  173.861057][ T9635] loop5: detected capacity change from 0 to 64
[  173.897499][ T9635] BFS-fs: bfs_readdir(): Bad f_pos=0000ab07 for loop5:00000002
[  174.509467][ T9645] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1480'.
[  174.552752][ T9649] loop6: detected capacity change from 0 to 1024
[  174.594883][ T9649] hfsplus: request for non-existent node 33423360 in B*Tree
[  174.594933][ T9649] hfsplus: request for non-existent node 33423360 in B*Tree
[  174.675698][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1486'.
[  174.693647][   T57] block nbd1: Receive control failed (result -107)
[  174.719972][ T9660] fuse: fd is not a fuse device
[  175.113468][ T9695] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  175.155711][ T9697] Cannot find set identified by id 0 to match
[  175.611999][ T9713] fuse: fd is not a fuse device
[  176.276901][ T9724] FAULT_INJECTION: forcing a failure.
[  176.276901][ T9724] name failslab, interval 1, probability 0, space 0, times 0
[  176.276943][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.6.1516 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  176.276970][ T9724] Tainted: [L]=SOFTLOCKUP
[  176.276974][ T9724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.276979][ T9724] Call Trace:
[  176.276983][ T9724]  <TASK>
[  176.276987][ T9724]  dump_stack_lvl+0xe8/0x150
[  176.277002][ T9724]  should_fail_ex+0x410/0x560
[  176.277015][ T9724]  should_failslab+0xa8/0x100
[  176.277025][ T9724]  __kmalloc_noprof+0xfe/0x720
[  176.277035][ T9724]  ? rcu_is_watching+0x16/0xb0
[  176.277046][ T9724]  ? tomoyo_realpath_from_path+0xef/0x640
[  176.277058][ T9724]  ? tomoyo_realpath_from_path+0xef/0x640
[  176.277072][ T9724]  tomoyo_realpath_from_path+0xef/0x640
[  176.277087][ T9724]  ? tomoyo_path_number_perm+0x219/0x5f0
[  176.277097][ T9724]  tomoyo_path_number_perm+0x246/0x5f0
[  176.277108][ T9724]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  176.277116][ T9724]  ? __lock_acquire+0x683/0x2cf0
[  176.277126][ T9724]  ? vfs_write+0x9d5/0xba0
[  176.277137][ T9724]  ? hook_file_ioctl+0x1f2/0x600
[  176.277154][ T9724]  ? __fget_files+0x2a/0x420
[  176.277163][ T9724]  ? __fget_files+0x2a/0x420
[  176.277171][ T9724]  ? __fget_files+0x3a2/0x420
[  176.277179][ T9724]  ? __fget_files+0x2a/0x420
[  176.277189][ T9724]  security_file_ioctl+0xc3/0x2a0
[  176.277198][ T9724]  __se_sys_ioctl+0x47/0x170
[  176.277210][ T9724]  do_syscall_64+0x166/0x520
[  176.277219][ T9724]  ? trace_irq_disable+0x3b/0x140
[  176.277225][ T9724]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.277235][ T9724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.277242][ T9724] RIP: 0033:0x7fcb12b9e159
[  176.277250][ T9724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.277256][ T9724] RSP: 002b:00007fcb10df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  176.277265][ T9724] RAX: ffffffffffffffda RBX: 00007fcb12e25fa0 RCX: 00007fcb12b9e159
[  176.277271][ T9724] RDX: 0000200000000440 RSI: 00000000c02064b2 RDI: 0000000000000003
[  176.277276][ T9724] RBP: 00007fcb12c3506b R08: 0000000000000000 R09: 0000000000000000
[  176.277281][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.277285][ T9724] R13: 00007fcb12e26038 R14: 00007fcb12e25fa0 R15: 00007ffc1729d708
[  176.277298][ T9724]  </TASK>
[  176.277411][ T9724] ERROR: Out of memory at tomoyo_realpath_from_path.
[  176.417202][ T9732] loop5: detected capacity change from 0 to 16
[  176.423418][ T9733] fuse: fd is not a fuse device
[  176.425704][ T9732] erofs (device loop5): mounted with root inode @ nid 36.
[  176.454263][ T9729] netlink: zone id is out of range
[  176.454298][ T9729] netlink: zone id is out of range
[  176.454325][ T9729] netlink: zone id is out of range
[  176.454347][ T9729] netlink: zone id is out of range
[  176.454369][ T9729] netlink: zone id is out of range
[  176.454421][ T9729] netlink: zone id is out of range
[  176.454445][ T9729] netlink: zone id is out of range
[  176.454477][ T9729] netlink: zone id is out of range
[  176.454498][ T9729] netlink: zone id is out of range
[  176.559767][ T9739] loop6: detected capacity change from 0 to 256
[  176.567678][ T9739] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  176.640661][ T9744] profile_transition: unconfined exec no attachment
[  176.640710][ T9744] apparmor_bprm_creds_for_exec: label build failed
[  176.691362][ T9747] loop6: detected capacity change from 0 to 128
[  176.693964][ T9747] EXT4-fs: Ignoring removed nobh option
[  176.698587][ T9747] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  176.709618][ T9747] fscrypt (loop6, inode 12): Reserved bits set in encryption policy
[  176.801033][ T8093] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  177.086234][ T9756] syzkaller0: entered promiscuous mode
[  177.086284][ T9756] syzkaller0: entered allmulticast mode
[  177.206978][ T9762] loop6: detected capacity change from 0 to 1024
[  177.215788][ T9762] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  177.222012][ T9762] JBD2: no valid journal superblock found
[  177.240687][ T9762] EXT4-fs (loop6): Could not load journal inode
[  178.047531][ T9780] netlink: 'syz.5.1538': attribute type 4 has an invalid length.
[  178.142333][ T9786] loop6: detected capacity change from 0 to 128
[  178.189834][ T9791] profile_transition: unconfined exec no attachment
[  178.189882][ T9791] apparmor_bprm_creds_for_exec: label build failed
[  178.395330][ T9806] loop6: detected capacity change from 0 to 4096
[  179.138484][ T9818] loop6: detected capacity change from 0 to 1024
[  179.145375][ T9818] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  179.180448][ T5723] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  179.332566][ T5723] usb 6-1: not running at top speed; connect to a high speed hub
[  179.332638][ T5723] usb 6-1: New USB device found, idVendor=0e41, idProduct=4151, bcdDevice= 0.40
[  179.333529][ T5723] usb 6-1: config 0 has no interfaces?
[  179.336953][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.336970][ T5723] usb 6-1: Product: syz
[  179.336978][ T5723] usb 6-1: Manufacturer: syz
[  179.336986][ T5723] usb 6-1: SerialNumber: syz
[  179.344248][ T5723] usb 6-1: config 0 descriptor??
[  179.416815][ T9824] bridge0: port 3(macvlan2) entered blocking state
[  179.416997][ T9824] bridge0: port 3(macvlan2) entered disabled state
[  179.417096][ T9824] macvlan2: entered allmulticast mode
[  179.417107][ T9824] syz_tun: entered allmulticast mode
[  179.418800][ T9824] macvlan2: entered promiscuous mode
[  179.568453][ T1839] usb 6-1: USB disconnect, device number 12
[  179.990178][ T1839] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  180.113663][ T9855] loop5: detected capacity change from 0 to 128
[  180.145461][ T1839] usb 7-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  180.150656][ T1839] usb 7-1: config 0 has an invalid interface number: 99 but max is 0
[  180.151593][ T1839] usb 7-1: config 0 has no interface number 0
[  180.158902][ T1839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.158960][ T1839] usb 7-1: Product: syz
[  180.159001][ T1839] usb 7-1: Manufacturer: syz
[  180.159034][ T1839] usb 7-1: SerialNumber: syz
[  180.165089][ T1839] usb 7-1: config 0 descriptor??
[  180.171423][ T1839] peak_usb 7-1:0.99: probe with driver peak_usb failed with error 99
[  180.231934][ T9859] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  180.239508][ T9859] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  180.378867][ T1839] usb 7-1: USB disconnect, device number 13
[  180.400995][ T9873] profile_transition: unconfined exec no attachment
[  180.401050][ T9873] apparmor_bprm_creds_for_exec: label build failed
[  180.423235][ T9874] profile_transition: unconfined exec no attachment
[  180.423383][ T9874] apparmor_bprm_creds_for_exec: label build failed
[  180.457207][ T9876] profile_transition: unconfined exec no attachment
[  180.457262][ T9876] apparmor_bprm_creds_for_exec: label build failed
[  180.497174][ T9877] profile_transition: unconfined exec no attachment
[  180.497233][ T9877] apparmor_bprm_creds_for_exec: label build failed
[  180.624015][ T9884] loop5: detected capacity change from 0 to 2048
[  180.633964][ T9884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.661147][ T9884] EXT4-fs (loop5): shut down requested (1)
[  180.693218][ T7760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.729520][ T9891] loop5: detected capacity change from 0 to 512
[  180.733760][ T9891] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  180.947904][ T9901] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x024dac45, utbl_chksum : 0xe619d30d)
[  181.305297][ T9916] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  181.527626][ T9916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.891302][   T37] wlan1: Trigger new scan to find an IBSS to join
[  182.167386][ T7760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.209520][ T9930] net_ratelimit: 59 callbacks suppressed
[  182.209583][ T9930] openvswitch: netlink: Duplicate or invalid key (type 0).
[  182.239034][ T9932] set_capacity_and_notify: 2 callbacks suppressed
[  182.242154][ T9932] loop5: detected capacity change from 0 to 256
[  182.259035][ T9932] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  182.293766][ T9936] random: crng reseeded on system resumption
[  182.331470][ T9936] Restarting kernel threads ...
[  182.336629][ T9936] Done restarting kernel threads.
[  182.489980][ T9943] profile_transition: unconfined exec no attachment
[  182.490249][ T9943] apparmor_bprm_creds_for_exec: label build failed
[  182.779777][ T9949] xt_hashlimit: size too large, truncated to 1048576
[  182.797040][ T9950] profile_transition: unconfined exec no attachment
[  182.797088][ T9950] apparmor_bprm_creds_for_exec: label build failed
[  183.110610][   T33] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  183.293237][   T33] usb 7-1: unable to get BOS descriptor or descriptor too short
[  183.293295][   T33] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  183.294263][   T33] usb 7-1: config 63 has an invalid interface number: 66 but max is 0
[  183.294273][   T33] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  183.294280][   T33] usb 7-1: config 63 has no interface number 0
[  183.294291][   T33] usb 7-1: config 63 interface 66 has no altsetting 0
[  183.296107][   T33] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.296118][   T33] usb 7-1: Product: syz
[  183.296123][   T33] usb 7-1: Manufacturer: syz
[  183.296128][   T33] usb 7-1: SerialNumber: syz
[  183.395466][ T9981] FAULT_INJECTION: forcing a failure.
[  183.395466][ T9981] name failslab, interval 1, probability 0, space 0, times 0
[  183.395520][ T9981] CPU: 1 UID: 0 PID: 9981 Comm: syz.5.1620 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  183.395546][ T9981] Tainted: [L]=SOFTLOCKUP
[  183.395550][ T9981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.395555][ T9981] Call Trace:
[  183.395559][ T9981]  <TASK>
[  183.395563][ T9981]  dump_stack_lvl+0xe8/0x150
[  183.395578][ T9981]  should_fail_ex+0x410/0x560
[  183.395608][ T9981]  should_failslab+0xa8/0x100
[  183.395617][ T9981]  __kmalloc_noprof+0xfe/0x720
[  183.395629][ T9981]  ? __kmalloc_noprof+0x1ab/0x720
[  183.395639][ T9981]  ? mpi_powm+0x1173/0x2480
[  183.395650][ T9981]  ? mpi_powm+0x1173/0x2480
[  183.395661][ T9981]  mpi_powm+0x1173/0x2480
[  183.395679][ T9981]  ? __pfx_mpi_powm+0x10/0x10
[  183.395690][ T9981]  ? lockdep_hardirqs_on+0x7b/0x110
[  183.395700][ T9981]  ? kfree+0x1c5/0x650
[  183.395708][ T9981]  ? rsa_enc+0x2e0/0x480
[  183.395720][ T9981]  rsa_enc+0x338/0x480
[  183.395732][ T9981]  ? __pfx_rsa_enc+0x10/0x10
[  183.395741][ T9981]  ? __virt_addr_valid+0x137/0x390
[  183.395750][ T9981]  ? __virt_addr_valid+0x2e8/0x390
[  183.395760][ T9981]  ? sg_init_one+0xf5/0x1c0
[  183.395770][ T9981]  rsassa_pkcs1_verify+0x52b/0xbb0
[  183.395784][ T9981]  ? __pfx_rsassa_pkcs1_verify+0x10/0x10
[  183.395796][ T9981]  ? public_key_verify_signature+0x34a/0x9e0
[  183.395809][ T9981]  ? rsassa_pkcs1_set_pub_key+0x13d/0x1a0
[  183.395819][ T9981]  public_key_verify_signature+0x79b/0x9e0
[  183.395833][ T9981]  ? __pfx_public_key_verify_signature+0x10/0x10
[  183.395848][ T9981]  ? asymmetric_key_generate_id+0x60/0x170
[  183.395856][ T9981]  ? asymmetric_key_id_same+0x67/0xe0
[  183.395867][ T9981]  x509_check_for_self_signed+0x326/0x430
[  183.395878][ T9981]  x509_cert_parse+0x622/0x7a0
[  183.395888][ T9981]  x509_key_preparse+0x64/0x6d0
[  183.395897][ T9981]  ? down_read+0x2be/0x330
[  183.395907][ T9981]  asymmetric_key_preparse+0xb9/0x1b0
[  183.395916][ T9981]  __key_create_or_update+0x3a9/0xa80
[  183.395935][ T9981]  ? __pfx___key_create_or_update+0x10/0x10
[  183.395948][ T9981]  ? lookup_user_key+0xb68/0x1150
[  183.395962][ T9981]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  183.395972][ T9981]  ? __pfx_keyring_search_iterator+0x10/0x10
[  183.395981][ T9981]  key_create_or_update+0x42/0x60
[  183.395993][ T9981]  __se_sys_add_key+0x349/0x420
[  183.396002][ T9981]  ? __pfx___se_sys_add_key+0x10/0x10
[  183.396014][ T9981]  ? __x64_sys_add_key+0x20/0xc0
[  183.396023][ T9981]  do_syscall_64+0x166/0x520
[  183.396032][ T9981]  ? trace_irq_disable+0x3b/0x140
[  183.396039][ T9981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.396049][ T9981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.396056][ T9981] RIP: 0033:0x7f9bf939e159
[  183.396065][ T9981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.396071][ T9981] RSP: 002b:00007f9bfa24a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  183.396080][ T9981] RAX: ffffffffffffffda RBX: 00007f9bf9625fa0 RCX: 00007f9bf939e159
[  183.396086][ T9981] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  183.396091][ T9981] RBP: 00007f9bf943506b R08: 000000002c8fd3e9 R09: 0000000000000000
[  183.396096][ T9981] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  183.396100][ T9981] R13: 00007f9bf9626038 R14: 00007f9bf9625fa0 R15: 00007ffe9033c878
[  183.396112][ T9981]  </TASK>
[  183.508682][ T9987] loop5: detected capacity change from 0 to 256
[  183.537669][   T33] uvcvideo 7-1:63.66: probe with driver uvcvideo failed with error -22
[  183.541424][ T9987] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  183.541643][ T9987] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  183.544966][   T33] usb 7-1: USB disconnect, device number 14
[  183.612528][ T9989] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  183.661171][ T9991] block2mtd: device name too long
[  184.071851][ T2427] pvrusb2: request_firmware fatal error with code=-110
[  184.071911][ T2427] pvrusb2: Failure uploading firmware1
[  184.071959][ T2427] pvrusb2: Device initialization was not successful.
[  184.071986][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  184.072015][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  184.078588][ T2427] pvrusb2: Failed to submit write-control URB status=-19
[  184.079005][ T2427] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  184.079020][ T2427] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  184.089043][ T5683] pvrusb2: Device being rendered inoperable
[  184.135240][ T9997] loop6: detected capacity change from 0 to 512
[  184.158966][ T9997] EXT4-fs (loop6): 1 truncate cleaned up
[  184.163072][ T8112] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.166524][ T9997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.190559][   T34] audit: type=1800 audit(184.073:132): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.6.1628" name="file0" dev="loop6" ino=13 res=0 errno=0
[  184.197857][ T9997] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1628: invalid indirect mapped block 234881024 (level 0)
[  184.261090][ T8093] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.306932][ T8112] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.442236][ T8112] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.517757][T10011] futex_wake_op: syz.6.1630 tries to shift op by -1; fix this program
[  184.526089][ T8112] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.749401][T10022] loop6: detected capacity change from 0 to 2048
[  184.749967][T10022] EXT4-fs: Ignoring removed nomblk_io_submit option
[  184.768544][T10022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.781737][T10022] EXT4-fs (loop6): shut down requested (2)
[  184.793662][T10022] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.909586][T10030] profile_transition: unconfined exec no attachment
[  184.909621][T10030] apparmor_bprm_creds_for_exec: label build failed
[  184.946071][T10035] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  184.952360][T10036] profile_transition: unconfined exec no attachment
[  184.952400][T10036] apparmor_bprm_creds_for_exec: label build failed
[  184.964007][ T8112] bridge_slave_1: left allmulticast mode
[  184.964055][ T8112] bridge_slave_1: left promiscuous mode
[  184.964172][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.975326][ T8112] bridge_slave_0: left allmulticast mode
[  184.975372][ T8112] bridge_slave_0: left promiscuous mode
[  184.975486][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.008173][T10040] profile_transition: unconfined exec no attachment
[  185.008241][T10040] apparmor_bprm_creds_for_exec: label build failed
[  185.045221][T10043] profile_transition: unconfined exec no attachment
[  185.045254][T10043] apparmor_bprm_creds_for_exec: label build failed
[  185.084335][T10046] profile_transition: unconfined exec no attachment
[  185.084437][T10046] apparmor_bprm_creds_for_exec: label build failed
[  185.131165][T10032] loop5: detected capacity change from 0 to 32768
[  185.134180][T10032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1643 (10032)
[  185.158510][T10032] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.158894][T10049] profile_transition: unconfined exec no attachment
[  185.158901][T10049] apparmor_bprm_creds_for_exec: label build failed
[  185.166608][T10032] BTRFS info (device loop5): using crc32c checksum algorithm
[  185.258136][T10032] BTRFS info (device loop5): enabling ssd optimizations
[  185.258174][T10032] BTRFS info (device loop5): turning on flush-on-commit
[  185.258206][T10032] BTRFS info (device loop5): enabling free space tree
[  185.258230][T10032] BTRFS info (device loop5): enabling auto defrag
[  185.258255][T10032] BTRFS info (device loop5): use lzo compression, level 1
[  185.258307][T10032] BTRFS info (device loop5): max_inline set to 4096
[  185.323707][ T8112] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  185.338005][ T7760] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.346952][ T8112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.347419][T10072] profile_transition: unconfined exec no attachment
[  185.347430][T10072] apparmor_bprm_creds_for_exec: label build failed
[  185.365663][ T8112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.369554][ T8112] bond0 (unregistering): Released all slaves
[  185.387828][ T5356] 8021q: adding VLAN 0 to HW filter on device eth13
[  185.406827][T10074] profile_transition: unconfined exec no attachment
[  185.406859][T10074] apparmor_bprm_creds_for_exec: label build failed
[  185.435162][T10075] profile_transition: unconfined exec no attachment
[  185.481841][T10080] profile_transition: unconfined exec no attachment
[  185.511274][ T8112] rxrpc: Leaked peer 81 {1} 127.0.0.1:7003
[  185.624451][ T5356] 8021q: adding VLAN 0 to HW filter on device eth14
[  185.822582][ T8112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.822630][ T8112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.845979][ T8112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.846013][ T8112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.879427][ T8112] veth0_macvtap: left promiscuous mode
[  185.879606][ T8112] veth1_vlan: left promiscuous mode
[  185.879736][ T8112] veth0_vlan: left promiscuous mode
[  185.898355][T10096] loop5: detected capacity change from 0 to 32768
[  185.903896][T10096] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  185.907386][T10096] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1659 (10096)
[  185.937154][T10096] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  185.937206][T10096] BTRFS info (device loop5): using sha256 checksum algorithm
[  186.001560][ T5812] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0x39b86b5484510f55f95ebe8d181f8d1915fd3ca7fd85908971a8f138d0e7d946 level 0
[  186.001696][T10096] BTRFS warning (device loop5): couldn't read tree root
[  186.100401][T10096] BTRFS error (device loop5): open_ctree failed: -EIO
[  186.385254][T10142] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  186.389509][ T8112] team0 (unregistering): Port device team_slave_1 removed
[  186.415834][ T8112] team0 (unregistering): Port device team_slave_0 removed
[  186.559267][T10148] overlayfs: failed to clone upperpath
[  186.679920][T10152] loop5: detected capacity change from 0 to 4096
[  186.715525][T10157] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.729505][ T5356] 8021q: adding VLAN 0 to HW filter on device eth15
[  186.845933][T10159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.910196][ T1126] wlan1: Trigger new scan to find an IBSS to join
[  187.019242][ T8112] IPVS: stop unused estimator thread 0...
[  187.072316][ T5356] 8021q: adding VLAN 0 to HW filter on device eth16
[  187.378745][T10191] loop5: detected capacity change from 0 to 2048
[  187.398116][T10191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.432494][ T7760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.506571][T10206] apparmor_bprm_creds_for_exec: 24 callbacks suppressed
[  187.506634][T10206] apparmor_bprm_creds_for_exec: label build failed
[  187.536756][T10207] apparmor_bprm_creds_for_exec: label build failed
[  187.572366][T10211] apparmor_bprm_creds_for_exec: label build failed
[  187.592444][T10212] apparmor_bprm_creds_for_exec: label build failed
[  187.622995][T10214] apparmor_bprm_creds_for_exec: label build failed
[  187.633059][T10204] loop5: detected capacity change from 0 to 32768
[  187.635448][T10204] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1690 (10204)
[  187.654483][T10204] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.654535][T10204] BTRFS info (device loop5): using sha256 checksum algorithm
[  187.663604][T10218] apparmor_bprm_creds_for_exec: label build failed
[  187.672593][T10219] apparmor_bprm_creds_for_exec: label build failed
[  187.695651][T10230] apparmor_bprm_creds_for_exec: label build failed
[  187.720632][T10204] BTRFS info (device loop5): enabling ssd optimizations
[  187.720682][T10204] BTRFS info (device loop5): turning on async discard
[  187.720722][T10204] BTRFS info (device loop5): enabling free space tree
[  187.745313][ T7760] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.764046][T10238] apparmor_bprm_creds_for_exec: label build failed
[  187.846813][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.882187][T10242] apparmor_bprm_creds_for_exec: label build failed
[  188.132796][T10258] loop5: detected capacity change from 0 to 512
[  188.146310][T10258] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1704: corrupted in-inode xattr: invalid ea_ino
[  188.146363][T10258] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  188.148219][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1705'.
[  188.151993][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  188.152008][    C0] EXT4-fs (loop5): initial error at time 188: ext4_iget_extra_inode:5210: inode 15
[  188.152029][    C0] EXT4-fs (loop5): last error at time 188: ext4_iget_extra_inode:5210: inode 15
[  188.173576][T10258] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1704: couldn't read orphan inode 15 (err -117)
[  188.173633][T10258] loop5: lost filesystem error report for type 5 error -117
[  188.182495][T10258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.233947][T10270] netlink: 'syz.6.1709': attribute type 4 has an invalid length.
[  189.007987][ T7760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.074645][T10290] loop5: detected capacity change from 0 to 16
[  189.085384][T10290] erofs (device loop5): mounted with root inode @ nid 36.
[  189.318291][T10301] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  189.318340][T10301] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  189.417212][T10307] syzkaller0: entered promiscuous mode
[  189.417296][T10307] syzkaller0: entered allmulticast mode
[  189.422496][T10307] TC_ACT_REPEAT abuse ?
[  189.486010][T10317] overlayfs: failed to clone upperpath
[  191.006846][T10370] 9p: Bad value for 'rfdno'
[  191.425690][T10345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  191.677639][T10415] profile_transition: 32 callbacks suppressed
[  191.677853][T10415] profile_transition: unconfined exec no attachment
[  191.719573][T10421] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached
[  192.135006][T10443] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  192.900360][ T1839] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  193.051921][ T1839] usb 6-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00
[  193.053179][ T1839] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  193.053195][ T1839] usb 6-1: config 0 interface 0 has no altsetting 0
[  193.053236][ T1839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.057652][ T1839] usb 6-1: config 0 descriptor??
[  193.143146][T10488] openvswitch: netlink: Unknown key attributes 2
[  193.474904][ T1839] input: HID 05ac:8240 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8240.0016/input/input25
[  193.606246][ T1839] appleir 0003:05AC:8240.0016: input,hiddev1,hidraw0: USB HID v0.00 Joystick [HID 05ac:8240] on usb-dummy_hcd.5-1/input0
[  193.675380][   T25] usb 6-1: USB disconnect, device number 13
[  193.960948][   T34] audit: type=1326 audit(193.843:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10529 comm="syz.6.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb12b9e159 code=0x7ffc0000
[  193.969902][   T34] audit: type=1326 audit(193.843:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10529 comm="syz.6.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb12b9e159 code=0x7ffc0000
[  193.978852][   T34] audit: type=1326 audit(193.863:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10529 comm="syz.6.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb12b9e159 code=0x7ffc0000
[  193.978899][   T34] audit: type=1326 audit(193.863:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10529 comm="syz.6.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb12b9e159 code=0x7ffc0000
[  193.978949][   T34] audit: type=1326 audit(193.863:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10529 comm="syz.6.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb12b9e159 code=0x7ffc0000
[  194.010711][   T34] audit: type=1326 audit(193.883:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10529 comm="syz.6.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb12b9e159 code=0x7ffc0000
[  194.010780][   T34] audit: type=1326 audit(193.883:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10529 comm="syz.6.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb12b9e159 code=0x7ffc0000
[  194.010852][   T34] audit: type=1326 audit(193.883:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10529 comm="syz.6.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb12b9e159 code=0x7ffc0000
[  194.010901][   T34] audit: type=1326 audit(193.883:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10529 comm="syz.6.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb12b9e159 code=0x7ffc0000
[  194.054067][   T34] audit: type=1326 audit(193.933:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10529 comm="syz.6.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb12b9e159 code=0x7ffc0000
[  194.402467][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  194.569258][T10543] tipc: Started in network mode
[  194.569296][T10543] tipc: Node identity 4e083ad93732, cluster identity 4711
[  194.569560][T10543] tipc: Enabled bearer <eth:hsr0>, priority 10
[  194.949170][T10549] syzkaller1: entered promiscuous mode
[  194.951394][T10549] syzkaller1: entered allmulticast mode
[  195.085490][T10566] geneve2: entered promiscuous mode
[  195.155226][T10570] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1837'.
[  195.474444][T10588] fuse: fd is not a fuse device
[  195.618006][T10595] fuse: fd is not a fuse device
[  195.670353][   T25] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[  195.686576][ T7299] tipc: Node number set to 2033859289
[  195.903397][   T25] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  195.908320][   T25] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 4
[  195.913633][   T25] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0
[  195.918125][   T25] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 51, changing to 4
[  195.922817][   T25] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 552, setting to 0
[  195.930387][   T25] usb 6-1: string descriptor 0 read error: -22
[  195.933256][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.175436][   T25] usb 6-1: low speed audio streaming not supported
[  196.177807][   T25] usb 6-1: low speed audio streaming not supported
[  196.200761][   T25] usb 6-1: USB disconnect, device number 14
[  196.212534][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  196.528115][T10616] fuse: fd is not a fuse device
[  196.621078][T10620] bridge1: the hash_elasticity option has been deprecated and is always 16
[  196.844365][T10628] loop5: detected capacity change from 0 to 32768
[  196.847909][T10628] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1864 (10628)
[  196.915527][T10633] profile_transition: unconfined exec no attachment
[  196.915837][T10628] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.915877][T10628] BTRFS info (device loop5): using sha256 checksum algorithm
[  196.927661][T10633] apparmor_bprm_creds_for_exec: 1 callbacks suppressed
[  196.927725][T10633] apparmor_bprm_creds_for_exec: label build failed
[  197.025315][T10628] BTRFS info (device loop5): enabling ssd optimizations
[  197.027909][T10628] BTRFS info (device loop5): turning on async discard
[  197.031951][T10628] BTRFS info (device loop5): enabling free space tree
[  197.057074][ T7760] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  197.146209][T10652] profile_transition: unconfined exec no attachment
[  197.146264][T10652] apparmor_bprm_creds_for_exec: label build failed
[  197.367324][T10666] profile_transition: unconfined exec no attachment
[  197.367386][T10666] apparmor_bprm_creds_for_exec: label build failed
[  197.390822][T10667] profile_transition: unconfined exec no attachment
[  197.390882][T10667] apparmor_bprm_creds_for_exec: label build failed
[  197.756749][T10687] loop5: detected capacity change from 0 to 8192
[  197.802636][T10687] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  197.802690][T10687] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  197.803021][T10687]  loop5: unable to read partition table
[  197.803173][T10687] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
[  197.880128][T10689] profile_transition: unconfined exec no attachment
[  197.880191][T10689] apparmor_bprm_creds_for_exec: label build failed
[  197.889441][T10690] loop5: detected capacity change from 0 to 512
[  197.895305][T10690] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  197.918875][T10690] EXT4-fs (loop5): 1 truncate cleaned up
[  197.922872][T10690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.941629][T10694] profile_transition: unconfined exec no attachment
[  197.941695][T10694] apparmor_bprm_creds_for_exec: label build failed
[  197.998880][ T7760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.999567][T10695] profile_transition: unconfined exec no attachment
[  197.999575][T10695] apparmor_bprm_creds_for_exec: label build failed
[  198.044452][T10696] profile_transition: unconfined exec no attachment
[  198.044506][T10696] apparmor_bprm_creds_for_exec: label build failed
[  198.065779][T10698] loop5: detected capacity change from 0 to 512
[  198.072697][T10698] EXT4-fs (loop5): Test dummy encryption mode enabled
[  198.075737][T10698] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  198.080480][T10698] EXT4-fs (loop5): group descriptors corrupted!
[  198.180725][T10704] profile_transition: unconfined exec no attachment
[  198.181414][T10704] apparmor_bprm_creds_for_exec: label build failed
[  198.241031][T10712] profile_transition: unconfined exec no attachment
[  198.241067][T10712] apparmor_bprm_creds_for_exec: label build failed
[  198.874559][T10745] loop5: detected capacity change from 0 to 1024
[  199.159609][   T34] kauditd_printk_skb: 101 callbacks suppressed
[  199.159761][   T34] audit: type=1400 audit(199.033:244): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D0180C2 pid=10752 comm="syz.5.1900"
[  199.560331][ T2096] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  199.722917][ T2096] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  199.724116][ T2096] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.724191][ T2096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.728804][ T2096] usb 6-1: config 0 descriptor??
[  200.340577][ T2096] ath6kl: Failed to read usb control message: -71
[  200.340652][ T2096] ath6kl: Unable to read the bmi data from the device: -71
[  200.340692][ T2096] ath6kl: unable to read target info byte count: -71
[  200.345723][ T2096] ath6kl: Failed to init ath6kl core: -71
[  200.346103][ T2096] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71
[  200.363210][ T2096] usb 6-1: USB disconnect, device number 15
[  200.404452][   T34] audit: type=1800 audit(200.283:245): pid=10782 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.1913" name="/newroot/348/file0" dev="tmpfs" ino=1861 res=0 errno=0
[  200.486734][T10786] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  200.908079][T10805] loop5: detected capacity change from 0 to 1024
[  200.914896][T10805] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  200.915775][T10806] sch_tbf: burst 1 is lower than device veth1_virt_wifi mtu (1514) !
[  200.946200][T10805] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.1923: lblock 2 mapped to illegal pblock 2 (length 1)
[  200.946259][T10805] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  200.947313][T10805] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  200.947343][T10805] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.1923: lblock 0 mapped to illegal pblock 48 (length 1)
[  200.947427][T10805] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  200.947572][T10805] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  200.947599][T10805] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.1923: Failed to acquire dquot type 0
[  200.947613][T10805] loop5: lost filesystem error report for type 5 error -117
[  200.947906][T10805] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem
[  200.947920][T10805] loop5: lost filesystem error report for type 5 error -117
[  200.948034][T10805] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.1923: mark_inode_dirty error
[  200.948049][T10805] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  200.948209][T10805] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[  200.948263][T10805] EXT4-fs (loop5): 1 orphan inode deleted
[  200.949245][T10805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.968219][ T7760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.975468][   T29] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u9:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  200.975492][   T29] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  200.980436][   T29] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  200.980531][   T29] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u9:1: Failed to release dquot type 0
[  200.980546][   T29] loop5: lost filesystem error report for type 5 error -117
[  200.984543][ T7760] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  200.993555][ T7760] loop5: lost filesystem error report for type 5 error -117
[  201.009325][ T7760] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem
[  201.009343][ T7760] loop5: lost filesystem error report for type 5 error -117
[  201.009577][ T7760] EXT4-fs error (device loop5): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error
[  201.009595][ T7760] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  201.009807][ T7760] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  201.009823][ T7760] loop5: lost filesystem error report for type 5 error -117
[  201.104556][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1927'.
[  201.134505][T10816] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  201.841824][   T25] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  202.005780][   T25] usb 6-1: Using ep0 maxpacket: 8
[  202.009976][   T25] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  202.020365][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[  202.020420][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.030081][   T25] usb 6-1: config 0 descriptor??
[  202.453160][   T25] hid_parser_main: 8 callbacks suppressed
[  202.453235][   T25] logitech 0003:046D:CA04.0017: unknown main item tag 0x2
[  202.453282][   T25] logitech 0003:046D:CA04.0017: unknown main item tag 0x3
[  202.453320][   T25] logitech 0003:046D:CA04.0017: unknown main item tag 0x1
[  202.453361][   T25] logitech 0003:046D:CA04.0017: unknown main item tag 0x2
[  202.484243][   T25] logitech 0003:046D:CA04.0017: hidraw0: USB HID vff.fd Device [HID 046d:ca04] on usb-dummy_hcd.5-1/input0
[  202.490675][   T25] logitech 0003:046D:CA04.0017: no inputs found
[  202.659067][ T5676] usb 6-1: USB disconnect, device number 16
[  203.192005][T10896] profile_transition: 12 callbacks suppressed
[  203.194859][T10896] profile_transition: unconfined exec no attachment
[  203.194939][T10896] apparmor_bprm_creds_for_exec: 12 callbacks suppressed
[  203.200970][T10896] apparmor_bprm_creds_for_exec: label build failed
[  203.345821][T10910] profile_transition: unconfined exec no attachment
[  203.345876][T10910] apparmor_bprm_creds_for_exec: label build failed
[  203.366502][T10913] profile_transition: unconfined exec no attachment
[  203.366564][T10913] apparmor_bprm_creds_for_exec: label build failed
[  203.838668][T10937] loop5: detected capacity change from 0 to 40427
[  203.842142][T10937] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  203.842159][T10937] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  203.844784][T10937] F2FS-fs (loop5): invalid crc value
[  203.905832][T10937] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  203.914747][T10937] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  203.914820][T10937] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  204.427610][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1995'.
[  204.525007][T10977] hsr0: entered allmulticast mode
[  204.525107][T10977] hsr_slave_0: entered allmulticast mode
[  204.525544][T10977] hsr_slave_1: entered allmulticast mode
[  204.526404][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1997'.
[  204.540214][T10977] hsr_slave_0: left promiscuous mode
[  204.552747][T10977] hsr_slave_1: left promiscuous mode
[  204.553385][T10977] tipc: Resetting bearer <eth:hsr0>
[  204.562122][T10977] hsr0 (unregistering): left allmulticast mode
[  204.562199][T10977] tipc: Disabling bearer <eth:hsr0>
[  204.772764][T10980] xt_CT: You must specify a L4 protocol and not use inversions on it
[  205.187123][T10986] hsr_slave_0: left promiscuous mode
[  205.194470][T10986] hsr_slave_1: left promiscuous mode
[  205.202355][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2003'.
[  205.219337][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2002'.
[  206.129644][T11027] loop5: detected capacity change from 0 to 256
[  206.727329][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2025'.
[  206.745961][T11041] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  206.749785][T11041] 8021q: adding VLAN 0 to HW filter on device bond1
[  207.419730][T11083] loop5: detected capacity change from 0 to 128
[  207.421589][T11083] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  207.422129][T11083] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  207.435267][T11085] profile_transition: unconfined exec no attachment
[  207.435321][T11085] apparmor_bprm_creds_for_exec: label build failed
[  207.454772][T11086] profile_transition: unconfined exec no attachment
[  207.454833][T11086] apparmor_bprm_creds_for_exec: label build failed
[  207.718287][ T2096] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  208.100592][ T2096] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  208.104292][ T2096] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  208.104337][ T2096] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  208.104365][ T2096] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 9
[  208.104392][ T2096] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26228, setting to 1024
[  208.104427][ T2096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.115419][T11083] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  208.115463][T11083] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  208.115501][T11083] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  208.116435][ T2096] pl2303 6-1:1.0: pl2303 converter detected
[  208.117799][ T2096] usb 6-1: pl2303 converter now attached to ttyUSB0
[  208.490939][T11083] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  208.496519][T11083] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  208.511632][T11083] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  208.513100][T11083] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  208.513463][T11083] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  208.780974][T11081] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  208.783315][T11081] pl2303 ttyUSB0: error sending break = -32
[  208.785643][ T1839] usb 6-1: USB disconnect, device number 17
[  208.796104][ T1839] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  208.796445][ T1839] pl2303 6-1:1.0: device disconnected
[  209.348499][ T7760] FAT-fs (loop5): error, invalid access to FAT (entry 0xffff0000)
[  209.348549][ T7760] FAT-fs (loop5): Filesystem has been set read-only
[  209.356145][ T7760] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  210.089574][T11163] loop5: detected capacity change from 0 to 32768
[  210.130987][T11163]  loop5: p1 p3 < >
[  210.221090][ T6043] udevd[6043]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  210.221336][ T5624] udevd[5624]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  210.346191][T11175] profile_transition: unconfined exec no attachment
[  210.346259][T11175] apparmor_bprm_creds_for_exec: label build failed
[  210.367690][T11176] profile_transition: unconfined exec no attachment
[  210.367774][T11176] apparmor_bprm_creds_for_exec: label build failed
[  210.520230][ T2096] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  210.674879][ T2096] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  210.678767][ T2096] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.678848][ T2096] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  210.688543][ T2096] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.688576][ T2096] usb 6-1: Product: syz
[  210.688606][ T2096] usb 6-1: Manufacturer: syz
[  210.688630][ T2096] usb 6-1: SerialNumber: syz
[  210.787873][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2090'.
[  211.864100][T11252] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2113'.
[  213.527627][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2125'.
[  213.565788][ T2096] usb 6-1: USB disconnect, device number 18
[  213.596666][T11292] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  213.853104][T11299] loop5: detected capacity change from 0 to 256
[  213.855415][T11299] exfat: Invalid uid '0x00000000ffffffff'
[  213.858172][T11299] bpf: Bad value for 'uid'
[  213.991941][T11313] loop5: detected capacity change from 0 to 64
[  214.014440][T11313] syz.5.2141: attempt to access beyond end of device
[  214.014440][T11313] loop5: rw=8388608, sector=8190, nr_sectors = 2 limit=64
[  214.026259][T11313] Buffer I/O error on dev loop5, logical block 4095, async page read
[  214.030399][T11313] syz.5.2141: attempt to access beyond end of device
[  214.030399][T11313] loop5: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  214.030454][T11313] Buffer I/O error on dev loop5, logical block 512, async page read
[  214.030542][T11313] syz.5.2141: attempt to access beyond end of device
[  214.030542][T11313] loop5: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  214.030553][T11313] Buffer I/O error on dev loop5, logical block 56576, async page read
[  214.035180][T11313] syz.5.2141: attempt to access beyond end of device
[  214.035180][T11313] loop5: rw=8388608, sector=8190, nr_sectors = 2 limit=64
[  214.035195][T11313] Buffer I/O error on dev loop5, logical block 4095, async page read
[  214.098008][T11319] loop5: detected capacity change from 0 to 1024
[  214.103492][T11319] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  214.106609][T11319] hfsplus: filesystem is marked journaled, leaving read-only.
[  214.348244][   T25] kernel read not supported for file /zero (pid: 25 comm: kworker/1:0)
[  214.723007][T11343] ptrace attach of "/syz-executor exec"[8093] was attempted by "/syz-executor exec"[11343]
[  215.097940][T11359] xt_CT: You must specify a L4 protocol and not use inversions on it
[  215.307064][T11371] profile_transition: name lookup ix on error
[  215.307190][T11371] apparmor_bprm_creds_for_exec: label build failed
[  215.523058][T11373] loop5: detected capacity change from 0 to 512
[  215.600878][T11373] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory
[  215.600933][T11373] loop5: lost filesystem error report for type 5 error -12
[  215.603529][T11373] EXT4-fs (loop5): 2 truncates cleaned up
[  215.604293][T11373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.729747][ T7760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.273271][   T34] audit: type=1800 audit(216.153:246): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.2171" name="file1" dev="tmpfs" ino=3584 res=0 errno=0
[  216.488371][T11397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2173'.
[  216.587048][   T34] audit: type=1800 audit(216.463:247): pid=11402 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.2175" name="nullb0" dev="tmpfs" ino=3607 res=0 errno=0
[  216.644499][T11406] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  216.645862][T11405] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  216.720981][T11414] loop5: detected capacity change from 0 to 512
[  216.762965][T11418] xt_hashlimit: size too large, truncated to 1048576
[  216.773981][T11420] tipc: Can't bind to reserved service type 0
[  216.795846][T11421] profile_transition: unconfined exec no attachment
[  216.795961][T11421] apparmor_bprm_creds_for_exec: label build failed
[  216.907072][T11432] loop5: detected capacity change from 0 to 128
[  216.941258][T11432] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  216.979397][ T7760] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  217.031359][T11438] ovs-s: entered promiscuous mode
[  217.053589][T11438] openvswitch: ovs-s: Dropping previously announced user features
[  218.179202][T11488] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2212'.
[  218.480140][ T7299] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  218.630889][ T7299] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  218.635639][ T7299] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  218.638901][ T7299] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7
[  218.638915][ T7299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  218.638945][ T7299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  218.638953][ T7299] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  218.655381][ T7299] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  218.657902][ T7299] usb 6-1: Manufacturer: syz
[  218.661146][ T7299] usb 6-1: config 0 descriptor??
[  218.880628][ T7299] usb 6-1: USB disconnect, device number 19
[  219.274099][T11512] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2223'.
[  219.277234][T11512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2223'.
[  219.438026][   T34] audit: type=1326 audit(219.313:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11522 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf939e159 code=0x7ffc0000
[  219.440154][   T34] audit: type=1326 audit(219.313:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11522 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf939e159 code=0x7ffc0000
[  219.440188][   T34] audit: type=1326 audit(219.313:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11522 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf939e159 code=0x7ffc0000
[  219.440215][   T34] audit: type=1326 audit(219.313:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11522 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf939e159 code=0x7ffc0000
[  219.473832][   T34] audit: type=1326 audit(219.353:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11522 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9bf939e159 code=0x7ffc0000
[  219.474010][   T34] audit: type=1326 audit(219.353:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11522 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf939e159 code=0x7ffc0000
[  219.474038][   T34] audit: type=1326 audit(219.353:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11522 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf939e159 code=0x7ffc0000
[  219.474340][   T34] audit: type=1326 audit(219.353:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11522 comm="syz.5.2228" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9bf939e159 code=0x7ffc0000
[  219.855341][T11537] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2234'.
[  219.874971][ T1110] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  219.954982][T11546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.453584][T11570] bond0: entered promiscuous mode
[  220.453637][T11570] bond_slave_0: entered promiscuous mode
[  220.454199][T11570] bond_slave_1: entered promiscuous mode
[  220.458216][T11570] batadv0: entered promiscuous mode
[  220.458738][T11570] debugfs: 'hsr0' already exists in 'hsr'
[  220.458748][T11570] Cannot create hsr debugfs directory
[  220.461790][T11570] 8021q: adding VLAN 0 to HW filter on device hsr0
[  220.571878][T11578] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2252'.
[  220.703562][T11594] overlayfs: failed to clone upperpath
[  221.006977][T11614] profile_transition: unconfined exec no attachment
[  221.007067][T11614] apparmor_bprm_creds_for_exec: label build failed
[  221.065944][T11616] netlink: 'syz.3.2266': attribute type 6 has an invalid length.
[  221.070099][ T1839] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  221.220226][ T1839] usb 6-1: Using ep0 maxpacket: 8
[  221.223670][ T1839] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  221.228392][ T1839] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[  221.228448][ T1839] usb 6-1: config 6 has no interface number 0
[  221.228500][ T1839] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  221.228516][ T1839] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  221.228531][ T1839] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  221.228546][ T1839] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  221.232539][ T1839] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  221.232556][ T1839] usb 6-1: Product: syz
[  221.232565][ T1839] usb 6-1: Manufacturer: syz
[  221.232574][ T1839] usb 6-1: SerialNumber: syz
[  221.244060][ T1839] hso 6-1:6.2: Failed to find BULK eps
[  221.443929][ T1839] usb 6-1: USB disconnect, device number 20
[  221.977776][T11639] UBIFS error (pid: 11639): cannot open "ubi0:testvol", error -19
[  222.041255][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2277'.
[  222.310098][   T25] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  222.460097][   T25] usb 6-1: Using ep0 maxpacket: 16
[  222.462712][   T25] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  222.467533][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.472806][   T25] usb 6-1: config 0 descriptor??
[  222.478403][   T25] gspca_main: sonixj-2.14.0 probing 0471:0327
[  223.297694][T11673] profile_transition: name lookup ix on error
[  223.297810][T11673] apparmor_bprm_creds_for_exec: label build failed
[  223.906823][T11679] fuse: fd is not a fuse device
[  224.492177][   T25] gspca_sonixj: reg_r err -71
[  224.492242][   T25] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  224.498915][   T25] usb 6-1: USB disconnect, device number 21
[  224.830608][ T5011] Bluetooth: hci2: hardware error 0x04
[  225.033667][T11728] FAULT_INJECTION: forcing a failure.
[  225.033667][T11728] name failslab, interval 1, probability 0, space 0, times 0
[  225.037626][T11728] CPU: 1 UID: 0 PID: 11728 Comm: syz.5.2316 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  225.037656][T11728] Tainted: [L]=SOFTLOCKUP
[  225.037660][T11728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.037666][T11728] Call Trace:
[  225.037670][T11728]  <TASK>
[  225.037674][T11728]  dump_stack_lvl+0xe8/0x150
[  225.037690][T11728]  should_fail_ex+0x410/0x560
[  225.037704][T11728]  should_failslab+0xa8/0x100
[  225.037714][T11728]  __kmalloc_cache_noprof+0xa3/0x600
[  225.037727][T11728]  ? input_allocate_device+0x4e/0x2a0
[  225.037740][T11728]  ? input_allocate_device+0x4e/0x2a0
[  225.037755][T11728]  input_allocate_device+0x4e/0x2a0
[  225.037767][T11728]  uinput_ioctl_handler+0x187/0x15a0
[  225.037780][T11728]  ? __pfx_uinput_ioctl_handler+0x10/0x10
[  225.037794][T11728]  ? __fget_files+0x2a/0x420
[  225.037803][T11728]  ? __fget_files+0x3a2/0x420
[  225.037814][T11728]  ? bpf_lsm_file_ioctl+0x9/0x20
[  225.037825][T11728]  ? __pfx_uinput_ioctl+0x10/0x10
[  225.037834][T11728]  __se_sys_ioctl+0xfc/0x170
[  225.037867][T11728]  do_syscall_64+0x166/0x520
[  225.037878][T11728]  ? trace_irq_disable+0x3b/0x140
[  225.037886][T11728]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.037896][T11728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.037904][T11728] RIP: 0033:0x7f9bf939e159
[  225.037914][T11728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.037921][T11728] RSP: 002b:00007f9bfa24a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  225.037930][T11728] RAX: ffffffffffffffda RBX: 00007f9bf9625fa0 RCX: 00007f9bf939e159
[  225.037936][T11728] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  225.037941][T11728] RBP: 00007f9bf943506b R08: 0000000000000000 R09: 0000000000000000
[  225.037947][T11728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.037952][T11728] R13: 00007f9bf9626038 R14: 00007f9bf9625fa0 R15: 00007ffe9033c878
[  225.037965][T11728]  </TASK>
[  226.343221][T11758] profile_transition: unconfined exec no attachment
[  226.346404][T11758] apparmor_bprm_creds_for_exec: label build failed
[  226.369008][T11759] profile_transition: unconfined exec no attachment
[  226.369052][T11759] apparmor_bprm_creds_for_exec: label build failed
[  226.912440][ T5011] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  226.968718][   T34] kauditd_printk_skb: 6 callbacks suppressed
[  226.968770][   T34] audit: type=1326 audit(226.843:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11773 comm="syz.3.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65f79e159 code=0x7ffc0000
[  226.977904][   T34] audit: type=1326 audit(226.853:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11773 comm="syz.3.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65f79e159 code=0x7ffc0000
[  226.985926][   T34] audit: type=1326 audit(226.863:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11773 comm="syz.3.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb65f79e159 code=0x7ffc0000
[  226.986036][   T34] audit: type=1326 audit(226.863:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11773 comm="syz.3.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65f79e159 code=0x7ffc0000
[  226.986076][   T34] audit: type=1326 audit(226.863:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11773 comm="syz.3.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65f79e159 code=0x7ffc0000
[  227.008996][   T34] audit: type=1326 audit(226.883:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11773 comm="syz.3.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fb65f79e159 code=0x7ffc0000
[  227.009047][   T34] audit: type=1326 audit(226.883:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11773 comm="syz.3.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65f79e159 code=0x7ffc0000
[  227.009087][   T34] audit: type=1326 audit(226.883:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11773 comm="syz.3.2334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65f79e159 code=0x7ffc0000
[  227.127787][T11786] netlink: 'syz.5.2340': attribute type 29 has an invalid length.
[  227.130979][T11786] netlink: 'syz.5.2340': attribute type 29 has an invalid length.
[  227.134592][T11786] netlink: 'syz.5.2340': attribute type 29 has an invalid length.
[  227.265819][T11803] program syz.5.2348 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  227.294539][T11806] 9p: Bad value for 'rfdno'
[  227.661960][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2369'.
[  228.260141][ T2096] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  228.294444][T11888] : renamed from bond_slave_0 (while UP)
[  228.424005][ T2096] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  228.424952][ T2096] usb 6-1: unable to read config index 0 descriptor/start: -71
[  228.424977][ T2096] usb 6-1: can't read configurations, error -71
[  229.294732][T11929] loop5: detected capacity change from 0 to 256
[  229.295352][T11929] exfat: Deprecated parameter 'utf8'
[  229.295407][T11929] exfat: Deprecated parameter 'namecase'
[  229.298883][T11929] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  229.687217][T11944] loop5: detected capacity change from 0 to 32768
[  229.742088][T11944]  loop5: p1 p3 < >
[  229.817233][   T34] audit: type=1326 audit(229.693:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11945 comm="syz.6.2416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb12b9e159 code=0x7ffc0000
[  229.817280][   T34] audit: type=1326 audit(229.693:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11945 comm="syz.6.2416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb12b9e159 code=0x7ffc0000
[  229.924958][T11957] netlink: 'syz.3.2421': attribute type 23 has an invalid length.
[  230.009734][T11968] profile_transition: unconfined exec no attachment
[  230.009785][T11968] apparmor_bprm_creds_for_exec: label build failed
[  230.026104][T11969] profile_transition: unconfined exec no attachment
[  230.026132][T11969] apparmor_bprm_creds_for_exec: label build failed
[  230.145718][T11974] loop5: detected capacity change from 0 to 4096
[  230.165654][T11974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.199788][ T7760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.005486][T11996] jffs2: notice: (11996) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  232.410376][   T25] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  232.560886][   T25] usb 6-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  232.565169][   T25] usb 6-1: config 227 has an invalid interface number: 20 but max is 0
[  232.568221][   T25] usb 6-1: config 227 has no interface number 0
[  232.568256][   T25] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  232.568274][   T25] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  232.568291][   T25] usb 6-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  232.568307][   T25] usb 6-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  232.568324][   T25] usb 6-1: config 227 interface 20 has no altsetting 0
[  232.602281][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.605709][   T25] usb 6-1: Product: syz
[  232.607903][   T25] usb 6-1: Manufacturer: syz
[  232.610204][   T25] usb 6-1: SerialNumber: syz
[  232.615686][T12048] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  232.844210][   T25] usb 6-1: USB disconnect, device number 24
[  233.899696][T12094] fuse: fd is not a fuse device
[  233.972391][T12096] loop5: detected capacity change from 0 to 4096
[  233.975958][T12096] EXT4-fs: Ignoring removed orlov option
[  233.979030][T12096] EXT4-fs (loop5): invalid #clusters per group: 32768
[  234.036877][T12100] IPVS: Error connecting to the multicast addr
[  234.324212][T12115] nvmet: adding nsid 1 to subsystem testsubsys
[  234.335058][T12115] nvmet: failed to open file ./file: (-2)
[  234.531517][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2500'.
[  234.531574][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2500'.
[  234.588132][T12136] 9p: Bad value for 'rfdno'
[  234.992996][T12155] loop5: detected capacity change from 0 to 256
[  234.998673][T12155] exfat: Bad value for 'time_offset'
[  235.549367][T12165] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2517'.
[  235.730469][T12182] Cannot find set identified by id 0 to match
[  236.122303][T12196] 
[  236.123384][T12196] ======================================================
[  236.126264][T12196] WARNING: possible circular locking dependency detected
[  236.129111][T12196] syzkaller #0 Tainted: G             L     
[  236.131546][T12196] ------------------------------------------------------
[  236.133924][T12196] syz.3.2530/12196 is trying to acquire lock:
[  236.136073][T12196] ffff88810f4fabb8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_file_truncate+0xb6/0x170
[  236.140216][T12196] 
[  236.140216][T12196] but task is already holding lock:
[  236.143208][T12196] ffff888109d04460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  236.146589][T12196] 
[  236.146589][T12196] which lock already depends on the new lock.
[  236.146589][T12196] 
[  236.150161][T12196] 
[  236.150161][T12196] the existing dependency chain (in reverse order) is:
[  236.153194][T12196] 
[  236.153194][T12196] -> #4 (sb_writers#5){.+.+}-{0:0}:
[  236.156240][T12196]        sb_start_write+0x4d/0x1d0
[  236.158240][T12196]        mnt_want_write+0x41/0x90
[  236.159965][T12196]        lookup_open+0x1e6/0x1a40
[  236.161635][T12196]        path_openat+0x677/0x1d60
[  236.163299][T12196]        do_file_open+0x23e/0x4a0
[  236.164932][T12196]        filp_open+0x16d/0x1d0
[  236.166506][T12196]        nvmet_file_ns_enable+0x74/0x350
[  236.168365][T12196]        nvmet_ns_enable+0xaa/0x780
[  236.170095][T12196]        nvmet_ns_enable_store+0xd7/0x170
[  236.172057][T12196]        configfs_write_iter+0x337/0x430
[  236.173918][T12196]        vfs_write+0x612/0xba0
[  236.175835][T12196]        ksys_write+0x150/0x270
[  236.177804][T12196]        do_syscall_64+0x166/0x520
[  236.179564][T12196]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.181618][T12196] 
[  236.181618][T12196] -> #3 (&subsys->lock){+.+.}-{4:4}:
[  236.184031][T12196]        __mutex_lock+0x19d/0x1550
[  236.186059][T12196]        nvmet_ns_buffered_io_store+0xe1/0x200
[  236.188600][T12196]        configfs_write_iter+0x337/0x430
[  236.190964][T12196]        vfs_write+0x612/0xba0
[  236.192961][T12196]        ksys_write+0x150/0x270
[  236.195001][T12196]        do_syscall_64+0x166/0x520
[  236.197153][T12196]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.199803][T12196] 
[  236.199803][T12196] -> #2 (&p->frag_sem){++++}-{4:4}:
[  236.202832][T12196]        down_read+0x4a/0x330
[  236.204779][T12196]        configfs_write_iter+0x238/0x430
[  236.207117][T12196]        vfs_write+0x612/0xba0
[  236.209075][T12196]        ksys_write+0x150/0x270
[  236.211076][T12196]        do_syscall_64+0x166/0x520
[  236.213151][T12196]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.215749][T12196] 
[  236.215749][T12196] -> #1 (&buffer->mutex){+.+.}-{4:4}:
[  236.218745][T12196]        __mutex_lock+0x19d/0x1550
[  236.220807][T12196]        configfs_read_iter+0x70/0x620
[  236.223039][T12196]        __kernel_read+0x4ca/0x960
[  236.225091][T12196]        integrity_kernel_read+0x89/0xd0
[  236.227363][T12196]        ima_calc_file_hash+0x451/0x890
[  236.229573][T12196]        ima_collect_measurement+0x51b/0xa00
[  236.232020][T12196]        process_measurement+0x1272/0x1c10
[  236.234382][T12196]        ima_file_check+0xe1/0x130
[  236.236462][T12196]        security_file_post_open+0xb3/0x260
[  236.238831][T12196]        path_openat+0x1485/0x1d60
[  236.240885][T12196]        do_file_open+0x23e/0x4a0
[  236.242946][T12196]        do_sys_openat2+0x115/0x200
[  236.244860][T12196]        __x64_sys_openat+0x138/0x170
[  236.246885][T12196]        do_syscall_64+0x166/0x520
[  236.248938][T12196]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.251485][T12196] 
[  236.251485][T12196] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  236.254953][T12196]        __lock_acquire+0x1520/0x2cf0
[  236.257149][T12196]        lock_acquire+0x106/0x350
[  236.259178][T12196]        __mutex_lock+0x19d/0x1550
[  236.261247][T12196]        ima_file_truncate+0xb6/0x170
[  236.263422][T12196]        security_file_truncate+0x118/0x240
[  236.265837][T12196]        path_openat+0x1569/0x1d60
[  236.267970][T12196]        do_file_open+0x23e/0x4a0
[  236.270093][T12196]        do_sys_openat2+0x115/0x200
[  236.272281][T12196]        __x64_sys_openat+0x138/0x170
[  236.274499][T12196]        do_syscall_64+0x166/0x520
[  236.276648][T12196]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.279312][T12196] 
[  236.279312][T12196] other info that might help us debug this:
[  236.279312][T12196] 
[  236.283489][T12196] Chain exists of:
[  236.283489][T12196]   &ima_iint_mutex_key[depth] --> &subsys->lock --> sb_writers#5
[  236.283489][T12196] 
[  236.289097][T12196]  Possible unsafe locking scenario:
[  236.289097][T12196] 
[  236.292155][T12196]        CPU0                    CPU1
[  236.294355][T12196]        ----                    ----
[  236.296610][T12196]   rlock(sb_writers#5);
[  236.298403][T12196]                                lock(&subsys->lock);
[  236.301219][T12196]                                lock(sb_writers#5);
[  236.303994][T12196]   lock(&ima_iint_mutex_key[depth]);
[  236.306228][T12196] 
[  236.306228][T12196]  *** DEADLOCK ***
[  236.306228][T12196] 
[  236.309581][T12196] locks held by syz.3.2530/12196: 1, last CPU#1:
[  236.312187][T12196]  #0: ffff888109d04460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  236.315954][T12196] 
[  236.315954][T12196] stack backtrace:
[  236.318350][T12196] CPU: 1 UID: 0 PID: 12196 Comm: syz.3.2530 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  236.322802][T12196] Tainted: [L]=SOFTLOCKUP
[  236.324610][T12196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  236.328779][T12196] Call Trace:
[  236.330174][T12196]  <TASK>
[  236.331417][T12196]  dump_stack_lvl+0xe8/0x150
[  236.333341][T12196]  print_circular_bug+0x2e1/0x300
[  236.335438][T12196]  check_noncircular+0x12e/0x150
[  236.337449][T12196]  __lock_acquire+0x1520/0x2cf0
[  236.339460][T12196]  ? kasan_quarantine_put+0xbb/0x1f0
[  236.341751][T12196]  ? ima_file_truncate+0xb6/0x170
[  236.343869][T12196]  lock_acquire+0x106/0x350
[  236.345784][T12196]  ? ima_file_truncate+0xb6/0x170
[  236.347805][T12196]  __mutex_lock+0x19d/0x1550
[  236.349619][T12196]  ? ima_file_truncate+0xb6/0x170
[  236.351748][T12196]  ? ima_file_truncate+0xb6/0x170
[  236.353829][T12196]  ? __pfx___mutex_lock+0x10/0x10
[  236.355931][T12196]  ? apparmor_file_truncate+0x39f/0x470
[  236.358223][T12196]  ? __pfx_apparmor_file_truncate+0x10/0x10
[  236.360672][T12196]  ima_file_truncate+0xb6/0x170
[  236.362699][T12196]  security_file_truncate+0x118/0x240
[  236.364957][T12196]  path_openat+0x1569/0x1d60
[  236.366902][T12196]  do_file_open+0x23e/0x4a0
[  236.368808][T12196]  ? __pfx_do_file_open+0x10/0x10
[  236.370944][T12196]  ? _raw_spin_unlock+0x28/0x50
[  236.372974][T12196]  ? alloc_fd+0x651/0x6c0
[  236.374782][T12196]  do_sys_openat2+0x115/0x200
[  236.376754][T12196]  ? __se_sys_futex+0x3a8/0x450
[  236.378803][T12196]  ? __pfx_do_sys_openat2+0x10/0x10
[  236.380979][T12196]  ? rcu_is_watching+0x16/0xb0
[  236.382995][T12196]  __x64_sys_openat+0x138/0x170
[  236.385027][T12196]  do_syscall_64+0x166/0x520
[  236.386963][T12196]  ? trace_irq_disable+0x3b/0x140
[  236.389097][T12196]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.391628][T12196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.394123][T12196] RIP: 0033:0x7fb65f79e159
[  236.396021][T12196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.403837][T12196] RSP: 002b:00007fb660634028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  236.407259][T12196] RAX: ffffffffffffffda RBX: 00007fb65fa25fa0 RCX: 00007fb65f79e159
[  236.410446][T12196] RDX: 0000000000006202 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  236.413614][T12196] RBP: 00007fb65f83506b R08: 0000000000000000 R09: 0000000000000000
[  236.416780][T12196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.419896][T12196] R13: 00007fb65fa26038 R14: 00007fb65fa25fa0 R15: 00007ffeb51e8a58
[  236.423130][T12196]  </TASK>
[  237.310266][ T5011] Bluetooth: hci0: command 0x0406 tx timeout
[  240.316147][ T5060] udevd[5060]: worker [5612] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time
[  245.471426][ T2427] pvrusb2: request_firmware fatal error with code=-110
[  245.474040][ T2427] pvrusb2: Failure uploading firmware1
[  245.474046][ T2427] pvrusb2: Device initialization was not successful.
[  245.474049][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  245.474052][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  245.474089][ T5683] pvrusb2: Device being rendered inoperable
